Make roles for ec2api-tester configurable

https://review.openstack.org/#/c/572243/ is changing default role
name to "member" instead of "Member" so let's make it configurable
so that we can change from deployment tools when needed.

I'm keeping default as Member for backwards compatibility.

Change-Id: Icd91bd27d0c0f375d2e99e9c018d3971fc49ce18

manifests/init.pp

@@ -213,6 +213,8 @@
 #   Defaults to 'fake'
 #  [*baremetal_enabled_hardware_types*]
 #   Defaults to 'ipmi'
+#  [*ec2api_tester_roles*]
+#   Defaults to 'Member'
 #
 # DEPREACTED PARAMETERS
 #  [*tenant_name*]
@@ -357,6 +359,8 @@ class tempest(
   # ironic options
   $baremetal_driver                 = 'fake',
   $baremetal_enabled_hardware_types = 'ipmi',
+  # ec2api options
+  $ec2api_tester_roles              = ['Member'],
   # DEPRECATED PARAMETERS
   $tenant_name                      = undef,
   $alt_tenant_name                  = undef,
@@ -840,7 +844,7 @@ be provided.')
     }
     keystone_user_role { 'ec2api-tester@openstack' :
       ensure => present,
-      roles  => ['Member'],
+      roles  => $ec2api_tester_roles,
     }
     tempest_ec2_credentials { 'ec2_test_creds':
       ensure            => present,