[ha] Decouple openstack services by roles