Add keystoneclient-kerberos repository

keystoneclient-kerberos provides kerberos authentication for
keystoneclient and the other OpenStack clients.

Change-Id: Iafa610384ce0c87c49ff4ce99d19c2ccca384aa6
Update default server value to new puppet master

Now that we've finished moving all puppet agents to get triggered
from the new master, update their configuration to assume the new
server is the default so that we no longer need to override it when
running locally from the command line.

Change-Id: I446341c5115d948bb8dedbe00e23b38b3e78c62f
Cease using ci-puppetmaster.openstack.org

Now that the migration to puppetmaster.openstack.org is complete,
remove duplicate references to ci-puppetmaster.openstack.org and
also take out the temporary Puppet v2 vs v3 compatibility code used
to choose between them.

Change-Id: I32d48e844ab1872391f9f2a4e233804b7a29feb5
Update config documentation to refer to new master

Change-Id: I9072e866e47587d2de7e6d3c8f1e264d91a0d389
Use the current Puppet master when launching

Change-Id: Ia5f5320aa77791c6c03b42b395945132e699f57e
Turn on swift log uploading for infra jobs

Dogfood our swift uploading on infra jobs. This will allow us to
compare disk copies to swift. Note that disk copies are served
first if available (unless ?source=swift is in the get params).

Change-Id: Iee52d4f906ae78d3c253055e4e86b3615ccad0af
Give nodepool user sudo access for dib

Disk image builder requires root permissions to chroot and mount images.
Update the puppet manifest for nodepool to optionally enable
passwordless sudo access for the nodepool user. This defaults to being
allowed but can be toggled if this is deemed an unnecessary security
risk.

Change-Id: If0bf5f182d88c848cd2a64c5c75cc64cc0b42c58
Add channel set permission for IRC operators

In order to forward/rename/move an IRC channel, operators need +s
mode on each channel involved. For convenience, grant this
permission to all our global OpenStack IRC operators.

Change-Id: Id4d3260f24d435489bc085d52d794f9c70543750
Related-Bug: #1360324
Put /usr/local/bin in nodepool PATH for dib

When we install dib via pip the executables are put in /usr/local/bin
which was not in nodepool's PATH. The PATH is configured by the init
script so update the variable to include /usr/local/bin.

Change-Id: Ie456ecf667d330b925d3168a456d4ac84d1c48f4
Merge "Add channel set permission for IRC operators"
Merge "Turn on swift log uploading for infra jobs"
Merge "Update default server value to new puppet master"
Merge "Cease using ci-puppetmaster.openstack.org"
Merge "Update config documentation to refer to new master"
Merge "Use the current Puppet master when launching"
Merge "Add keystoneclient-kerberos repository"
Set the nodepool user and key on dib images

We need to set the nodepool user and key on dib images so that dib can
run the pre use check script on the nodes (without these values nodepool
uses invalid defaults). Logically this appears to be part of the image
building process but the post slave boot check scripts need it too.

Change-Id: I51c7da1d58c2550903ad1671dcfb477b06424cfd
Merge "Put /usr/local/bin in nodepool PATH for dib"
Merge "Set the nodepool user and key on dib images"