See https://github.com/jboss-container-images/jboss-eap-7-openshift-image/pull/97 and https://issues.jboss.org/browse/KEYCLOAK-7680

CD is using the SSO CD stream for adapters. For 7.2 GA, we'll need to either switch this to an SSO GA release, or drop this from the template until a GA is available.