Limit nova_floating_range to primary controller

Nova Floating ranges should be created on primary controller only.

Change-Id: If0ca2c57e4d412727382375df8347eb23442b001
Closes-Bug: 1334263
Signed-Off: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
Add keystone proxy to nginx

Change-Id: Ieb2d8db54e401c7dbc2edeb45ffd24f18c3180f1
Implements: blueprint access-control-master-node
Add master node service passwords from yaml

astute.yaml now provides passwords for the
following services:
* mcollective
* astute
* cobbler
* postgres (keystone, nailgun and ostf DBs)

All statically defined passwords for these
services are now sourced from astute.yaml
Corrected small bug for astute user/pass in
rabbitmq role.

Adjusted Cobbler bootstrap profile to include
mcollective credentials.

blueprint secure-fuel-master-services
blueprint access-control-master-node

Change-Id: I3db33e35ad18fd9ff258c86d8842db51b21a6931
Sync puppet-heat

17736b2fd726858cb83590f8a8b1d594a087ea44 4.0.0

Partial blueprint merge-openstack-puppet-modules

Change-Id: Icbe9f8c87ea0b6c0a3287c1c36137302bf293009
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
Added nailgun client role

Fuel client can now be deployed as a
separate class and configure
credentials based on astute yaml.

blueprint access-control-master-node

Change-Id: I9b883abb413b6f4ce350248d494a7e42442d7f90
Adapt synced puppet-heat for Fuel usage

- Move all Fuel Heat customization logic from heat::install
to new class openstack::heat
- Adapt pcs Fuel changes for engine class
- Purge db, cli, install, ceilometer classes

Partial blueprint merge-openstack-puppet-modules

Change-Id: Ie47c56c047d0fc9e07ae693b579a72c94a79c438
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
Disable custom init script for rabbitmq on Fuel Master

Custom init script breaks deployment when
hostname changes, but it is not necessary
to have HA enhancements in init script for
Docker non-HA deployments.

Additionally, explicitly create / vhost for
nailgun and astute.

Change-Id: I1524bc3bfccf74e05418189ad15642f25b14acce
Closes-Bug: #1337322
Add memcached_servers so that nova-consoleauth can share tokens properly

add memcached_servers into the same location as in upstream puppet-nova.
Also updated openstack::compute to use same code path

Change-Id: I5f94322bb74dd52fcfd3f923a6583bd742618849
Closes-bug: #1323705
Revert "Sync sysctl module to v0.0.4 from upstream"

Partial-bug: #1337415

This reverts commit 6587dca0e92c03073bac57895b2caafae6d289c5.

Change-Id: I86d233e77ac8107f034a494a725fe6947fb94427
Merge "Revert "Sync sysctl module to v0.0.4 from upstream""
Revert "Adapt synced sysctl module for Fuel"

Closes-bug: #1337415
This reverts commit 178f4f8c2ff93f6b7cf9c08c49d04c7819228400.

Change-Id: I7c6f3cae716956b8a2b62868655af1bfbcdd28e0
Merge "Revert "Adapt synced sysctl module for Fuel""
Merge "Add memcached_servers so that nova-consoleauth can share tokens properly"
Sync puppet-nova

109d4825e5cdd15aa529c1ef7bcccc05f6a78178 4.0.0

Partial blueprint merge-openstack-puppet-modules

Change-Id: I672620f149e4a63240144f0ce20e84b084cfd459
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
Merge "Add master node service passwords from yaml"
Keystone configuration changes:

* use randomized token
* configure in middleware keystone ip

Change-Id: I6291cd44f7c92dddb8df58a23f9740c7c16a6b1e
Implements: blueprint access-control-master-node
Add haproxy_stats to the haproxy config

* Enables statistics page to monitor haproxy status
* Prevent haproxy from failing to start if there
  are no cfg includes present

Change-Id: I055811107bf959dc156448f9a5a457fb2d569d3f
Closes-Bug: 1337261
Merge "Keystone configuration changes:"
Merge "Sync puppet-heat"
Merge "Adapt synced puppet-heat for Fuel usage"