adding bastion role and task to setup access to the dbs from it
allowing ansible-provision to do bare installations
adding verbose flag to provision run
local action for cert and key stat before copy
sudo false for stats
adding dependency for the user role so that bastion users are installed
renaming user_info to USER_INFO
force set to yes for key file update
edx-west: parameterize machine names in playbooks

Conflicts:
	playbooks/edx-west/prod-app.yml
	playbooks/edx-west/prod-worker.yml
	playbooks/edx-west/stage-app.yml
	playbooks/edx-west/stage-worker.yml
validate machine var, remove migrate_db prompt

Added a validation on the machine variable, expected to be passed in
from the command line now, so that the worker play only works on
machines named "util" and the app play on machines named "app".
Otherwise it would be too easy to mix those up.

Now that we're using -e command line options, it's easier to use this to
specify the "modify_db" variable than prompt_vars.  Having every install
block on this question before was such a hassle!  Now we just won't
migrate unless you explicitly say so on the ansible command with
"migrate_db=yes" or "migrate_only=yes".

Conflicts:
	playbooks/edx-west/carnegie-prod-app.yml
	playbooks/edx-west/carnegie-prod-worker.yml
	playbooks/edx-west/cme-prod-app.yml
	playbooks/edx-west/cme-prod-worker.yml
	playbooks/edx-west/stage-app.yml
changing USER_INFO to user_info
edx-west carnegie/cme roles: resolve conflicts
more changes to support user_info
Merge pull request #861 from edx/sef/edx-west/parameterize-machines-in-playbooks-master

Parameterize machine names in edx-west playbooks
Merge pull request #853 from edx/jarv/provision-bare-ubuntu

Jarv/provision bare ubuntu
Merge pull request #852 from edx/jarv/add-bastion-db-access

adding bastion role and task to setup access to the dbs from it
Addition of production tcp socket configuration
Switch stop signal to use QUIT instead of TERM
Update to shibboleth role and allow changing the template directory
(cherry picked from commit ff86673d3a32e7a44f944f461135736708e08f81)
Updates to apache role to make it more flexible and inline with nginx
(cherry picked from commit b006e39b4e67226126649c5b9945cde8c41614a3)