When Keycloak Operator installs Keyclaok, it's always behind a Reverse Proxy (either it's HAProxy with Route or NGINX with Ingress). Running Keycloak behind a Reverse Proxy requires setting PROXY_ADDRESS_FORWARDING environment variable in the container image.
The Operator uses two deployment types - Keycloak and RHSSO. In case of Keycloak, the container environment variables should include PROXY_ADDRESS_FORWARDING. In case of RHSSO, we need no action, as it uses proxy settings by default.
A day for 1 person.