Comment 1 for bug 1631130

I can confirm this - the heat manifests try to create a keystone domain and user, so we'll need to wire that in via service_config_settings I think, like the keystone service users we previously fixed.