Update obsolete cisco plugin template to match upstream havana
Set the firewall driver appropriately when vswitch plugin is OVS
and cisco plugin is the core plugin.
Merge pull request #146 from pkilambi/cisco_plugin_updates

Updates to Cisco plugin configuration
BZ #1064056 - Foreman Heat ports not opened

https://bugzilla.redhat.com/show_bug.cgi?id=1064056

Open ports on the controller node for Heat:

* 8000 for opehstack-heat-api-cfn
* 8003 for opehstack-heat-api-cloudwatch
* 8004 for openstack-heat-api

A new firewall rule has to be added, because if the ports would be
added to the existing one, the port count would be greater than the
maximum for iptables multiport extension (maximum is 15), and creating
the rule would fail with a message "iptables v1.4.7: too many ports
specified".
Merge pull request #147 from jistr/heat_firewall

BZ #1064056 - Foreman Heat ports not opened
BZ #1053623 - openstack-selinux package not installed

https://bugzilla.redhat.com/show_bug.cgi?id=1053623

Package openstack-selinux is now installed on RHEL/CentOS nodes
running OpenStack services. It is not installed if the node runs
Fedora, because selinux-policy package on Fedora is being updated
more frequently and should not need additional rules.
Merge pull request #149 from jistr/selinux_package

BZ #1053623 - openstack-selinux package not installed
BZ #1082811 - Add Keystone Service to HA hostgroup .

https://bugzilla.redhat.com/show_bug.cgi?id=1082811

Add HA keystone support.