Probably some of the problems will go away with decoupled keycloak. IIRC there was an issue where the KC auth stuff didn't initialize correctly if they weren't called from localhost first.

Regardless, the openshift template doesn't match 1.2.0 right now.