Apply via:
KEYCLOAK_URL=https://10.x.x.x:8443 KEYCLOAK_CLIENT_SECRET=blah terragrunt apply
You must use the IP address and not the hostname, or DNS resolution will fail (for whatever reason, it doesn't use the VPN). You should only need to run against one server.