Enable authZ checks for member actions

Blueprint make-authz-orthogonal

This implements work item #1 of the blueprint.
This patch enables authZ checks for 'member actions' in the base
controller and removes explicit checks from l3_db.
This patch also addresses a small glitch in the policy engine which
was assuming the request always had a body.

Change-Id: I7e0f386eedcfff24ea1fee7294bbadd6c5ec781c
Return unicode for object in json and xml serializer

Fix bug 1160644
Fix bug 1119790

When try to serialize an exception object as json, it failed
with 'ValueError: Circular reference detected' that is same error
as bug 119790. So this patch fixes bug 119790 too.

Change-Id: I0da2616f4ec59da31be054b8be2f7a140f59d63a
Fix lb-vip does not get route to default gw

Previously when creating a lb-vip it would be created without
a default gw. This patch fixes that and adds unit tests to check
that route add is called if the subnet has a gateway_ip.

Fixes bug 1162626

Change-Id: I155749fa6d9c843fca87a73f3cf85720aac26cfa
Merge "Enable authZ checks for member actions"
Update Ryu plugin README

Fixes bug #1163181

Update Ryu plugin README file to refer to the new URL that describe
how to configure the plugin.

Change-Id: I84486f022bddd28a534e971e1132c70f10ad7c04
Merge "Return unicode for object in json and xml serializer"
Fix unit tests for RHEL

Fixes bug 1158609
Fixes bug 1158612

Change-Id: I5ee6214a935cfa663c96b1ba6893f265890c4202
blueprint cisco-single-config

Scope: Unification of all the various plugin files for the Cisco plugin into a single file.

Use Cases: Quantum with the Cisco plugin.

Implementation Overview: All the config values contained in the various files in
etc/quantum/plugins/cisco will be unified into a single file
etc/quantum/plugins/cisco/cisco_plugin.ini. The plugins needs to be modified to
read from a single file instead of multiple.
Added quantum.openstack.common.cfg support.

Change-Id: I9ef356eccfe330c3733f441b96400d03c3d7d1df
Add RabbitMQ and QPID HA support flags to quantum.conf

Since Quantum supports HA queues with RabbitMQ (https://review.openstack.org/#/c/13760/),
quantum.conf should provide new flags for explain how to configure multiple RabbitMQ servers and enable HA.

New flags :
rabbit_hosts=$rabbit_host:$rabbit_port
rabbit_ha_queues=false
qpid_hosts = localhost:5672

Fix Bug #1160369

Change-Id: I35903b1b7b66fde8d70ac7e8076e0def2a1f2d04
Merge "Fix lb-vip does not get route to default gw"
Imported Translations from Transifex

Change-Id: I8b0c8543dc7c88f017814ba1401512aabe418964
Merge "Add RabbitMQ and QPID HA support flags to quantum.conf"
Use wrappers instead of direct calls to ip route.

 - extract the logic of ip route wrapper into a separate
   class to drop dependency on a specific network device
 - add route wrapper to IPWrapper class
 - use IPWrapper instead of direct calls to ip route in l3 agent
 - update tests

Fixes bug 1133133.

Change-Id: Ic7174b0676d1a565909bb5f6f950376cf8fae8d2
Merge "Use wrappers instead of direct calls to ip route."
Add missing security group quota settings to quantum.conf

Fixes bug 1164154

Change-Id: I32d1952fcc11559cc01c0dbde11de558b2a0b1fb
Parallelize quantum unit testing:

This change switches run_tests.sh to use testr
in parallel mode, instead of nosetests, in order
to enable unit tests to run in parallel.

By default, the number of parallel test processes
is set to the number of cores on the test machine.

A similar change was recently merged to nova:
  https://review.openstack.org/#/c/15078/

Some tests required updating to remove inter-testcase
dependencies.

bug #1099694

Change-Id: Idfb923d424342a07dcba88d70b971683f549f763
Revert "Use wrappers instead of direct calls to ip route."

This commit somehow broken floating ips with the l3 agent so we should revert
it till we figure out why.

This reverts commit f80f06a71de6e235c71e0333448cf59e44745c45.

Change-Id: Ic93eec0d95ad20baf53cc97476fcdff1b308ae91
Imported Translations from Transifex

Change-Id: I664f6de7988fc4987601df5a693347b131544e2f
Switch to flake8 from pep8.

 * flake8 supports more checks than pep8 (e.g. detection of
   unused imports and variables), and has an extension mechanism.
   A plugin to support automatic HACKING validation is planned.
 * See: http://flake8.readthedocs.org/

Change-Id: I8c9314c606802109a4d01908dbc74ecb792ad0ac
Add expected IDs to router.interface.* notifications

Fixes bug 1160431

The router.interface.{create|delete} notifications are intended to be
consumed by ceilometer, but did not include the router or tenant IDs
in the RPC message payload. Ceilometer requires both these data for
metering purposes.

The missing UUIDs are now provided in the notifications.

Change-Id: I1ca6e1d5377100a0549293e0bdff0182711c750f