cleanup power state (partially implements bp task-management)

Removed duplicate and invalid state in power_state:
FAILED, SHUTOFF, BLOCKED
This is the first step in cleaning up nova state machine
and do better task management (bp/task-management)

http://wiki.openstack.org/VMState

Change-Id: I586b9058fada5efd468870fb187590fc0e37aa8f
(cherry picked from commit 5b85997e33aa749ece94edebaaefefe71b899561)
fix nova.utils to be compatible

with the version of python-anyjson we use (lp#1017765)

Change-Id: I4d0bd05cf4ce384fa162823cf3abee03cdde6d46
Use local rbd devices (/dev/rbd*) for rbd volumes

This adds a new LibirtVolumeDriver to nova-compute that will take care to
map/unmap local block devices for rbd volumes. The original approach for rbd
volumes required rbd-enabled libvirt and kvm/qemu. Which we currently don't
have on SLES-11-SP2.

Change-Id: I62e7664200bc83b948e19a65a3cbda81ebb0470e
libvirt driver: improve xen support for hvm and pv mode

This patch improves the libvirt.xml.template to generate a working
libvirt configuration for both hvm and pv instances. It sets correct
driver_names, which are required to making qcow2 images work for xen. It
also sets the os type based on the vm_mode and uses hvmloader for hvm
instances.

Change-Id: I5f92bedf6588ab2674d784772a5ecdb895fabe40
Default behavior should restrict admins to tenant for volumes.

  * NOTE: This is a port from cinder to nova volumes
  * Now to view all volumes or volume snapshots across
    all tenants you need to include the all_tenants=1
    GET param in your api request.
  * Fixes remaining issues blocking bug #967882

Conflicts:
	nova/tests/api/openstack/fakes.py
	nova/tests/api/openstack/volume/test_volumes.py

Change-Id: I395699e169dbe474c4c603393b81a80523312088
Allow connecting to a ssl-based glance

This introduces a new glance_api_insecure setting that can be used to
not verify the certificate of the glance server against the certificate
authorities.

Change-Id: Ifafd6828e881f6d0584ec8c4fc678d0e29f455b7
Fix xenapi for ssl-glance

Change-Id: I240cce05e7392a6d7cb67a26cf22d057f66fac8d
add sitelocal network rule

rule name can not be longer because of kernel length limits (LP:944184)
DocImpact:
	cloud admins can insert REJECT rules
	into the nova-filter-FORWARD-sitelocl rule
	even before starting nova-network, to prevent unwanted traffic
	from VMs to private cloud infrastructure addresses
	or to explicitly allow traffic that would otherwise be disallowed.
	If they do not do this, everything will behave as before.

bnc#777488 bnc#781800

Change-Id: I52ec65bc96887177a3418490a31186b3d6e5d25a
fix boot from volume (bnc#780982 LP:1047568)

Change-Id: Iaf970ded7b9b589367f87815aef382620e6c964c
fix reboot with volume (bnc#782732 LP:1012717)

Change-Id: I0f06e61cd042156fb6fce83f47467179d074ad58
force hard reboots for inactive instance

e.g. because the compute node was rebooted
This will then reconnect the volumes. (bnc#780991)

Change-Id: I9b279eaf01ed5b5a673ee7ff68593ca48a6603dc