Add in-flight validation for keystone container

This will allow to get an Upstream CI job ensuring in-flight validations
do work, and that the deploy has proper access to the
tripleo-validations ansible roles.

Change-Id: I63effa601546be7ac949e8d4a694740960c7d5be
Related-Bug: #1850177

deployment/keystone/keystone-container-puppet.yaml

@@ -689,6 +689,22 @@ outputs:
             user: root
             command:
               [ 'keystone', 'pkill', '--signal', 'USR1', 'httpd' ]
+      deploy_steps_tasks:
+        - name: validate keystone service state
+          when:
+            - container_cli == 'podman'
+            - not container_healthcheck_disabled
+            - step|int == 4
+          tags:
+            - opendev-validation
+            - opendev-validation-keystone
+          block:
+            - name: Get keystone service healthcheck status
+              import_role:
+                name: healthcheck-service-status
+              vars:
+                inflight_healthcheck_services:
+                  - tripleo_keystone_healthcheck
       container_puppet_tasks:
         # Keystone endpoint creation occurs only on single node
         step_3: