Moved role constraints into model and removed edit deployment

(cherry picked from commit aa6290199261400be0f71dd5d638f384fb467f02)
Merge pull request #217 from vuntz/release/roxy/master

Moved role constraints into model and removed edit deployment
Removed the single assignment block from constraints
Merge pull request #218 from tboerger/feature/roxy/fix-constraints

Removed the single assignment block from constraints
Fix to work when keystone is behind haproxy
Use new helpers to get hostnames for endpoints
Generate dispersion.conf before running swift-dispersion-populate
HAProxy support for swift-proxy
Stop hardcoding 8080 port in several places

Using default attributes is just safer.
Merge pull request #215 from vuntz/haproxy

Work with keystone behind haproxy + haproxy for swift-proxy
Use new synchronization helpers to avoid races when deploying with HA

There are a number of possible races when deploying swift for the
first time:

 - when registering the endpoint and creating users in keystone
Merge pull request #222 from vuntz/sync-marks

Use new synchronization helpers to avoid races when deploying with HA
manage HA-enabled services via clone LWRP
Merge pull request #221 from jsuchome/clone

manage HA-enabled services via clone LWRP
Add synchronization marks around the creation of pacemaker resources
Merge pull request #223 from vuntz/sync-marks

Add synchronization marks around the creation of pacemaker resources
Add insecure flag to keystone_authtoken config when required
Merge pull request #225 from rhafer/keystone_insecure

Add insecure flag to keystone_authtoken config when required
ha: Follow convention for pacemaker resource naming
Merge pull request #226 from vuntz/ha-convention

Update pacemaker resource names + other conventions for HA