Our community docker image already separates the DBs for Keycloak and UPS data: https://github.com/aerogear/dockerfiles/blob/master/wildfly/configuration/xml/standalone-full-sample.xml#L163-L196
One Openshift, we just need two DB services for: