Remove heat endpoints from class group

Endpoints are managed for all other services via
coi::profiles::endpoints. Heat currently isn't
because its class structure doesn't match, which
is due to it having a separate class for the
cloudformation endpoint.

This patch should be paired with a patch to puppet-coi
and any other consumers of enabled_services to handle
this special case.

Change-Id: I9bbb1c59cbebc8962bdd34c890e0af1f1a4be469
Add horizon mappings

Horizon will by default use the fqdn of the controller
node. This is not correct in the case where the fqdn
being used is from a non-public interface, or for the
case where a virtual IP sits in front of the dashboard
and has its own name.

This patch uses controller_public_address for the horizon
fqdn and servername.

Change-Id: I75a00c0f1b9a265a8c103109971b018def903196
Add ML2 support

Two new class groups have been added that enable the ml2
folder structure, and include extra classes on compute nodes
that were not previously required. Scenarios should swap over
to these class groups when they are ready.

core_plugin for neutron was previously set by plugin
choice, it is now set to ml2 in user.common.yaml. To use
the deprecated plugins this will need to be overridden
manually by the user. Mechanisms are set by plugin choice,
but there is currently only support for a single mechanism
at a time.

This patch focuses solely on gre support. VXLAN and others can
be added in future patches.

The service_plugins format has been changed to a curated list of
strings, and has been reduced to only include the router plugin
while support for other plugins is tested.

Change-Id: I258074d70bf136ac4d8eaf08abc06e8676db3829
Add SSL termination on all public endpoints

This patch adds SSL support to the Stacktira scenario as
a new default.

 - Sample cert and ca has been added to the build directory,
 and it will be inserted into all VMs so that they can communicate
 without using --insecure. The script for generating more has also
 been added.

 - Regions code has been moved away from the endpoints wrapper and
 into the full multi-regions class, with the default only making
 a single region.

 - controller_internal_protocol and controller_admin_protocol have been
 added to clearly delineate between public SSL services and internal
 services which remain at this time HTTP only. These have been added to
 the common defaults and mappings updated accordingly

 - ssl_bind_options can be used to change the options for the HAProxy
 listen stanze responsible for binding public SSL services

 - the cert path can be specified using haproxy_cert_path. It is assumed
 the cert is pre-distributed on the node.

 - The SSL termination happens at the HAProxy layer, so support for this
 is currently limited to scenarios that use HAProxy via openstacklib

Change-Id: I36fcf894e3e17d8ddc50ea1ea0abce1b421cfdba
Minor fixes to stacktira scenario

Fixes for Icehouse release:

 - update gitignore for user data, rpm and gem dirs

 - remove contrib path from hiera

 - add branch release support to Puppetfile

 - correct loose facts handling in bootstrap

 - Clean unused sections from site.pp and tidy output

 - move options out of user.stacktira and into user.yaml

 - move defaults out of user.yaml and into user.stacktira

 - add more mappings comments

 - add mappings for bind interfaces

 - add mappings for master/slave galera

 - add mappings for proxy

 - move passwords to user.yaml

 - add anchors and mapping for memcached and heat::rabbit_hosts

 - add a testing script that works with test_nova.sh

 - remove galera::firewall from class group due to parse order errors

 - add mapping for vnc proxyclient on private ip

 - move glance registry comms to private interface

 - add mappings for openstack_release into repo mgmt

 - remove edeploy and dnsmasq

 - set lbaas user to nobody instead of nogroup

 - increase max_connections in galera

 - enable vpnaas, lbaas and fwaas in neutron

 - reduce default worker count to 4

 - add converged scenario combining control and compute

Change-Id: I6a1d131a8efa55a141895adc01ba12c547e9686c