Glance: Change seed json to use config hierarchy

Change the Glance section of the seed json to use
the new hierarchical Glance param style (glance.api.param/
glance.registry.param).

Change-Id: I28073cef5c9b4cd6087c4f375a2394d612fe8dd7
Glance: Allow configuring default_log_levels

Allow a custom value for 'default_log_levels' to be set for both the
Glance registry and API.

Allows setting 'eventlet.wsgi.server=DEBUG' which is useful for tracking
each HTTP request.

Also allows setting a log level for any middleware etc.

Change-Id: I2a791b707fd91ba2d4ca7217b5189969a110c0c9
Remove swift container sync service

It is not required and the service definition file is not provided
in the Fedora openstack-swift-container package.

Change-Id: Ie10152e054eb1e3ffe5ce9a3f910577207606fea
Update nova's selinux policies

Nova needs permissions to /mnt/state/var/lib/nova and
/mnt/state/var/log/nova.

Change-Id: Ie1f23d5d11b725c77648b15ad0738f30ada36a83
Update glance's selinux policies

Also moved directory creation from post-configure.d
to configure.d

Change-Id: Ic7fc2a3b053efeb4ccfc3d97b94a5a3d8d88a1bd
Update keystone's selinux policies

Allow openssl to read keystone ssl files.

Move /mnt/state directory creation to configure.d.

Change-Id: I75ccbaf3fa4efde1c48340de7c63efa30652e3e0
Allow setting of compute configuration options

* image_cache_manager_interval     - Number of seconds to wait between
                                     runs of the image cache manager.
* resize_fs_using_block_device     - Attempt to resize the filesystem by
                                     accessing the image over a block device.
* resume_guests_state_on_host_boot - Whether to start guests that were
                                     running before the host rebooted.
* running_deleted_instance_action  - Action to take if a running deleted
                                     instance is detected.
* virt_mkfs                        - Name of the mkfs commands for ephemeral
                                     device.

Change-Id: Ib9108978ec306d5ccda0a410e519dbc88eb9ff11
Secure the mysql installation

 - Remove anonymous users
 - Remove remote root access
 - Remove the test database
 - Make sure the root password (if supplied)
   is set for all root accounts
As per /usr/bin/mysql_secure_installation

Change-Id: Iccb5015ec6b72a8646630078a6187231dd2413d7
Refactor ensure-bridge for persistance

Updates ensure-bridge so that we use network-scripts and eni files
to configure persistent network configs using the distro provided
mechanism. See docs here:

http://git.openvswitch.org/cgi-bin/gitweb.cgi?p=openvswitch;a=blob;f=rhel/README.RHEL;hb=HEAD
http://git.openvswitch.org/cgi-bin/gitweb.cgi?p=openvswitch;a=blob;f=debian/openvswitch-switch.README.Debian;hb=HEAD

This resolves some problems with the previous approach affecting
lease renewal and machine reboots.

With the new approach:

- tmp config files are written to disk
- the real config files are overwritten if a change is detected
- ifup/ifdown commands are used to start/stop the network interfaces
  if a change has been made
- All of the ip, ovs-vsctl, etc. commands are handled by the distro
  scripts

One more important change is that ensure-bridge expects both
the EXTERNAL_BRIDGE and PHYSICAL_INTERFACE parameters. Previously
the script only required EXTERNAL_BRIDGE. We don't have a use case
for using ensure-bridge without a physical interface so I just made
both required since this made the implementation simpler.

Change-Id: Ib775598d3bdd6f1ccecb283f47d10b92aaf0bd35
Closes-bug: #1272969
Stop using all ports option w/ neutron-ovs-cleanup

Now that our OVS bridge network configs are persistent on reboot
we no longer need to do this to make DHCP work.

Running neutron-ovs-cleanup to cleanup just the neutron generated
ports on reboot is now sufficient.

Change-Id: I42d528b0f58a2ec394d4e01bb02bbf0974e2c3af
Fix tgt target in cinder element

The package install version creates a file at /etc/tgt/conf.d/cinder.conf
and the cinder element has been adding an additional file. This would have
the effect of the source install working properly, but the package install
would end up creating volumes in /etc/cinder/volume instead of /mnt/state.

This patch changes the tgt target to be written to the existing file to
bring both the source and package installs to behave the same.

Change-Id: Ieeaa9518d6ed50595fbd70f1bbf0a17e3b5b1894
Enable unit testing

Adds the necessary scaffolding to run unit tests in this project.

Actual tests will be added in later commits.

Change-Id: Ia348dda6b482ca269dceace09f6ac3b24bbd6b32
Add unit tests for os-svc-daemon

Adds a set of unit tests for os-svc-daemon to verify the output
of running it with various options.  Includes a base test class
with some convenience functions for testing scripts.

Change-Id: Id54291686d39ab1b9f0ce4848a2fcf3c18a9ea18
The MySQL element requires the os-svc-install element

os-refresh-config/post-configure.d/40-mysql uses the os-svc-restart
command provided by os-svc-install

Change-Id: I35e805868ef5ca3b72b492c27a3b8c95e3b817df
Add support for "signals" to os-refresh-config

The new software config / deployments resources use signals.

A subtle difference between wait condition handles and signals in Heat
is that signals use POST, but wait conditions use PUT. This has
historical reasons that mostly are due to Amazon compatibility. We need
to continue to support both until we can eliminate all use of wait
conditions.

Change-Id: I69d9103b07100f700fb71a2cbbf267042625e7a7
Prevent network interface logging w/ ovs agent

Openvswitch will create many network interfaces, especially when
supporting a nova compute node. We don't want any bugs in the underyling
OS tools to result in an explosion of network interface specific logs,
as we have seen that this can overwhelm upstart. This is mostly to be
defensive against future problems.

Change-Id: Id8310c5f24ea596ed2443bcb927a07b005980981
reset-db restarts mysql only when a change is made

Reset-db should not restart the mysql service unless it needs to.

Change-Id: I102dedb00d589661b57768e8966995bda2e22ed8
Make tripleo-cd's te_localrc to support controller

Updates the te_localrc config file within tripleo-cd so
that it supports 'notCompute' or 'controller'.

We are moving towards using 'controller' exclusively...

Change-Id: I457ce4466af2998a11020bfec623a6bf113128a1
Fix permissions on files in /etc/mysql

Change unix permissions on files in /etc/mysql which
could have passwords

Change-Id: Ie57c43270225bb5cf3625b24b935e29f0076aaac
Excplicitly install dhcp-agent

The neutron dhcp-agent is not installed via transitive
dependencies on openSUSE. Install it expicitly.

Change-Id: Idfbb4ce615ad4396a6f040ef45503ae10f448e4a