Fix 3node deployment
Fix 3node deployment

The keystone role needs to be on the same node as the mysql/haproxy node
due to a TLS requirement that the haproxy be on the 'primary' tagged
node. Since the keystone bootstrap stuff only runs on the primary node
as well, they need to be tied together.

Change-Id: Ifa7ed93993082466a2a6ddff56bee58b074be512
Closes-Bug: #1768142

openstack/tripleo-heat-templates,dprince/tripleo-heat-templates,dprince/tripleo-heat-templates,openstack/tripleo-heat-templates