What
Provision
Implement the provision of a keycloak instance based on the definition in the CR. It does not need to create the realms or users at this point it just needs to do a provision. Initially it should do one via the service catalog using our existing APB. Once provisioned we will need to find the secret created (should be labelled with the serviceInstanceID) and update the CR

 Spec.AdminCredentials

Once provisioned the keycloak resource status should be set as provisioned (other areas will see this and setup the sharedserviceplan and take care of marking the resource as ready)

Deprovision
Implement deprovision. This happens if the keycloak resource is marked for deletion. Currently we will again invoke the catalog to delete the service instance and let the APB do the clean up.
Once the service instance is removed succesfully we can then let the keycloak resource be removed by removing out finalizer

metadata.finalizers.finalizer.org.aerogrear.keycloak

will need to coordinate with the person do the keycloak setup