update policy.json for icehouse

Bring the policy.json file in sync with icehouse branch.

Change-Id: I190b755047d576f3e1015970b6bbce095df65de5
api-paste icehouse changes

Sync api-paste with new icehouse request_id and catch_errors pipes.

Change-Id: I710ef0adb194e9e8600fc2747d0e002ddd5fb5f0
Icehouse branch version updates

* also cleanup unused database dependencies

Change-Id: I8874699feb02c55aad2c7d90bfe99406abd73f52
Merge "api-paste icehouse changes"
Merge "update policy.json for icehouse"
Update ChefSpec to 3.4.0

This change gives us new capabilities, such as matching notifies and
subscribes of resources.

Implements: blueprint chefspec-3-4
Change-Id: Ic2ffd83c398c93ec2f410b90b7305be7885b1471
Increase IP binding flexibility changes

Changes have been made to the common cookbook so that if a
bind_interface is specified for an endpoint, then the IP is looked up
for that endpoint using address_for, and if no bind_interface is
specified then the value of the host attribute of the endpoint is used
instead.

This change set removes code around the network API endpoint that
implements this exact behavior, which is no longer needed since it is
now provided by the common cookbook.  This change set also replaces
direct calls to address_for by the OVS and LinuxBridge code with
endpoints.  This allows the user to either specify an interface or an
IP to bind to using the standard endpoint library for these two
plugins.

This change is dependent on change: https://review.openstack.org/83859

blueprint increase-ip-binding-flexibility

Change-Id: Ie0aa07ab511c4ccbe9686da4dfb05934f9708b9a
Sync agent down time and report interval

Adust the agent down time and report interval to the new icehouse
default and bring in more comment lines to help explain.

Implements: blueprint neutron-icehouse-default-changes
Change-Id: Idffdf3b63f22278703379cc157cc8161181d702d
Merge "Update ChefSpec to 3.4.0"
Merge "Sync agent down time and report interval"
Subscribe Neutron agent services to neutron.conf

Before this change, a change to neutron.conf would not cause any agent
to restart. I doubt this was intended, since for example changing
rabbitmq stuff in neutron.conf really needs the agent to restart to have
any effect.

Furthermore, the balancer recipe subscription/notification logic has
been changed to fit in line with the other agents, i.e. having the ini
template notify the service and the service subscribe to neutron.conf.

Change-Id: I2d5b20a13945fb8a360b81091e68e0fcf5748e93
Closes-Bug: #1300076
Cleanup lbass ini

Remove unneeded namespace option
Add haproxy section name
add loadbalancer_state_path

Change-Id: Ic92523a52e3853f46b6f617487f41f7786c71de5
Closes-Bug: 1300964
Merge "Increase IP binding flexibility changes"
Use get_secret instead of secret

The new get_secret method allows the 'secrets' databag to be renamed,
just like all other databags.

Change-Id: Ic8be5d19a112d78e22716c0cd571efc7186ac9ce
Related-Bug: #1288784
neutron-ha-tool: Add ssl options

Allow specifying a CA Certificate bundle to use for server
verification via the OS_CACERT environment variable and a
argument "--insecure" to disable server certificate
completely.

Change-Id: I5a0356faead4dbe2a543c607cf3e442252fc820b
neutron-ha-tool: fix some cosmetic flake8 issues

Change-Id: Ibfb8ee7e9f6400f249bdbfa5fbf24ebd89a91390
Merge "Use get_secret instead of secret"
Merge "neutron-ha-tool: fix some cosmetic flake8 issues"
Use platform_family instead of platform

As agreed on the mailing list:
https://groups.google.com/forum/#!topic/opscode-chef-openstack/HEL3KqBQIUM

This will allow the ibm_powerkvm platform to be recognized.

Change-Id: Iebf2aad9f3b4649fb5c27d2fc93ee60c67e42737
Partially-Implements: blueprint add-ibm-powerkvm-enablement
Implements: blueprint platform-family
Merge "Cleanup lbass ini"