Add upgrade definition

Also grant keystone user super priviledges as they are required for
expand migrations

Change-Id: Ie49c5f6e71e50716464897eff38d6506ef102897

service/keystone.yaml

@@ -25,7 +25,8 @@ service:
           type: single
           command:
             mysql -u root -p{{ db.root_password }} -h {{ address('mariadb') }} -e "create database {{ keystone.db.name }};
-            grant all privileges on {{ keystone.db.name }}.* to '{{ keystone.db.username }}'@'%' identified by '{{ keystone.db.password }}'"
+            grant all privileges on {{ keystone.db.name }}.* to '{{ keystone.db.username }}'@'%' identified by '{{ keystone.db.password }}';
+            grant super on *.* to '{{ keystone.db.username }}'@'%' identified by '{{ keystone.db.password }}';"
         - name: keystone-db-sync
           files:
             - keystone-conf

service/upgrade/default.yaml

@@ -0,0 +1,22 @@
+upgrade:
+  name: upgrade-keystone
+  image: keystone
+  steps:
+    - name: expand
+      files:
+        - keystone-conf
+      command: keystone-manage db_sync --expand
+    - name: migrate
+      files:
+        - keystone-conf
+      command: keystone-manage db_sync  --migrate
+    - name: roll
+      type: rolling-upgrade
+    - name: contract
+      files:
+        - keystone-conf
+      command: keystone-manage db_sync --contract
+files:
+  keystone-conf:
+    path: /etc/keystone/keystone.conf
+    content: keystone.conf.j2