[ffwd2] Set service_user for nova on hybrid state

During hybrid state we need to setup service user for nova compute
or else it will not be able to talk to cinder.

Resolves: rhbz#2228414

Change-Id: I5522caf4f84b67183c70a8b36a04c731ca25c9a4

deployment/nova/nova-compute-container-puppet.yaml

@@ -1311,6 +1311,60 @@ outputs:
                     path: /var/lib/config-data/puppet-generated/nova_libvirt/etc/nova/nova.conf
                     section: api_database
                     state: absent
+                - name: Set nova service_user send_service_user_token
+                  ini_file:
+                    path: /var/lib/config-data/puppet-generated/nova_libvirt/etc/nova/nova.conf
+                    section: service_user
+                    option: send_service_user_token
+                    value: true
+                - name: Set nova service_user project_name
+                  ini_file:
+                    path: /var/lib/config-data/puppet-generated/nova_libvirt/etc/nova/nova.conf
+                    section: service_user
+                    option: project_name
+                    value: service
+                - name: Set nova service_user password
+                  ini_file:
+                    path: /var/lib/config-data/puppet-generated/nova_libvirt/etc/nova/nova.conf
+                    section: service_user
+                    option: password
+                    value: {get_param: NovaPassword}
+                - name: Set nova service_user auth_url
+                  ini_file:
+                    path: /var/lib/config-data/puppet-generated/nova_libvirt/etc/nova/nova.conf
+                    section: service_user
+                    option: auth_url
+                    value: {get_param: [EndpointMap, KeystoneInternal, uri_no_suffix]}
+                - name: Set nova service_user region_name
+                  ini_file:
+                    path: /var/lib/config-data/puppet-generated/nova_libvirt/etc/nova/nova.conf
+                    section: service_user
+                    option: region_name
+                    value: {get_param: KeystoneRegion}
+                - name: Set nova service_user username
+                  ini_file:
+                    path: /var/lib/config-data/puppet-generated/nova_libvirt/etc/nova/nova.conf
+                    section: service_user
+                    option: username
+                    value: nova
+                - name: Set nova service_user auth_type
+                  ini_file:
+                    path: /var/lib/config-data/puppet-generated/nova_libvirt/etc/nova/nova.conf
+                    section: service_user
+                    option: auth_type
+                    value: password
+                - name: Set nova service_user project_domain_name
+                  ini_file:
+                    path: /var/lib/config-data/puppet-generated/nova_libvirt/etc/nova/nova.conf
+                    section: service_user
+                    option: project_domain_name
+                    value: Default
+                - name: Set nova service_user auth_type
+                  ini_file:
+                    path: /var/lib/config-data/puppet-generated/nova_libvirt/etc/nova/nova.conf
+                    section: service_user
+                    option: user_domain_name
+                    value: Default
                 # We have to update check-run-nova-compute as it's distributed via THT and not rpm or image so at this
                 # moment we have Queens code instead of Train which will not work due to switch from python2 to python3
                 - name: is Instance HA enabled