keystone_group_role type required

[mellotron]

In my deployment, I have a FreeIPA box which houses my users' LDAP accounts and all. There's also a openstack-admins and openstack-users group.

I am able to successfully configure my domain using the keystone_domain, keystone_domain_config and keystone_tenant types.

However, my users' groups need to be added to the new tenant so that they're authorized for a tenant to be able to log in.

I think I require a keystone_group_role type to be able to automate these steps:

$ openstack role add --project production --group openstack-users --domain companyname _member_
$ openstack role add --project production --group openstack-admin --domain companyname admin