Enable SRBAC by default

[bshephar]

This change enables SRBAC by default for the Heat service.

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: bshephar

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [bshephar]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[mrunge]

Do we know heat actually works with SRBAC enabled? There is openstack-k8s-operators/keystone-operator#395 and its revert openstack-k8s-operators/keystone-operator#415

[rabi]

Do we know heat actually works with SRBAC enabled? There is openstack-k8s-operators/keystone-operator#395 and its revert openstack-k8s-operators/keystone-operator#415

That issues are not related to enabling SRBAC in heat. Heat kinda does not use scope in policies, so this PR is fine. When keystone enforces scope, heat has issues as we internally need domain admin/domain user (created internally by heat) to list roles/access credentials using a domain scoped token.

[bshephar]

We merged this one instead:
#374