[QUEENS] Added check cluster node role for bootstrap keystone admin user.

  * Admin user bootstrap procedure should be executed once on the primary ctl node.

Change-Id: Ib65457cdd1d64d1bfda3f9652cc4a187ba946b60
Related-PROD: PROD-29377
(cherry picked from commit 556eb2a126ba0ea4a8dfb15001d395c1f43377c1)
diff --git a/keystone/server.sls b/keystone/server.sls
index 2c9e6b1..886b5e8 100644
--- a/keystone/server.sls
+++ b/keystone/server.sls
@@ -425,7 +425,7 @@
   - runas: 'keystone'
   - unless:
       . /var/lib/keystone/keystonercv3; openstack endpoint list --service identity --interface internal -f value -c URL  |grep {{ server.bind.get('port', 5000) }}
-    {%- if grains.get('noservices', False) %}
+    {%- if server.get('role', 'secondary') != 'primary' or grains.get('noservices', False) %}
   - onlyif: /bin/false
     {%- endif %}
   - require: