Can you attach your audit.log so I can look at the denial?
Upon further review, this can't reasonably be fixed in openstack-selinux, since images using cloud-init are unlikely to have that package installed.