Currently, the helm chart includes RBAC for ClusterRole and ClusterRoleBinding for the serviceAccount.
This is not neccessary since the keycloak helm release is in a single namespacs.
Thus, a Role and RoleBinding should be sufficient to use all the DNS lookup of pod names etc in the StatefulSet.