Merge "Enable _member_ role for undercloud install."

environments/undercloud.yaml

@@ -43,6 +43,7 @@ parameter_defaults:
   KernelIpForward: 1
   KernelIpNonLocalBind: 1
   KeystoneCorsAllowedOrigin: '*'
+  KeystoneEnableMember: true
   # Increase the Token expiration time until we fix the actual session bug:
   # https://bugs.launchpad.net/tripleo/+bug/1761050
   TokenExpiration: 14400

puppet/services/keystone.yaml

@@ -309,6 +309,10 @@ parameters:
     default: ''
     description: Indicate whether this resource may be shared with the domain received in the request
                  "origin" header.
+  KeystoneEnableMember:
+    description: Create the _member_ role, useful for undercloud deployment.
+    type: boolean
+    default: False
 
 parameter_groups:
 - label: deprecated
@@ -366,6 +370,7 @@ outputs:
             - cors_allowed_origin_unset
             - {}
             - keystone::cors::allowed_origin: {get_param: KeystoneCorsAllowedOrigin}
+          - keystone_enable_member: {get_param: KeystoneEnableMember}
           - keystone::database_connection:
               make_url:
                 scheme: {get_param: [EndpointMap, MysqlInternal, protocol]}