I've pushed a patch for review, it would be great if QA could try an update with this patch applied to the new (7.3) tripleo-heat-templates to validate the fix before merging it.
verified with: openstack-tripleo-heat-templates-0.8.6-120.el7ost.noarch
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHBA-2016-0264.html