Sync puppet ssh module to v2.3.6 from upstream

v2.3.6: 23f46577e5bcf07b3859a5690102187f8930c8b5

Change-Id: I8cfe97c3d5e877ad430575d9a7d80651eb4dc319
Implements: blueprint merge-openstack-puppet-modules
Remove unused puppet module nagios

Change-Id: I8c2a3ecd16fcb674139120e1feb2a5269c1fde6a
Implements: blueprint merge-openstack-puppet-modules
Remove unnecessary files from puppet/astute directory

puppet/astute is not puppet module and not used by any
modules anymore, so it is deleted.

Change-Id: I141050ff2d33c148ad6d443b80a9482fc3869cd2
Implements: blueprint merge-openstack-puppet-modules
Remove unused puppet module squid

Change-Id: Iffded4a5398488c4c00b3e69bf0c2ed77e3a39c4
Implements: blueprint merge-openstack-puppet-modules
Sync puppet concat module to v1.1.0 from upstream

v1.1.0 sha1: a50226b4ec5d6f2ba0df9e4f8a31df3e1160ff89
Implements: blueprint merge-openstack-puppet-modules

Change-Id: I8ac6ed2a802628025b51a1c5479661f7e0e946b7
Remove unused puppet module git

Change-Id: Ie2298b8bee55e3126b77ee7604f73435db171c5c
Implements: blueprint merge-openstack-puppet-modules
Exclude docker from the admin net masquerading

We should exclude -s docker0 form the nailgun iptables
rule for admin network masquerading in order to
elliminate the potential issues related with race condition
during master node deployment.

Closes-bug: #1332517

Change-Id: I942da109d83cce65880a3f27cb1d5301d300da50
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
Remove unused module keepalived

Change-Id: I0913938e7be0c1298bd8a083b7eddae2b8377dfc
Implements: blueprint merge-openstack-puppet-modules
Merge "Remove unused puppet module nagios"
Merge "Remove unnecessary files from puppet/astute directory"
Merge "Remove unused puppet module git"
Merge "Sync puppet concat module to v1.1.0 from upstream"
Merge "Exclude docker from the admin net masquerading"
Merge "Sync puppet ssh module to v2.3.6 from upstream"
Merge "Remove unused puppet module squid"
Add swift roles into cluster_ha

the swift roles used to be in cluster_ha_full, but the file was removed in
I964beb280a1e6453cd8864dbfa356da12dbbadcd . In order to ensure that the code
 is not lost as it is used in some custom cases we will add it into cluster_ha.

There is no expectation to test or maintain this at this time, this is only to
ensure that the code is not lost or becomes hard to find.

Change-Id: I5c0cbd1dbffaf34649a32de34fb93c4de20d09f0
Remove unnecessary usage of yum-plugin-versionlock

Get rid of yum-plugin-versionlock in centos.ks for slave nodes.

Change-Id: Ib5ffde6c310703cb408574f013db9accdca555af
Closes-Bug: #1262200
Add link to /root/.cephdeploy.conf -> /etc/ceph/ceph.conf

ceph-deploy requires that its local config file (previously $(pwd)/ceph.conf)
is exactly the same as /etc/ceph/ceph.conf on the system or --overwite-conf
has to be specified. Since we need to manipulate it and can't guarantee order
 from Puppet / Ruby we just link to two on the primary-controller to avoid
 the issue.

All additional users of config should config pull with --overwite-conf and
not have this issue.

The old link is left in place at this time to support older versions of
 ceph-deploy and can be removed in a later release.

Closes-bug: #1333814
Change-Id: I0b61c71effcf779801756968b8ed8b8cb93cb54b
Merge "Remove unused module keepalived"
Add keystone container

* add keystone do dockerctl
* add puppet manifest which configures container

Change-Id: I24fbfe6b4fc33d5c3abeb36e1b403cd167ba73f6
Implements: blueprint access-control-master-node