Default keyclock_tar_path to public URL
If there is going to be a conditional block for downloading and unarchiving v. copying from a local source and unarchiving based on the RHN_CONNECT variable, then I would suggest defaulting the keycloak_tar_path to the public url. i.e. http://downloads.jboss.org/keycloak/8.0.1/keycloak-8.0.1.tar.gz
Essentially, the KEYCLOAK_TAR_PATH environment variable would then only be specified if RHN_CONNECT is set to disconnect.