diff --git a/chart/values.yaml b/chart/values.yaml
index 19cb366ebf60f4859c2d67350d79dd50c2b33426..374bb864083840d893e6039e273deb76585f11a1 100644
--- a/chart/values.yaml
+++ b/chart/values.yaml
@@ -1378,7 +1378,7 @@ addons:
     git:
       repo: https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/keycloak.git
       path: "./chart"
-      tag: "18.4.0-bb.1"
+      tag: "18.4.0-bb.2"
 
     database:
       # -- Hostname of a pre-existing database to use for Keycloak.
diff --git a/docs/assets/configs/example/dev-sso-values.yaml b/docs/assets/configs/example/dev-sso-values.yaml
index baf6b3c525195570054bc051e597d1e1cf9ee66e..688b030c65084aeeb88543d7825704c757e2fb42 100644
--- a/docs/assets/configs/example/dev-sso-values.yaml
+++ b/docs/assets/configs/example/dev-sso-values.yaml
@@ -272,13 +272,17 @@ addons:
           roles:
             - "nx-admin"
     # NexusNotes: |
-    #   Login to Nexus Admin UI and then get the x509 certificate from this path
+    #   get nexus x509 cert from Nexus Admin UI
     #     https://nexus.bigbang.dev/service/rest/v1/security/saml/metadata
-    #   copy and paste the nexus single line certificate into a text file and save it
+    #   copy and paste the nexus single line cert into a text file and save it
     #     vi nexus-x509.txt
     #     -----BEGIN CERTIFICATE-----
     #     put-single-line-nexus-x509-certificate-here
     #     -----END CERTIFICATE-----
     #   make a valid pem file with proper wrapping at 64 characters per line
     #     fold -w 64 nexus-x509.txt > nexus.pem
-    #   In Keycloak go to the nexus client and on the Keys tab import the nexus.pem file in two places
+    #   make a PKCS12 from nexus.pem
+    #     keytool -import -alias alias -file nexus.pem -keystore nexus.p12 -storetype PKCS12 -storepass password
+    #   In Keycloak go to the nexus client and on the Keys tab import PKCS12 using the nexus.p12 file in two places
+    #   key alias = alias
+    #   store password = password
diff --git a/docs/assets/configs/example/keycloak-dev-values.yaml b/docs/assets/configs/example/keycloak-dev-values.yaml
index 969e777964fde8a13bca877038cf06af24399027..1972826494556d30062ac36356554248cd13f110 100644
--- a/docs/assets/configs/example/keycloak-dev-values.yaml
+++ b/docs/assets/configs/example/keycloak-dev-values.yaml
@@ -78,6 +78,8 @@ addons:
           value: ispn
         - name: KC_CACHE_STACK
           value: kubernetes
+        - name: KC_METRICS_ENABLED
+          value: "true"
 
       secrets:
         env:
diff --git a/docs/assets/configs/example/keycloak-prod-values.yaml b/docs/assets/configs/example/keycloak-prod-values.yaml
index b47616a4981a6032bd5bc731df317f3bb0797f1b..3ebf05d657b400ebe4145309756ed369dac2e568 100644
--- a/docs/assets/configs/example/keycloak-prod-values.yaml
+++ b/docs/assets/configs/example/keycloak-prod-values.yaml
@@ -98,6 +98,9 @@ addons:
           value: ispn
         - name: KC_CACHE_STACK
           value: kubernetes
+        - name: KC_METRICS_ENABLED
+          value: "true"
+
 
       secrets:
         env:
diff --git a/tests/test-values.yaml b/tests/test-values.yaml
index 4646a5883c029db3d6b9ae4f358ecb757f0c65a1..5bb21df97d386c868160f6a72ede44bf283b514f 100644
--- a/tests/test-values.yaml
+++ b/tests/test-values.yaml
@@ -1483,7 +1483,7 @@ addons:
             quarkus.properties: '{{ .Files.Get "resources/dev/quarkus.properties" }}'
       extraInitContainers: |-
         - name: plugin
-          image: registry1.dso.mil/ironbank/big-bang/p1-keycloak-plugin:3.1.0
+          image: registry1.dso.mil/ironbank/big-bang/p1-keycloak-plugin:3.2.0
           imagePullPolicy: Always
           command:
           - sh