diff --git a/patchday.yml b/patchday.yml
index f2d9914..f3003d5 100644
--- a/patchday.yml
+++ b/patchday.yml
@@ -212,7 +212,7 @@
 
 # due to bloody dependencies in SMA application startup, iam must be available during startup
 # => patching IAM service outsourced in separate part to make sure that is up and running
-- hosts: iam
+- hosts: iam,keycloak
   serial: 10
   become: yes
   tasks:
@@ -257,7 +257,7 @@
         state: present
       loop: '{{ docker_compose_services.files }}'
 
-- hosts: all,!elastic,!postgres,!k8s_cluster,!iam,!restore
+- hosts: all,!elastic,!postgres,!k8s_cluster,!iam,!restore,!keycloak
   serial: 10
   become: yes
   tasks: