Fix ansible element to build standalone

The ansible element relies on many libraries and tools that tend to be
present when OpenStack components are built. However, this makes it work
standalone without any other elements.

Change-Id: I6c1b1d2e2d975ba49102998d48d5aa87efec002b
For Glance add port 9191 to the iptables list

Recent changes to enable security through iptables now
requires this.  Port 9292 was already being correctly configured.

Reference https://bugs.launchpad.net/tripleo/+bug/1356040

Change-Id: I5f2214cd70b3ccc3d8aabce48927b9f5dda5d75b
Closes-Bug: 1356040
Use auth_token from keystonemiddleware

This changes swift proxy-server conf to use the
keystone authtoken middleware from the
keystonemiddleware project. auth_token in
keystoneclient has been deprecated.

The corresponding change was made to swift in this patch:
https://review.openstack.org/#/c/109047/

Change-Id: I58dad8e1151067bf8df37e511fff5fc0e3dfb487
Link to volumes_dir

Packaged cinder uses a different /etc/cinder/volumes to the cinder
default volumes_dir.

Change-Id: I870f3ad22c11d6bf184d17f86a013fdf06cac3da
added clean_users flag in metadata

For securing rabbitmq setup, its important to delete users like guest.

This flags allows you to do the cleanup of all the remaining users that
are not specified through the metadata.

Change-Id: Ib21592e9d40d1909835ea2ed4987c6cbe7996389
Move tripleo-bm-test network to 172.16.0.0/22

We now have enough capacity in one rack to exceed 192.168.1.0/24 so
we agreed at the mid-cycle to scale this up to 172.16.0.0/22 -
allowing room for other uses in the same ip space, but exceeding our
current capacity by a comfortable margin.

Change-Id: I0aa99ec063d9c855e7e49416f0840d3b58a5e202
Co-Authored-By: Derek Higgins <derekh@redhat.com>
Reduce resource requirements set aside for testenvs

CPUPerEnv : Because we're not cpu bound overcommitting slightly on CPU
should not cause us any problems.

MemPerEnv : Nodes in testenvs now use the devtest default of 2G.

DiskPerEnv: Each testenv currently uses about 35G of diskspace, setting
aside almost twice should be ok.

Essentially this should cause the number of Test Envs on each hp1 host to
increase from 4 to 8 (bound by CPUPerEnv) and on each rh1 host from 3 to
6 (bound by MemPerEnv).

Change-Id: Ia39f3c395dc6cc11b5f04c591281539df8b1468f
Create the h1.ci flavor on ci-overclouds

Nodepool uses this flavor

Change-Id: Id6068ba73b2bbf8d6176ce35bdaad9f0e9e14bac
Use pkg-map for keystone source-install

Add support for different package names during keystone source
installation.

Change-Id: Ibfa4c71228c3d30884fef9d2c83d5ec45c8216cd
Ceilometer package install support.

Adds package install type support to the ceilometer elements, previously
only the source install type was available.

Depends on the ceilometer service mappings added in:
Id139a7c208659ead6330842bec01f7466d7ba417

Change-Id: Ib93be051d06b26e901cd382a8622dadf4c3e5916
Enable automatic failover of l3 routers

When l3-agent is not working on a node, neutron server will
automatically move its routers to another l3-agent. Neutron server
detects l3-agent outage after 1-2 minutes, neutron-l3-agent is now
monitored every 30s by pacemaker which will restart the service in case of
a failure (this should cover most of outages). If outage is longer
(e.g. networking issue) and routers are reassigned to another node,
l3-agent will clean up routers from local node when it restarts (or when
it can communicate with neutron server again).

This solution is not perfect and doesn't cover some edge situations
described here: https://bugs.launchpad.net/neutron/+bug/1174591
But I think this still improves current state of l3-agent HA.

This should not be needed once neutron l3 agent HA patch is merged
(I83f2a5d2af42164c42773b385ba7b00872eed54e).

Change-Id: Ifd8d73b3b1a5b13095e87683449aa4cab7579d3e
Install the psmisc package in the keepalived element

The chk_haproxy track script uses killall, which isn't installed on the
fedora cloud image.

Change-Id: Ia62aa1b40df75ece5ed370fd2dfdee56c2c8ee28
Adds Tuskar-UI element

Change-Id: I9d04c534696f13238191d462eaa456c68ca38256
Extract stunnel from openstack-ssl

Other elements may wish to use stunnel, so split its installation and
management into a new element which openstack-ssl (and the other
elements) can have in their element-deps.

Change-Id: Ia2cc793448a20244f781666e3ed1889f85e227c5
Add an element to install os-net-config.

Change-Id: Ide8c5645c272a80521a57e4696ae4e0cbfed6750
Merge "Adds Tuskar-UI element"
Merge "Install the psmisc package in the keepalived element"
Remove cinder configs from the seed config.json

We don't yet deploy Cinder in the seed or undercloud so
there is no point configuring it.

Change-Id: If95d12c25f676d87098d5c430fadc547a194da30
Decrease squids cache max freshness time

Set the maximum time an object can be considered fresh to 1 day, 3 days
was a too aggressive considering a new package can be released, uploaded
to the openstack pypi mirror and set as a minimum requirement for a project in a shorter timeframe.

Closes-Bug: #1371549
Change-Id: If35d58de6a62bfc7ddd94d807c91c22fc8a09dda
Add /var/log/rsyncd.log stateful path

Corrects issue in a standalone swift image where
/mnt/state/var/log/rsyncd.log was not created since it had not been
registered as a stateful path.  On a controller+swift image, this issue
does not exist because other elements have registered /var/log (such as
mysql).

Change-Id: I658b133b74740dfb4c991cda9747e98c7bf6e2b3