Only accept one node/cluster for keystone-server
We really need to save the db password
Fix detection of whether HA is enabled or not
Only allocate VIP if HA is enabled
Fix changing attributes in apply_role_pre_chef_call