Point haproxy on controllers to service_endpoint vip for keystone
Point haproxy on controllers to service_endpoint vip for keystone

Keystone on controllers are used to proxy traffic to public_vip
so that public SSL works. Now traffic will proxy to haproxy on
separate-keystone HAProxy and then to keystone backed by apache.

This change enables a deployer to remove any given keystone node,
but keep HAproxy reporting as UP because plugins cannot trigger
controller redeploy.

Change-Id: If54c7d4f9cf069fc932b354ce6f263d5a87b3969
Partial-Bug: #1544023

stackforge/fuel-plugin-detach-keystone