Comment 9 for bug 1614211

Thanks for that Corey. It does indeed look like we'll need to modify the services to request a domain-scoped token, and provide further support for it in the keystone library plugin. To request a domain-scoped variable, the library must not specify a project name when issuing the HTTP request, which the current code in Mitaka (and I think master, though I've not checked) require to be present.

My sense right now is that we'll need to do both things you've suggested - refactor the service playbooks to request domain-scoped tokens when some variable says to use domains instead of projects.