Tie pub vip with public gw ping

Add new pacemaker cloned "ping" primitive and tie it with public
vip via "location" in order to migrate public VIP in case
controller can't ping public gateway.

Partial-bug: 1370510
Change-Id: Ibf4fedee536ac9eb106206060b58a6039558ef85
(cherry picked from commit 04b2df08b0717d7b091a9a3425d4c6af979afbd3)
Fixed issue with max size for Swift objects

Fixed issue with max size of object, which Glance
should store in Swift without slicing.
Default value doesn't work when user attempts to make
a snapshots with size > 300 Mb.

Change-Id: Ic3b3120605f1e1536a34bedc4ad5c0c2f4c8510b
Closes-Bug: #1373813
Fix hourly log rotation schedule

W/o this patch, new log rotation template for
Fuel 5.x master node with docker (which is
/etc/logrotate.d/20-fuel-docker.conf) would
never be scheduled for execution.
And that could have caused master node's /var/log/
free space exhausted until the next planned daily
log rotation will come.

DocImpact
Closes-bug: #1378327

Change-Id: I21ba3debcfda4d94d5e25786f97996f6431e5ec3
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
Set <host> in cinder.conf to rbd:<pool> for RBD backend

Cinder volume can only be managed by a cinder-volume process that has <host>
configuration variable value matching <os-vol-host-attr:host> attribute of the
volume.

By default, host of a cinder-volume service is set to its hostname, which means
that if one controller is lost, none of its volumes can be managed by
cinder-volume processes on other controllers. This makes sense for Cinder LVM,
but not for RBD or other shared backends.

This commit sets <host> to the same value on all controllers when RBD backend
is enabled, so that any controller can manage RBD backed volumes created by any
other controller.

Change-Id: I47161796dbb817eab026402760799bee24371863
Partial-Bug: #1371328
(cherry picked from commit 17989b1632f36f2598458b37beefd62096ce2f2b)
Add dhcp-sequential-ip option to dnsmasq

For many simultaneously DHCPDISCOVER requests dnsmasq
can offer the same IP for two different MAC addresses.
This option prevents it by assigning IPs one by one
instead of using hashing algorithm.

Change-Id: Iff3c42d21e1f1c09cb9eab5f07dbb066508dcb56
Related-bug: 1378000
Related-bug: 1376680
Related-bug: 1379917
Blueprint: 100-nodes-support
Increases the number of processes in CentOS 6.X 

Increases the number of processes per user in /etc/security/limits.d/90-nproc.conf
for CentOS 6.X due to bug https://bugzilla.redhat.com/show_bug.cgi?id=919793

Change-Id: I76f258f33325f80fe06167dec08d81dabd292163
Closes-Bug: 1376564
Fix blocking reject rule for rabbit ocf

* Make RMQ unblock call safe (remove all discovered RMQ
  blocking rules, if there are many of them).
* Use unblock safe call prior to the blocking one.
* Make block call idempotent and add 5 retries for iptables.
* Add info log messages about block/unblock actions. Notify
  if RMQ blocking rule cannot be added for some strange reason.

Partial-bug: #1373569
Closes-bug: #1375824

Change-Id: I46c6bf3c83ada4273eaa05530e80886ebac7e75f
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
Allow neutron-API on all controllers serve requests together.

Change-Id: I7a8789ed73c1d12306cc45e36f3d2cfff5f8b12e
Closes-bug: #1381327
Closes-bug: #1276762
Increase tolerance of install DHCP

For Ubuntu, added the following kernel options:
netcfg/link_detection_timeout=20
netcfg/dhcptimeout=120
For CentOS:
dhcptimeout=120

Closes-Bug: #1381266
Related-Bug: #1376680
Related-Bug: #1379917
blueprint 100-nodes-support

Change-Id: I3e5f687590a145ba174d19d392bdbb73d4d9a11e
Merge "Increase tolerance of install DHCP" into stable/5.1
Add support for cciss p seperator in ceph-osd fact

the facter code was subsituting the ! in the cciss device, but had forgotten
 about the p seperator between the device and partation number.

the patch adds the p seperator if the ! is matched in the gsub to the remaining
 locations that would need the p seperator to properly refrence devices.

Change-Id: I5054cde345495b62fa66f3ae3876fc6eb098cc5c
Closes-bug: 1381218
Wait also for keystone-2 backend for nova floating ips

Sometimes, keystone admin backend is not ready and this
leads to 504 errors during floating IP creation

This commit adds additional waiting exec.

Change-Id: Ia5d2b15b4b68b5692bb04103d62abc0f840232f0
Closes-bug: #1381982
Fix keystone_endpoint provider

Provider logic was broken for the new style keystone_endpoints
(the ones with "region/service" resource names). Due to this
puppet created new keystone endpoint even for existing ones on the
2nd+ runs.

We need to use common hash key for endpoint_hash in the provider
for both resource types ("region/service" and "service":region =>)
So we just force endpoint_hash to use "region/service" as hash key
for any "keystone_endpoint" resource type.

This patch and the problem will go away after we sync keystone
module with upstream.

Cherry-picked from: https://review.openstack.org/#/c/128384/
Change-Id: I9eaaaf0f63db36a9837cc2141c293efd8adfd68e
Closes-bug: 1375254
Merge "Fix keystone_endpoint provider" into stable/5.1
Increase tolerance of install DHCP

For Ubuntu, added the following kernel options:
netcfg/link_detection_timeout=20
netcfg/dhcptimeout=120
For CentOS:
dhcptimeout=120

Closes-Bug: #1381266
Related-Bug: #1376680
Related-Bug: #1379917
blueprint 100-nodes-support

Change-Id: I8bf38ae18b5741b03e6bda5f8e69748a8ecdf2ec
Merge "Fix hourly log rotation schedule" into stable/5.1
Merge "Fix blocking reject rule for rabbit ocf" into stable/5.1
Fix murano logdir permissions

Relates-bug: 1376209

Change-Id: I67c4356f52f93ad345dc18d1868c48199798fc6d
Increase settings for dnsmasq and sysctl

* Make a new variable dhcp_lease_max. It increases the number of
  available leases from 1000 to 1800. It allows to provision nodes on
  scale, when Debian Installer or Anaconda looses IP in the middle of
  install.
* Make a new variable lease_time. It increases the default lease size
  to 120m, up from the default 60m.
* Add cache-size to dnsmasq template. dnsmasq will keep more entries in
  case.
* Increased neighbour table on master node to keep more ARP requests
  that come in parallel once deployment is started. This change also
  removes unneed broadcast traffic. New values are:
  net.ipv4.neigh.default.gc_thresh1 = 256
  net.ipv4.neigh.default.gc_thresh2 = 1024
  net.ipv4.neigh.default.gc_thresh3 = 2048
* Fix linting

Related-Bug: #1376680
Related-Bug: #1379917
Related-Bug: #1381997
blueprint 100-nodes-support

Change-Id: I4da8070143e401f7a9246e72eda35e601b8c6386
Murano should use default rabbit credentials

Change-Id: I45e9bf49ead2157ac763089e85eca1b43d8cd53d
Related-Bug: #1372483