Set default gateway to admin network gateway for provisioning

The default gateway will be set to the gateway provided in ks_meta
by nailgun. This is required to support cases where a node's admin
network is not the same subnet as the master node.

Change-Id: I1e689776264aa8e56ca25efd074902c0a31dc235
Fix wrong regexp

Change-Id: Icbdda6f1c753fa7490e1aa99cb6ad15f38313079
Closes-bug: #1382411
Sync puppet-keystone

77dbc80de15b5ef02a5e89c8ef040e70df576a1d 4.0.0

Partial blueprint merge-openstack-puppet-modules

Fuel-CI: disable
Change-Id: Id315262c7cc735bfdce41b2f5a20117bfd2b3a04
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
Set nginx default settings for master node

- increase number of workers from 2 to half available CPUs.
- enable epoll by default
- enable tcpnopush
- enable tcpnodelay
- disable server_token

These settings allow to bootstrap many nodes in parallel allowing
anaconda and debian installer to get all files without timeout.

Partial-Bug: 1384510
Partial-Bug: 1349360

Change-Id: I44054cf2afa1fa5a70ba064f4957b964947b2b2c
Implements: blueprint 100-nodes-support
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>
Adapt puppet-keystone for Fuel

Partial blueprint merge-openstack-puppet-modules

- Includes fix for rhbz#1129760 bug.
  Upstream Change-Id: I3f0102b184a484f5e5a85cadf26ed651829fbf8c

Change-Id: I46d872bc6ec1ef33243dce2588847b8be7f2df4b
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
Fix ntp conf template name in host-upgrade.pp

After merging ntp puppet module with mainstream template file
for configuration changed name.

Change-Id: I9ecfe32d111dccbbe53e4ac8688428a52c2de9f4
Related: blueprint merge-openstack-puppet-modules
Related: I8f9ac3bdacbd5512224bb4b1a5b9214bed54093c
Related: I0ceb392d8750469ece3c93d67d2c73a8a6d7b71d
Closes-Bug: #1388049
Multiple Cluster Networks: IP routes

Adds new attributes 'is_default_route' and 'other_nets' to
 l23network::l3::ifconfig.

Adds ability for ns_IPaddr2 to consume other_nets

In multiple cluster networks it is necessary for interfaces each have their
 own gateway. This adds 'is_default_route' so that only one interface will
 receive the default gateway route. This is assured by nailgun.

It is also necessary for each interface to know the route to the other
 networks of the same network role from other NodeGroups in the cluster. These
 networks are expressed in 'other_nets' and with the 'gateway' and interface
 name will be used to add routes to the node

data used from asute.yaml

Neutron network provider:
network_scheme:
  endpoints:
...
    br-fw-admin:
      IP:
      - 10.108.47.3/24
      default_gateway: true
      gateway: 10.108.47.1
      other_nets:
      - 10.108.52.0/24
    br-mgmt:
      IP:
      - 10.108.49.2/24
      gateway: 10.108.49.1
      other_nets:
      - 10.108.54.0/24
...

Nova network provider:
network_data:
...
  eth1:
    default_gateway: true
    gateway: 10.108.48.1
    interface: eth1
    ipaddr:
    - 10.108.48.4/24
...

Adds disabled code to configure haproxy to keep vip points together
 There are some deployment cases where the deployer may need to
 enable this and this serves as the code example to perform it.

Resolves-bug #1272766
implments: blueprint multiple-cluster-networks

Change-Id: I06e09fd9b292cac53b925933006de064e725bdb0
Merge "Set default gateway to admin network gateway for provisioning"
Merge "Multiple Cluster Networks: IP routes"
Merge "Fix wrong regexp"
Merge "Sync puppet-keystone"
Merge "Adapt puppet-keystone for Fuel"
Merge "Set nginx default settings for master node"
move live_migration_flag under [libvirt]

One more libvirt option was moved from [DEFAULT] to [libvirt] in
nova.conf in Juno.

Change-Id: Ibbf63c330750dd3befca52605ef8b46e0a593014
Related-Bug: #1386735
rename undefined $::use_quantum to $::use_neutron where needed.

Change-Id: I3e6ad05ff17b8f27716b1778d9e23473b0ba5dcd
Closes-bug: #1389002
Merge "Fix ntp conf template name in host-upgrade.pp"
Fix neutron-agents start commands in OCF

W/o this fix, n-agents can not detach start command
and create a pidfile
The solution is to fix start command as appropriate

Closes-bug: #1389299

Change-Id: I46e1cf286622db0d64e9f17f72ed632e43906e05
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>
Merge "move live_migration_flag under [libvirt]"
Remove old basic service_disables

* Remove *_stopped/*_disabled services definitions
  * RabbitMQ
  * Heat Engine
  * Galera
* Use clear titles for services and use name if service
  name should be changed (e.g from params.pp)
* Fix mangling for corosync services

Related to blueprint granular-deployment-based-on-tasks

Fuel-CI: disable
Change-Id: Iedd11984f43f0d653526113ac208470aa4f39a94
Use separate pid files for Pacemaker OCF

W/o this change, improved pacemaker provider
would not differ OS-aware service pid file from
its own one. That would make impossible to
disable OS-aware services inside pcs provider.

The solution is to separate OS-aware layer from
pacemaker OCF one for pid/run/lock files (we use
only pid files in OCF scripts):

* Unify $OCF_RESKEY_pid_default definitions with
  $HA_RSCTMP and "$__SCRIPT_NAME" varaibles
* Add separate pid directories for resources managed
  by pacemaker OCF ($HA_RSCTMP/$__SCRIPT_NAME/)
  and keep pid files there to distinguish them from
  OS-aware ones.
* While $HA_RSCTMP is owned by root, chown resources'
  subdirectories $__SCRIPT_NAME to
  $OCF_RESKEY_user to grant daemons
  write access for their pid files as well.
* For status actions of OCF scripts, add safe creation
  and chowning of aforementioned pid directories
* Add missing user/group checks for rabbitmq ocf
* Add debug for pid file related actoins
* Make empty pidfile checks
* Fix pidfile creation on start action of neutron
  agents OCF
* Fix pidfile deletion on stop action for mysql OCF

DocImpact
Related blueprint pacemaker-improvements

Fuel-CI: disable
Change-Id: I7f50e32ced83af8f32fd7907cb5fc723055da121
Signed-off-by: Bogdan Dobrelya <bdobrelia@mirantis.com>