docs: Update Changelog
deploy: Do not run archipelago as root

Since 0.4~rc2, archipelago creates archipelago user and group
upon package installation. In order not to run as root we
have to:

 - chown and chmod /srv/archip dirs and file
 - let gunicorn run as www-data.archipelago
 - chown /etc/synnefo and /var/log/gunicorn

Additionally archipelago introduces an new dir to store locks.
Create this dir on the nfs node.

NOTE: In case of a multinode setup using NFS as archipelago
backend, the archipelago user must have a common group id across
all nodes. Currently snf-deploy does not take that into account
since it practically setups a single node installation.

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>
deploy: Remove pithos_dir references

Since archipelago is the pithos backend, the NFS dir /srv/pithos
is useless. Cleanup everything related to it.

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>
deploy: Add archipelago user and group manually

In NFS and Mount components add archipelago user manually. For NFS
permissions to work properly across all nodes, the group owner of
the exported directory must exist on all nodes and have a common
gid. Thus, prior adduser, we create archipelago group with high gid
(200) to avoid conflicts.

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>
deploy: chown -R root:archipelago /etc/synnefo

Pithos and Cyclades components require ArchipSynnefo which makes
gunicorn run as root:archipelago.

Currently all snf-* packages install their conf files as
root:www-data. Note that the g+s mode in /etc/synnefo does is not
enough since debian uses mv and not copy to put the conf files in
the proper dir.

Thus we have to manually change the owner of conf files after
package installation.

Do this in GTools and Admin components too.

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>
Add release date for version 0.16rc3
Bump version to 0.16rc4
pithos: Fix select import error

If import statement fails to find Gevent's select use
Python select instead.
snf-ci: Patch kamaki to use CA certificates

Patch kamaki clients to use ca_certs path found in kamakirc file or to
completely skip SSL verification using the '--ignore-ssl' flag.
burnin: Patch kamaki to use CA certificates

Patch kamaki clients to use ca_certs path found in kamakirc file or to
completely skip SSL verification using the '--ignore-ssl' flag.

Bump kamaki version dependency to '>= 0.13rc5'.
cyclades: Fix issue in volume-type-list command

Update volume-type-list command to count only non-deleted servers,
volumes and flavors that are using each volume type. Also, remove
select and prefetch related statements as they are only making the
DB query slower.