When is set LDAP default role for OpenShift images, all roles from ldap are ignored and user is not able to log into the application. When default role is not set, roles from LDAP are used correctly and user are able to log into the application. Default role is set for image by environment variable AUTH_LDAP_DEFAULT_ROLE.
Through KieApp LDAP default role is set by property, e.g. like this:

spec: 
  auth: 
    ldap: 
      ...
      defaultRole: guest
  ...

Probably the root cause is in conflict of two role mappers used in security domain configuration. This is part of kie image configuration script jboss-kie-wildfly-elytron.sh.