After talking to Wei Li, it seems that the CRs are not created because of owner reference in theirs definitions. I tried to remove owner reference field from keycloak-realm CR definition - then I was able to create the CR.

ping Ali Ok Laura Fitzgerald