initial set of roles for OpenStack, should be broken into sub components