I use openshift to apply a wildcard certificat to my routes to keycloak.  I can add https that way.  However, even though I can apply https to the route and hard code https into keycloak.json files for the auth-server-url, I get the Token audience doesn't match domain errors because some auto generated url by keycloak thinks everything is http.  I really don't want to have to go through the work of setting up a keystore and everything else within wildfly when I really don't need it since my route in openshift handles the https part.  Is there a way around this?