Work around shade domain bugs in heat setup
Work around shade domain bugs in heat setup

Shade backed modules don't support domains very well, when Keystone has
domain specific configuration enabled, which prevents keystone from
returning all users when doing an API listing.

To work around this, we track when we add the heat admin user, and only
if we add that user do we attempt to use the command line to assign a
role. The os_user_role module cannot work here as it can't find the user
we're trying to manipulate, because it doesn't look in the right domain.

This work around can go away when things like
https://storyboard.openstack.org/?#!/story/2000615 are fixed.

masteinhauser/ursula,narengan/ursula,wupeiran/ursula,ryshah/ursula,sivakom/ursula,zrs233/ursula,blueboxgroup/ursula,fancyhe/ursula,wupeiran/ursula,edtubillara/ursula,nirajdp76/ursula,rongzhus/ursula,fancyhe/ursula,lihkin213/ursula,persistent-ursula/ursula,nirajdp76/ursula,panxia6679/ursula,ryshah/ursula,nirajdp76/ursula,knandya/ursula,sivakom/ursula,persistent-ursula/ursula,zrs233/ursula,ddaskal/ursula,masteinhauser/ursula,panxia6679/ursula,pgraziano/ursula,blueboxgroup/ursula,lihkin213/ursula,masteinhauser/ursula,edtubillara/ursula,nirajdp76/ursula,ddaskal/ursula,twaldrop/ursula,edtubillara/ursula,wupeiran/ursula,pgraziano/ursula,narengan/ursula,rongzhus/ursula,zrs233/ursula,narengan/ursula,channus/ursula,rongzhus/ursula,blueboxgroup/ursula,wupeiran/ursula,pgraziano/ursula,masteinhauser/ursula,ddaskal/ursula,knandya/ursula,channus/ursula,lihkin213/ursula,panxia6679/ursula,ddaskal/ursula,sivakom/ursula,ryshah/ursula,knandya/ursula,knandya/ursula,edtubillara/ursula,lihkin213/ursula,persistent-ursula/ursula,twaldrop/ursula,rongzhus/ursula,narengan/ursula,fancyhe/ursula,pgraziano/ursula,fancyhe/ursula,panxia6679/ursula,twaldrop/ursula,channus/ursula,persistent-ursula/ursula,zrs233/ursula,ryshah/ursula,blueboxgroup/ursula,twaldrop/ursula,channus/ursula