I was able to do couple of things and in particular:
- serve keycloak within a subpath adding a jbosscli startup script
- change the probes to let keycloak start
but now, I noticed that the keycloak operator is not able to communicate anymore with the instance since it tries to communicate with /auth but it is actually served under /<mypath>/auth.
I don't have any other solution here in my mind and I'm going crazy...