Assign service role for ironic user

We expect service role is assigned to a user who use service
user token feature.

Currently ironic uses it to communicate with glance, so we
should assign the role to ironic user in keystone identity.

Change-Id: Ib6836a7593d165466be34c63a20463a3b7b817a8

deployment/ironic/ironic-api-container-puppet.yaml

@@ -113,6 +113,9 @@ outputs:
             admin: {get_param: [EndpointMap, IronicAdmin, uri_no_suffix]}
           users:
             ironic:
+              roles:
+               - admin
+               - service
               password: {get_param: IronicPassword}
           region: {get_param: KeystoneRegion}
           service: 'baremetal'