Prerequisite heat/keystone steps missing

[Joe D'Andrea]

Concerning OpenStack Heat, installation Step 5:

https://docs.openstack.org/project-install-guide/orchestration/newton/install-ubuntu.html

Please ensure OSH is creating/assigning the following at install/config time:

1. *heat* domain
2. *heat_domain_admin* user with an *admin* role
3. *heat_stack_owner* role assigned to *demo* project/user
4. *heat_stack_user* role (left unassigned)

Admins can then assign *heat_stack_owner* to any projects/users as needed.

Without these users/roles in place, various aspects of Heat will not work, among them wait conditions and orchestration signaling.

[Michael Glaser (mikeg451)]

Do the user names need to be exactly those names?

This appears to be partly done:
* heat domain is created when user heat-domain is created.
* heat_domain_admin is created as user heat-trust.
* heat_stack_owner role is not created, but Helm needs to create with a user to be able to create a role.
* heat_stack_user is created with the name heat-domain, although role is currently set to admin rather than none.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/549194

[OpenStack Infra (hudson-openstack)]

Change abandoned by Tin Lam (<email address hidden>) on branch: master
Review: https://review.openstack.org/549194

[Tin Lam (lamt)]

this should be better handled by value override.