Update constraints so that heat-server role can be assigned to cluster