Comment 15 for bug 1579612

Reviewed: https://review.openstack.org/347564
Committed: https://git.openstack.org/cgit/openstack/openstack-ansible/commit/?id=9564b9cec6a9ef7fa024e8de674f28ece76affaf
Submitter: Jenkins
Branch: liberty

commit 9564b9cec6a9ef7fa024e8de674f28ece76affaf
Author: Nate Graf <email address hidden>
Date: Tue Jul 26 22:02:48 2016 +0000

    Support users without projects in keystone library

    Update the ensure_user, ensure_user_role, and ensure_group_role commands
    and dependent functions to allow creation of and role assignment to a
    user without specifying a project.
    This will allow use of the keystone library for creating users, such as
    the heat stack admin, within only a domain.

    Since a role can only get granted to either a project or domain at one
    time, only attempt to grant the role within the project if both are
    provided.

    Notifications of state changes for the ensure role commands have also
    been fixed.

    Backport for change I6a132e5407c9881a047037b85bd6e25b85c0d8a1

    Partial-Bug: 1579612
    Change-Id: If515ec94e980365ebd38781498ee541df2f3d431