[rocky] Define keystone domain for heat stack
Create domain for heat stack user by keystone state,
previously it was doing by heat-keystone-setup-domain script.
Change-Id: Ib7e62a06c6ae37f5ce2edaea9f2070c79918e63a
Related-Prod: PROD-23724
diff --git a/keystone/client/v3/service/heat.yml b/keystone/client/v3/service/heat.yml
index a1b248f..eb63e5f 100644
--- a/keystone/client/v3/service/heat.yml
+++ b/keystone/client/v3/service/heat.yml
@@ -5,6 +5,9 @@
client:
resources:
v3:
+ domains:
+ heat_user_domain:
+ description: 'Contains users and projects created by heat'
roles:
heat_stack_user:
name: heat_stack_user
@@ -20,6 +23,14 @@
service_admin:
name: admin
project_id: service
+ heat_domain_admin:
+ password: ${_param:heat_domain_admin_password}
+ email: ${_param:admin_email}
+ roles:
+ heat_stack_admin:
+ name: admin
+ role_domain_id: heat_user_domain
+ domain_id: heat_user_domain
services:
heat:
type: orchestration