add assertion to heat-keystone-setup script

Defensive check for various critical steps in the script

Change-Id: I9df01011940d80532787c3acaf0cc8ec10e97cc8
closes-bug: #1260561
Do not override cloud-init cloud_config_modules

In the past it may have been necessary to do this but it causes problems
for users of advanced features. We should be able to operate with the
default OS configuration of cloud-init.

Change-Id: Ic26bffb17b1870d656fea72cf3da3dfe2b7f44d0
Closes-Bug: #1263297
Add test coverage for SignalResponder delete

Add coverage for the case where the user has been deleted out of band
and keystoneclient raises a NotFound exception.  Brings coverage of
SignalResponder up to 100%

Change-Id: I29ea94b052f807072d98e05768e6a1973df5d40d
Filter resource types by support status

Now heat resources haven't support status. We want service providers
to have a way to assign support status metadata to resources. And
then user should be able to filter resource types by support status
when quering the api for resource types.

Add processing of query parameter support_status to list_resource_types
function in heat/api to filter resources by. List_resource_types
returns a list of resources with a certain status or a list of all
resource types by default.

Add filtering on the server.

Add changes to tests:
- test_rpc_client.py
- test_api_openstack_v1.py
- test_engine_service.py

Implements bp filter-resources-by-support

Change-Id: I719c0d690886153adb698aea4695ddd526e7a4af
Fix regression in Rackspace Cloud Servers tests

Commit 63b7f14403 introduced a regression in the Rackspace Cloud Server
tests.  Instance.volumes() now relies on its VOLUME property's default.
Since CloudServer inherits volumes() from Instance but defines its own
VOLUMES property, its VOLUMES property should also have a default.

Closes-Bug: #1265034
Change-Id: Ib17337c5d06aedf65da5497ad48858d649ba4e96
Deleted TEMPDIR on exit

To avoid undeleted tmp.XXXXXXXXX directories left in /tmp, and output
unified style patch for later apply.

Change-Id: I6069c3cf36e345e5101ae3cf884e647c1d42030e
Use oslo db.migration script

Turn Heat's migration script into a simple wrapper around olso's.
The api is a bit different so for now keep ours inplace.
All that our script does is find the path to the migration_repo
and call the oslo code. No point having two implementations in the
same codebase.

Change-Id: I0aa3e10890f924d77268f4118dae53b446e193eb
Fixes typo of explanation on exception.py

Something like:
unvavailable -> unavailable

Change-Id: I2f94532862e46d2a1371b819fa6adf2eb9cb3992
Closes-Bug: #1265687
Make LoadBalancer nested stack template configurable

Reviving work originally posted by Angus Salkeld under
https://review.openstack.org/#/c/21405/

This is to enable the various distros to easily override the
hard-coded default nested template (which currently only supports
Fedora 17) with a template approporate to their distro, and
enables deployers to specify their own template (although the
latter use-case will probably be catered for via a provider
template implementation long-term).

Change-Id: I0a4eccb23b2eebbf31b7aabf0fe85ab31f0ca971
Partial-Bug: #1234375
Co-Authored-By: Angus Salkeld <angus@salkeld.id.au>
Add policy enforcement to ReST API

Currently the native API lacks support for enforcing policy via
policy.json, as is possible for the aws-compatible APIs.

So modify and rename the tenant_local decorator to also enforce
policy, and add tests to ensure the API controllers are all
using the decorator on their actions

Change-Id: Id80d576d5ff5e546da42dbf08ebd653005af14ff
blueprint: request-scoping-policy
Merge "Do not override cloud-init cloud_config_modules"
Merge "Add policy enforcement to ReST API"
Merge "Add test coverage for SignalResponder delete"
Merge "Make LoadBalancer nested stack template configurable"
Merge "Deleted TEMPDIR on exit"
Merge "add assertion to heat-keystone-setup script"
Merge "Filter resource types by support status"
Merge "Fix regression in Rackspace Cloud Servers tests"
Merge "Fixes typo of explanation on exception.py"
Merge "Refactor Instance#_check_active"