Update openstacklib to latest master

commit 28130971a816859ff69eef037b9f9b1036a7720e
Author: Sebastien Badia <sebastien.badia@enovance.com>
Date:   Fri Oct 24 18:33:35 2014 +0200

    Switch to metadata.json for Puppet forge releases

    Since puppet 3.x, Puppet Labs Forge accept only the metadata.json
    for module description (Modulefile is now deprecated).

    This patch :
     - convert the Modulefile to metadata.json.
     - bump major version to 5 (for juno).
     - switch to stackforge namespace.
     - relax pe version_requirement to 3.x.

    Change-Id: I116ea888e4be8d791994573b57bc0b3ef9560804

commit 5ddb8ea169cb2c5d388c61bcd1c91b4df197cb8f
Merge: e6684e9 612fa7e
Author: Jenkins <jenkins@review.openstack.org>
Date:   Wed Oct 1 23:41:40 2014 +0000

    Merge "Implement base aviator provider"

commit 612fa7e121c9ddc36a365de3053879e1544b409f
Author: Colleen Murphy <colleen@puppetlabs.com>
Date:   Mon Aug 25 16:32:13 2014 -0700

    Implement base aviator provider

    This patch adds a dependency on the aimonb/aviator module and adds
    functionality to support interactions with the OpenStack services' API
    via aviator.

    The patch adds a parent provider that is intended for other providers
    to inherit from. The parent provider has methods to authenticate to
    openstack services, create session objects, and make requests. The
    authenticate method can accept credentials as an argument hash or infer
    credentials from the environment.

    It also adds a stub type parameter that allows types to incorporate
    basic parameters they need in order to support using aviator.

    Change-Id: I56b0d07ae8f4738037eda486b75a0f6e24fe80e7
    Implements: blueprint use-aviator-in-module-resources

commit e6684e98bf4aaea815c174d3b27535e5374d1fb6
Merge: 6aec291 4d3e668
Author: Jenkins <jenkins@review.openstack.org>
Date:   Tue Sep 30 13:46:59 2014 +0000

    Merge "Improve openstacklib::db::mysql test coverage"

commit 6aec291dd79e42c67a9e1fbfd8d29650ece36fc2
Merge: 6fbbd77 7467b6a
Author: Jenkins <jenkins@review.openstack.org>
Date:   Tue Sep 30 11:14:01 2014 +0000

    Merge "Greatly reduce code duplication in rspec tests of db::mysql"

commit 6fbbd778ebca4db19cf98b465658da6dd8b178f3
Author: Mathieu Gagné <mgagne@iweb.com>
Date:   Mon Sep 29 17:26:56 2014 -0400

    Fix support for puppetlabs-stdlib<4.2.0

    Support for non-array value in the function concat() was added
    in puppetlabs-stdlib 4.2.0.

    This change adds a fix to support puppetlabs-stdlib<4.2.0
    by converting $host to an array.

    Change-Id: Ib8e4c7a5f788d1e0bd7440bc93b560df8e39fcf4

commit 4d3e6683608176723a27053e929e69f9ab609541
Author: Mathieu Gagné <mgagne@iweb.com>
Date:   Mon Sep 29 16:47:24 2014 -0400

    Improve openstacklib::db::mysql test coverage

    * Add tests for openstacklib::db::mysql::host_access
    * Add tests for other overridable parameters in db::mysql
    * Do not test implementation details of host_access from
      within openstacklib::db::mysql tests.

    Change-Id: Ifcf3820a575f932313a62b9d294ebd92a5055cf5

commit 7467b6aaa2bf6a89c4a8ff7b63badd18bef09728
Author: Mathieu Gagné <mgagne@iweb.com>
Date:   Mon Sep 29 16:27:29 2014 -0400

    Greatly reduce code duplication in rspec tests of db::mysql

    Use shared examples to avoid duplicating tests for both platforms.

    Change-Id: I16a77a284070e243c2a46675af419e635a139969

commit a71ac3d3716510241df8854f2e748f295c28a338
Author: Mathieu Gagné <mgagne@iweb.com>
Date:   Mon Sep 29 16:18:34 2014 -0400

    Use host_access to provision mysql_user and mysql_grant

    Improve logic to be able to reuse host_access for both the initial
    mysql user/grant and the additional ones for allowed_hosts.

    Change-Id: Ia42833a99ee0fab41a571cccaeb31f740176fce3

commit 5ecdc92222b0e433478abcab711ea283abdfaf34
Merge: dc8da63 3793547
Author: Jenkins <jenkins@review.openstack.org>
Date:   Fri Sep 26 13:39:12 2014 +0000

    Merge "policy.json: Allow puppet modules to manage policy.json"

commit 37935472f1505abe6ee31dcb27b5f364201a53e9
Author: Yanis Guenane <yanis.guenane@enovance.com>
Date:   Fri Sep 19 16:52:52 2014 -0400

    policy.json: Allow puppet modules to manage policy.json

    Currently puppet modules does not allow one to manage policy.json.
    This commit aims to create a common resource for people to manage
    their policies.

    Change-Id: I1cd7765cdcbddb7e7ad5d720f1efa382641712f2

commit dc8da63ffd4ed164d7a684c9dcdd111431af65c5
Author: Colleen Murphy <colleen@puppetlabs.com>
Date:   Mon Sep 22 15:32:34 2014 -0700

    Update stdlib dependency to 4.x

    puppetlabs/stdlib 4.x is backwards compatible with 3.x and still tested
    on Puppet 2.7. Updating stdlib to 4.x allows modules to use newer
    functions without breaking older functionality.

    Change-Id: Iaaac5678cdd00db3a03eb1f715e6cd91a25cefc8
Update openstacklib
Update firewall to latest master

commit f061452461c841e83f20df1f9dd0aea485fb9744
Merge: db96537 fd5ab55
Author: Morgan Haskel <morgan@puppetlabs.com>
Date:   Tue Oct 28 12:52:03 2014 -0400

    Merge pull request #405 from cdenneen/master

    EL7 Fixes for CentOS

commit fd5ab55c87b69b087c69968a0d0c25e3b783db52
Merge: 653bb02 ed5dd3e
Author: cdenneen <cdenneen@gmail.com>
Date:   Mon Oct 27 21:23:59 2014 -0400

    Merge pull request #1 from cmurphy/fix_el7_tests

    Update tests for EL 7

commit ed5dd3e5d0870fe8fe2925c9e5215f18813e7791
Author: Colleen Murphy <colleen@puppetlabs.com>
Date:   Mon Oct 27 13:36:46 2014 -0700

    Update tests for EL 7

    Without this patch, unit tests make no distinction between EL < 7 and
    EL 7. This is a problem because the iptables save exec is different
    between the two operating systems, so the tests will fail for EL 7.
    This patch fixes the problem by updating the tests to include the new
    exec command for EL 7.

commit db965375d3b362997051720a61c463597165182c
Merge: 4ed1b43 1247c22
Author: Colleen Murphy <cmurphy@users.noreply.github.com>
Date:   Fri Oct 24 14:23:24 2014 -0700

    Merge pull request #424 from mhaskel/purge_ip6_fix

    Missing a provider specification

commit 4ed1b43e1629c1b6108133b0fc3be603d03ffe6c
Merge: dfb5e54 e7f9a38
Author: Hunter Haugen <hunter@puppetlabs.com>
Date:   Thu Oct 23 15:15:45 2014 -0700

    Merge pull request #383 from vzctl/ipset

    add ipset support

commit 1247c22c1096dcfcdcd8c0d2316eb6a1d88723cb
Author: Morgan Haskel <morgan@puppetlabs.com>
Date:   Thu Oct 23 10:31:57 2014 -0600

    Missing a provider specification

commit dfb5e54481e31f5cac53e701b93d42fb066de9bf
Merge: d2addf1 f7652f3
Author: Hunter Haugen <hunter@puppetlabs.com>
Date:   Wed Oct 22 10:44:38 2014 -0700

    Merge pull request #423 from mhaskel/metadata_fix

    Invalid metadata

commit f7652f321c560ca395e8db3a417a8abc051f38bb
Author: Morgan Haskel <morgan@puppetlabs.com>
Date:   Wed Oct 22 10:43:27 2014 -0700

    Invalid metadata

commit d2addf16979d5b5a87edec9ab279752c938fb3ac
Merge: f157da0 6cafec4
Author: Morgan Haskel <morgan@puppetlabs.com>
Date:   Mon Oct 20 14:01:29 2014 -0700

    Merge pull request #422 from hunner/fix_instances

    (MODULES-41) Change source for ip6tables provider

commit 6cafec4a5a90aef5c44c13697cd21274b1746563
Author: Hunter Haugen <hunter@puppetlabs.com>
Date:   Mon Oct 20 13:33:36 2014 -0700

    (MODULES-41) Change source for ip6tables provider

    This will allow purging of ipv6 rules

commit f157da01cc0419fd8422b92bed72b086ff6f16d9
Merge: 1417eef 8846341
Author: Hunter Haugen <hunter@puppetlabs.com>
Date:   Mon Oct 20 09:56:47 2014 -0700

    Merge pull request #420 from mhaskel/metadata_update

    Update to support PE3.x

commit 1417eef31988e5d7adda2897959d1ea270dcf789
Merge: 3658a85 5b5f923
Author: Hunter Haugen <hunter@puppetlabs.com>
Date:   Mon Oct 20 09:56:39 2014 -0700

    Merge pull request #419 from mhaskel/future_parser

    Fix for future parser

commit e7f9a38624b0dae630351a595c071b04dec34904
Author: Alexey Lapitsky <alexey@spotify.com>
Date:   Fri Sep 19 15:39:22 2014 -0400

    add more ipset documentation

commit e55d4ecf7becf8853ba15f028317ee16ee9a39dd
Author: Alexey Lapitsky <alexey@spotify.com>
Date:   Fri Sep 19 15:19:49 2014 -0400

    add negation support for ipset

commit 52d82874e9c1f33da7c72b42dc4579e8f8ae22f3
Author: Patrick Hemmer <patrick.hemmer@gmail.com>
Date:   Sat Apr 26 12:13:59 2014 -0400

    add ipset support

commit 88463414402d58ab54be389e209ecbaf87a8fcee
Author: Morgan Haskel <morgan@puppetlabs.com>
Date:   Sat Oct 18 17:22:03 2014 -0700

    Update to support PE3.x

commit 5b5f923df60e4fb89bdd292ba6c1d54b3905fa45
Author: Morgan Haskel <morgan@puppetlabs.com>
Date:   Sat Oct 18 17:08:41 2014 -0700

    Fix for future parser

    I'm not entirely sure why this was having issues with the future parser,
    but there was something funny with the pp function.

commit 3658a85057bfabdd541bba0f7a568aaef4f56530
Merge: 91570b4 df4ed1b
Author: Hunter Haugen <hunter@puppetlabs.com>
Date:   Fri Oct 17 14:22:22 2014 -0700

    Merge pull request #418 from mhaskel/remove_oel5

    Doesn't actually support OEL5

commit df4ed1b07f9af3a3039a00217bc7136a955888ad
Author: Morgan Haskel <morgan@puppetlabs.com>
Date:   Fri Oct 17 14:15:37 2014 -0700

    Doesn't actually support OEL5

    There are weird interactions between the version of iptables and the
    kernel on OEL5.

commit 91570b42c1a18a8d0f99311a711fff9704a0fb76
Merge: de7d781 b65afaf
Author: Morgan Haskel <morgan@puppetlabs.com>
Date:   Fri Oct 17 10:26:21 2014 -0700

    Merge pull request #417 from jbondpdx/fix-readme

    DOCUMENT-75: cstate param in my_fw::pre example should be state

commit b65afaf3f613f2ee23cb76560a88ad6a0bb457d3
Author: jbondpdx <jean@puppetlabs.com>
Date:   Fri Oct 17 10:20:39 2014 -0700

    DOCUMENT-75: cstate param in my_fw::pre example should be state

    Fixed!

commit de7d78168c6c0ef798136ac60109b56be544b2d4
Merge: 903a3a0 244f3f6
Author: Hunter Haugen <hunter@puppetlabs.com>
Date:   Thu Oct 16 16:38:29 2014 -0700

    Merge pull request #416 from mhaskel/selinux_fixes

    Don't do the idempotency checks with selinux

commit 244f3f666d8a5c2f7f84793a4a8e8b8c2c03aacb
Author: Morgan Haskel <morgan@puppetlabs.com>
Date:   Thu Oct 16 16:21:47 2014 -0700

    Don't do the idempotency checks with selinux

    Eventually the types should use autobefore, but until then, just don't
    do the idempotency checks.

commit 903a3a0b5fa244f946562855dcd348a57f364e6e
Merge: 00f6b5d 302f5ae
Author: Hunter Haugen <hunter@puppetlabs.com>
Date:   Tue Oct 14 11:56:42 2014 -0700

    Merge pull request #414 from mhaskel/spec_helper_fix

    Use puppet() so the module install works better

commit 302f5aecd8f356db15ea50fe5ea44c9912e93003
Author: Morgan Haskel <morgan@puppetlabs.com>
Date:   Tue Oct 14 11:53:23 2014 -0700

    Use puppet() so the module install works better

    This was failing on SLES10 due to path issues.

commit 00f6b5d2077f84febfd046ead3dd4a399f2f41b7
Merge: 2b38d12 3f297ae
Author: Travis Fields <cyberious@users.noreply.github.com>
Date:   Mon Oct 13 20:02:26 2014 -0700

    Merge pull request #413 from mhaskel/rhel5_fixes

    Fix for RHEL5

commit 3f297ae6f8c84f5988a9e322c6407a53033725d1
Author: Morgan Haskel <morgan@puppetlabs.com>
Date:   Mon Oct 13 16:54:01 2014 -0700

    Fix for RHEL5

    iptables-save output is in a different order for RHEL5 systems.  Make
    the tests check that ordering.

commit 2b38d12395fd2046181d05e8697829206409eddf
Merge: 955024e 473fffe
Author: Colleen Murphy <cmurphy@users.noreply.github.com>
Date:   Thu Oct 9 16:16:56 2014 -0700

    Merge pull request #412 from mhaskel/resource_cmd_spec_fix

    Fix for resource_cmd_spec

commit 473fffe359a215330b9662911b1293e8010141ed
Author: Morgan Haskel <morgan@puppetlabs.com>
Date:   Thu Oct 9 19:03:16 2014 -0400

    Fix for resource_cmd_spec

    Was checking for empty stderr in a few places, and also setting an
    iptables rule that doesn't work on deb7 and ubuntu trusty.

commit 955024ee846a251686f70505c4502ac406cfe4d4
Merge: e8dca83 b79c277
Author: Morgan Haskel <morgan@puppetlabs.com>
Date:   Mon Sep 29 14:18:51 2014 -0500

    Merge pull request #410 from justinstoller/bug/master/FM-1923-fixup-hieraconf

    (FM-1923) Fix spec_helper_acceptance to run against PE

commit b79c277d4d499c903974cfd0b7fd4f9f689b0cfc
Author: Justin Stoller <justin.stoller@gmail.com>
Date:   Mon Sep 29 12:16:10 2014 -0700

    (FM-1923) Fix spec_helper_acceptance to run against PE

commit e8dca8344476d481d8898549566814c6c9950b1c
Merge: 2df558c a626cf2
Author: Travis Fields <cyberious@users.noreply.github.com>
Date:   Wed Sep 17 09:05:24 2014 -0700

    Merge pull request #407 from hunner/redirect_validate

    (MODULES-1086) toports is not reqired with jump == REDIRECT

commit a626cf2dcf24d12ced4d91a15ab64b5494d4ffb2
Author: Hunter Haugen <hunter@puppetlabs.com>
Date:   Mon Sep 15 16:20:09 2014 -0700

    (MODULES-1086) toports is not reqired with jump == REDIRECT

    From the man page for REDIRECT and --to-ports: "This specifies a
    destination port or range of ports to use: without this, the destination
    port is never altered."

commit 2df558cc9dc78fde3e4aefc887f371f36faf1038
Merge: d5a10f5 1c7d88b
Author: Hunter Haugen <hunter@puppetlabs.com>
Date:   Wed Sep 10 11:50:04 2014 -0700

    Merge pull request #406 from cyberious/master

    Remove puppet_module_install in favor of copy_module_to

commit 1c7d88bde874db7390bf82b4bf9e5b9ec4a5cd34
Author: Travis Fields <travis@puppetlabs.com>
Date:   Wed Sep 10 11:47:53 2014 -0700

    Remove puppet_module_install in favor of copy_module_to

commit 653bb022b46a10ff7cccb280d1c14c1f3a9eb7c8
Author: cdenneen <cdenneen@gmail.com>
Date:   Wed Sep 3 22:42:19 2014 -0400

    Update redhat.pp

commit af94f65d37fa9c0bc366c4f45640ea80b69c36d7
Author: cdenneen <cdenneen@gmail.com>
Date:   Wed Sep 3 22:23:57 2014 -0400

    Update firewall.rb

commit 4563e2d4f3084ff1f6b901d2cbd77d46c9e4d55f
Author: cdenneen <cdenneen@gmail.com>
Date:   Wed Sep 3 13:14:06 2014 -0400

    Centos 7 won't work with operatingsystemrelease 7.0

    Centos 7 operatingsystemrelease is 7.0.1406 for example so switching to operatingsystemmajrelease would allow for 7 to be used for all EL7 products

commit 0d40289a76726f44ff80219bbef421d8a6ffbcbd
Author: cdenneen <cdenneen@gmail.com>
Date:   Wed Sep 3 13:08:17 2014 -0400

    Add CentOS to facter value operatingsystem test
Update firewall
Update galera to latest master

commit a63ab112aabdc9faa5e66fc095ef9dcc865d6999
Merge: a05ecbb 94df57a
Author: Ryan O'Hara <rohara@redhat.com>
Date:   Wed Sep 24 17:31:15 2014 -0500

    Merge pull request #3 from opuk/updated_template

    Check if wsrep_cluster_members is empty

commit 94df57a8249bd53663e8daf7df5b770b6188c1b8
Author: Johan Swensson <jswensso@redhat.com>
Date:   Tue Sep 23 15:05:32 2014 +0000

    Check if wsrep_cluster_members is empty

commit a05ecbb860fa9bb7968ad5735859f7197a5d151c
Merge: 55b8fb4 7398230
Author: Ryan O'Hara <rohara@redhat.com>
Date:   Thu Sep 4 10:46:36 2014 -0500

    Merge pull request #2 from djuran/master

    Typo preventing "puppet build module" from working

commit 55b8fb477ed466c37da08bfeb9a117d382aca48f
Author: Ryan O'Hara <rohara@redhat.com>
Date:   Wed Sep 3 13:08:51 2014 -0500

    Add wsrep_node_address parameter

commit 7398230d21182d2417f6e673726cc62fe10d8ea8
Author: David Juran <djuran@redhat.com>
Date:   Fri Aug 15 15:46:15 2014 +0200

    Typo preventing "puppet build module" from working
    Really, the credit goes to Domic Cleal
Update galera
Update glance to latest master

commit 7d8e7339e6638ed8c3ceffa180d1e4f269603431
Author: Sebastien Badia <sebastien.badia@enovance.com>
Date:   Sat Sep 27 11:30:26 2014 +0200

    Switch to metadata.json for Puppet forge releases

    Since puppet 3.x, Puppet Labs Forge accept only the metadata.json file
    for module description (Modulefile is now deprecated).

    This patch :
     - convert the Modulefile to metadata.json.
     - bump major version to 5 (for juno), and deps.
     - switch to stackforge namespace.
     - relax pe version_requirement to 3.x.

    Change-Id: I173b13fe1ab32a3e32cc1581455333bea1eddf6d

commit abd028a5f6b0e5e139cb53678482299b8c55b0d3
Author: Jan Kundrát <jan.kundrat@cesnet.cz>
Date:   Wed Oct 1 01:34:57 2014 +0200

    Run the `glance` CLI tool with appropriate region name

    This is pretty important in situations where Keystone contains information about
    multiple regions. The holding assumption is that the glance::image etc are used
    for image upload for the current region.

    Change-Id: I0a24cd24ddf3e0b1fab94e693a2fac847cc7271c
Update glance
Update heat to latest master

commit 599b6133bb6620214d3e3e82268da54a66623cca
Author: Sebastien Badia <sebastien.badia@enovance.com>
Date:   Sat Sep 27 11:31:52 2014 +0200

    Switch to metadata.json for Puppet forge releases

    Since puppet 3.x, Puppet Labs Forge accept only the metadata.json file
    for module description (Modulefile is now deprecated).

    This patch :
     - convert the Modulefile to metadata.json.
     - bump major version to 5 (for juno), and deps.
     - switch to stackforge namespace.
     - relax pe version_requirement to 3.x.

    Change-Id: Ie64090dd0adc112a40c5f1b47442578216afd5e4

commit 0e6d7eacecd70819384ac61ea3b9df38b90411b0
Author: Emilien Macchi <emilien.macchi@enovance.com>
Date:   Wed Oct 8 11:07:26 2014 -0400

    engine: configure deferred authentication method

    The default deferred_auth_method of password is deprecated as of
    Icehouse, so although it is still the default, deployers are strongly
    encouraged to move to using deferred_auth_method=trusts, which is
    planned to become the default for Juno.

    * It avoids storing user credentials in the heat database
    * It removes the need to provide a password as well as a token on stack create
    * It limits the actions the heat service user can perform on a users behalf.

    This patch aims to:
    * Set deferred_auth_method = trusts in /etc/heat/heat.conf for engine
    * Specify the roles to be delegated to the heat service user
       (trusts_delegated_roles in heat.conf, defaults to heat_stack_owner
       which will be referred to in the following instructions. You may wish
       to modify this list of roles to suit your local RBAC policies)
    * Create the role(s) in Keystone (optional and enabled by default).

    Change-Id: I99eaf29473bc4e70017580b3b340c24093aa0619
Update heat
Update horizon to latest master

commit f1e5acfe6fdd3709b4c34f12b90786cc7fd52a07
Merge: 8cb08e2 325db8a
Author: Jenkins <jenkins@review.openstack.org>
Date:   Fri Oct 24 00:34:47 2014 +0000

    Merge "Add selection of Django session engine to this module"

commit 325db8a86c56b5d56d5b3e4aea20013318dd1d94
Author: Tim Goddard <timg@catalyst.net.nz>
Date:   Fri Oct 10 11:24:23 2014 +1300

    Add selection of Django session engine to this module

    This allows Django to be set to use something other than
    the default session engine through Puppet. By default,
    it will have no impact on existing configurations.

    We've added this because our security constraints make signed cookies
    as a session store for Horizon undesirable. The reasons for this are:

      * Sessions become vulnerable to replay attacks,
        a clean log-out is difficult to achieve.
      * Serializing sessions in cookies may allow an attacker
        to escalate read-only access to server configuration
        into code execution via deserialization of attacker-generated
        content.

    Change-Id: Iaf80bdc1bb9ce55ff46b2dcfac73daad90fd0d37

commit 8cb08e215085582d5beee4ce4cffaabae8c46472
Merge: 5ecc0ea 959398f
Author: Jenkins <jenkins@review.openstack.org>
Date:   Thu Oct 23 19:17:23 2014 +0000

    Merge "Switch to metadata.json for Puppet forge releases"

commit 959398fb4c28dc049070ebb80ca8936ac5097cfe
Author: Sebastien Badia <sebastien.badia@enovance.com>
Date:   Sat Sep 27 11:33:13 2014 +0200

    Switch to metadata.json for Puppet forge releases

    Since puppet 3.x, Puppet Labs Forge accept only the metadata.json file
    for module description (Modulefile is now deprecated).

    This patch :
     - convert the Modulefile to metadata.json.
     - bump major version to 5 (for juno).
     - switch to stackforge namespace.
     - relax pe version_requirement to 3.x.

    Change-Id: I195a4ebd7d8a9fe77f1ad7149fba6037f9e1a865

commit 5ecc0eaa69175e70e14c3aaad7e0757ab32bdb02
Author: Mathieu Gagné <mgagne@iweb.com>
Date:   Fri Oct 17 19:20:44 2014 -0400

    Add ability to configure policy_files_path and policy_files

    This change adds the ability to configure policy_files_path
    and policy_files configs used by the policy enforcement (RBAC)
    support in Horizon.

    Closes-bug: #1383458
    Change-Id: Iad33e68d09b81b384d4333ef9fa785939d43f9e6

commit 78bdbe683affc2b8d86861eb220120dba12b3628
Author: Rich Megginson <rmeggins@redhat.com>
Date:   Tue Sep 23 13:45:30 2014 -0600

    should not set wsgi_socket_prefix

    The per-platform setting of wsgi_socket_prefix has been moved
    into the Apache module - horizon should just include ::apache::mod::wsgi
    Add a dependency on the version of puppetlabs-apache that sets the
    default wsgi_socket_prefix for osfamily RedHat

    Closes-Bug: #1374634
    Change-Id: Iba8311ba25445d3367e71d3c0e854291c33e7258
Update horizon
Update keystone to latest master

commit 3f64ee48fa04ca6c5f8173a3dbadad946ca41239
Merge: 77d066c 51e3052
Author: Jenkins <jenkins@review.openstack.org>
Date:   Tue Oct 28 15:14:17 2014 +0000

    Merge "Switch to metadata.json for Puppet forge releases"

commit 51e3052d71bb22f902a7f7ba6bf5686b36f58ff6
Author: Sebastien Badia <sebastien.badia@enovance.com>
Date:   Sat Sep 27 11:35:06 2014 +0200

    Switch to metadata.json for Puppet forge releases

    Since puppet 3.x, Puppet Labs Forge accept only the metadata.json file
    for module description (Modulefile is now deprecated).

    This patch :
     - convert the Modulefile to metadata.json.
     - bump major version to 5 (for juno).
     - switch to stackforge namespace.
     - relax pe version_requirement to 3.x.

    Change-Id: I772f187071e6ea082ff36281b405eac265009323

commit 77d066ce4f5c3ee21a780c5e332a24964c8542ec
Merge: 1459063 7ddfea2
Author: Jenkins <jenkins@review.openstack.org>
Date:   Mon Oct 20 15:29:57 2014 +0000

    Merge "Switch to new Juno defaults"

commit 14590637f26401a3531bcbd49b634e2d311681c3
Author: Tri Hoang Vo <t.vo_hoang@telekom.de>
Date:   Thu Oct 16 19:25:12 2014 +0200

    Add more config options for pki signing

    * add config signing/cert_subject
    * add config signing/key_size
    * use default values from keystone

    Change-Id: Ie327b8ca4f0f8026582530a9aefe5f0d184f92e2

commit 7ddfea27830e96eacf9d026c622bdbac0da43e41
Author: Matt Fischer <matt@mattfischer.com>
Date:   Mon Oct 13 14:30:11 2014 -0600

    Switch to new Juno defaults

    There are some new default config file values for Juno so switch to
    them. This commit does not include the LDAP deprecations which is
    contained in a different commit.

    Change-Id: Ida18439353d4083e968cbe9ae81479ea65650076
    Closes-Bug: #1380767
Update keystone
Update mysql to latest master

commit 40dd1805886aee56dc02860565f161c6e3b4c7e5
Merge: 8540e26 c4d45c3
Author: Igor Galić <i.galic@brainsware.org>
Date:   Tue Oct 28 16:14:59 2014 +0100

    Merge pull request #571 from jtopper/master

    [MODULES-1333] Add explicit dependencies for mysql_database and mysql_user types

commit 8540e26ff4aee9d98c5385cca65ad3130165cd69
Merge: d45c1e4 46065c4
Author: Igor Galić <i.galic@brainsware.org>
Date:   Tue Oct 28 14:42:46 2014 +0100

    Merge pull request #587 from maxenced/fix-mysql-grant-parsing

    The old regex requires something after the 'host' part. Fix this.

commit 46065c4095d21006be6687a242514e29e428d5e0
Author: Maxence Dunnewind <maxence@typhon.com>
Date:   Mon Oct 27 14:34:24 2014 +0100

    The old regex requires something after the 'host' part. Fix this.

    Old regex is : /^GRANT\s(.+)\sON\s(.+)\sTO\s(.*)@(.*?)(\s.*)$/ . The
    last part (\s.*)$ means "a space followed by anything". The issue is
    that when user has no GRANT privileges, the "SHOW GRANTS FOR #{user_string}" returns
    "GRANT SELECT ON `database`.* TO 'user'@'%'" which does not match (\s.*)$ .
    This small patch fixes this making last bloc optional (thanks to '?').

commit c4d45c3eb5929ee27e0bd877e737303f8cf29a58
Author: Jon Topper <jon@scalefactory.com>
Date:   Tue Sep 16 15:46:13 2014 +0100

    Add explicit dependencies for types

    mysql_grant has an autorequire()'d dependency on the .my.cnf file used
    by the provider to talk to the database.

    I've added this to mysql_database and mysql_user too since logically
    these also need the file to be in place.

    I've hit this bug because of a slightly unusual edge case in our own
    manifests, but I think this fix belongs upstream regardless.
Update mysql
Update neutron to latest master

commit 4b7360b16e37e0460ee20d48cba408b796b029c3
Merge: 54ffe9a baf9d00
Author: Jenkins <jenkins@review.openstack.org>
Date:   Mon Oct 27 23:13:53 2014 +0000

    Merge "Switch to metadata.json for Puppet forge releases"

commit 54ffe9af558053cf34d21a35926799aad3f33d02
Author: Yanis Guenane <yanis.guenane@enovance.com>
Date:   Wed Oct 22 11:31:47 2014 -0400

    Policies: Fix potential ordering issues

    Ensure the class neutron::policy is applied after the package has
    been installed.

    Change-Id: I0028073803add15c7a9967b646fd580599e4b3fb

commit baf9d0090de5810df50f09c7fbe4a863b83ec4ac
Author: Sebastien Badia <sebastien.badia@enovance.com>
Date:   Sat Sep 27 11:36:16 2014 +0200

    Switch to metadata.json for Puppet forge releases

    Since puppet 3.x, Puppet Labs Forge accept only the metadata.json file
    for module description (Modulefile is now deprecated).

    This patch :
     - convert the Modulefile to metadata.json.
     - bump major version to 5 (for juno), and deps.
     - switch to stackforge namespace.
     - relax pe version_requirement to 3.x.
     - bump vswitch module deps to 1.0.0 (future semver release)

    Change-Id: I2e87acbe5dd6b6fb1681678bbf152bafa15ecac0

commit 07546a684521743b5b3535f4445d55b6770b502d
Author: Yanis Guenane <yanis.guenane@enovance.com>
Date:   Fri Sep 26 19:10:12 2014 -0400

    policy.json: Allow one to manage them from the puppet module

    This commit allow a deployer to manage the policies via this module
    It relies on augeas to change only the policy needed. The init takes
    a hash of policies and apply them.

    Change-Id: Iea6e7dccc2332045a2ebe191981538d045918f46

commit d65ffe07d397e9c47e562da249e29e556c82cc5c
Merge: cefbdc8 bc04758
Author: Jenkins <jenkins@review.openstack.org>
Date:   Sun Oct 12 22:36:47 2014 +0000

    Merge "fix dependency between ml2 configs and package"

commit cefbdc897d70fd1c1fc44e372f05336674efd940
Author: Emilien Macchi <emilien.macchi@enovance.com>
Date:   Tue Oct 7 16:28:02 2014 -0400

    Change default LBaaS user group

    Change user_group default parameter:
    * nobody for Red Hat systems
    * nogroup for Debian systems

    Closes-bug #1378519

    Change-Id: Ic2940c2e3d6510d8c6147d09e2af67d8bee7ac9d

commit cd831f7a69d634ae735bc9642839024f8cf03c11
Author: Chris Hoge <chris@hogepodge.com>
Date:   Sat Oct 4 09:08:59 2014 -0700

    Install package libreswan in RHEL 7 systems for vpnaas

    RHEL 7 systems have replaced the openswan package with libreswan.

    Change-Id: I4c8e891b83b8301cb111af1be6e84ec4cf9c69a1

commit 3e8f7bcf9a08732e1149d43445eaf4227e9dc8b4
Merge: c4aafdd 9ea03ae
Author: Jenkins <jenkins@review.openstack.org>
Date:   Fri Oct 3 21:26:36 2014 +0000

    Merge "Fixes plugin.ini error"

commit c4aafdd3b34cd363b819b6d9b8a415ef6dcf7ef7
Author: Emilien Macchi <emilien.macchi@enovance.com>
Date:   Thu Sep 18 14:21:03 2014 -0400

    Enable DVR + HA support

    Juno brings two new big features:
    - distributed routers
    - router high availability

    This patchs aims to allow the users to configure DVR and/or HA routers.
    Signed-off-by: Emilien Macchi <emilien.macchi@enovance.com>

    Change-Id: Iaab5ab7e63f2627381ca1d5bb1cfd836433d734e

commit bc047586dd61797357712db66caaf935565736e7
Author: Tri Hoang Vo <t.vo_hoang@telekom.de>
Date:   Wed Jun 25 13:05:36 2014 +0200

    fix dependency between ml2 configs and package

    debian platform missing a dependency between the package that installs
    ml2 plugin (neutron-server) and the ml2 plugin configs
    (neutron_plugin_ml2) on control node. neutron_plugin_ml2 can only be
    ensured to present after the package installation.

    the dependency only apllies to node where package neutron-server is
    installed (control node) as this plugin class is not linked to
    neutron-server.

    Change-Id: I20dd5481527ea007779129eafc1558f328ca375a

commit 9ea03aea57f2dcaeccc886c3539e4b8a6e5940be
Author: Ivan Chavero <ichavero@redhat.com>
Date:   Mon Jul 7 16:32:38 2014 -0600

    Fixes plugin.ini error

    When executing the cisco.pp manifest it throws an error
    if the plugin.ini file is already declared.

    Change-Id: Ibc9c8d343d86ffa8af74767ac6fbbd75cf03f45c
Update neutron
Update nova to latest master

commit 648c9e85830204995c24ae43d15efe278b9fa56b
Author: Sebastien Badia <sebastien.badia@enovance.com>
Date:   Sat Sep 27 11:37:58 2014 +0200

    Switch to metadata.json for Puppet forge releases

    Since puppet 3.x, Puppet Labs Forge accept only the metadata.json file
    for module description (Modulefile is now deprecated).

    This patch :
     - convert the Modulefile to metadata.json.
     - bump major version to 5 (for juno), and deps.
     - switch to stackforge namespace.
     - relax pe version_requirement to 3.x.

    Change-Id: Iac5654750e46860888c0a035ed22f75f5f7bed3a

commit e1b3be434ebff7a0905c68a5694dc99da12ee533
Merge: a5b3a36 caa645d
Author: Jenkins <jenkins@review.openstack.org>
Date:   Mon Oct 20 01:55:08 2014 +0000

    Merge "fixtures: Fix puppet-mysql fixture branch"

commit a5b3a36601c37b34063471e47752d5f06f260e69
Merge: 3ffc5a2 9a5a540
Author: Jenkins <jenkins@review.openstack.org>
Date:   Mon Oct 20 00:38:11 2014 +0000

    Merge "Fix RedHat service provider conditional"

commit 3ffc5a263113232230b69e621e1b6167f2148390
Author: Emilien Macchi <emilien.macchi@enovance.com>
Date:   Thu Oct 16 15:20:41 2014 -0400

    migraton/libvirt: fix dependency cycle

    In the last commit, I introduced a dependency cyle:
    (File_line[/etc/sysconfig/libvirtd libvirtd args] => Service[libvirt] =>
    Class[Nova::Compute::Libvirt] => File_line[/etc/sysconfig/libvirtd
    libvirtd args])

    The "require" is useless, since the migration class is called by
    nova::compute::libvirt, let's delete it.

    Change-Id: I97aeb9dcc11bb867e020826ad9ed5d7d0e04a8e8

commit 9a5a540738f887f87886ae4f9f52d5ade1b26bc7
Author: Colleen Murphy <colleen@puppetlabs.com>
Date:   Wed Oct 15 22:56:33 2014 -0700

    Fix RedHat service provider conditional

    Without this patch, params.pp conditionally uses 'RedHat' as a matching
    condition to $::operatingsystem for two different cases, and will match
    on the first case. This is a problem because it will prevent the proper
    service provider from being assigned on RedHat operating systems with
    major version < 7. This patch removes RedHat from the first case so that
    RedHat operating systems will match on the second case and assign the
    init service provider if the major version is < 7.

    Change-Id: Id5c49cc11a4112c27621c72a7b2e6fcaf9da6aef

commit 94235f6d831d1d4bc3e24319b0df03978256f7ac
Merge: 93a0c27 4578808
Author: Jenkins <jenkins@review.openstack.org>
Date:   Wed Oct 15 17:23:25 2014 +0000

    Merge "Make user creation optional when creating service."

commit 93a0c27ac9f4a4eeec761250838aae2e321eb1b1
Author: Emilien Macchi <emilien.macchi@enovance.com>
Date:   Tue Oct 14 14:34:37 2014 -0400

    Debian: update libvirtd init script path

    Lately [1], Debian packaging changed to use /etc/default/libvirtd instead of
    /etc/default/libvirt-bin (probably to align with systemd, since in Red
    Hat it's /etc/sysconfig/libvirtd).

    This patch aims to modifify nova::migration::libvirt to build the right
    init script path from a param in nova::compute::libvirt
    (libvirt_service_name).

    [1] http://anonscm.debian.org/cgit/pkg-libvirt/libvirt.git/commit/debian/libvirt-bin.maintscript?id=28dd3618a9a2a8f769d1fa12c28647c4599d9e8e

    Change-Id: I7483efe644d301c2646e4063fe7f1aef3e83cb6b
    Closes-bug: #1381172

commit caa645dcb65ea7b24950615a37bf9a5e2a51ac46
Author: Sebastien Badia <sebastien.badia@enovance.com>
Date:   Sat Sep 27 11:40:58 2014 +0200

    fixtures: Fix puppet-mysql fixture branch

    The remote branch origin/2.x doesn't exist for puppetlabs-mysql module

    Change-Id: I2a43c43e4d9d16446fb000ff3a7644d815be478c

commit 45788081c9b26dda469d110db5605f905a6c9b3c
Author: Risto Laurikainen <risto.laurikainen@csc.fi>
Date:   Fri Aug 22 15:32:29 2014 +0300

    Make user creation optional when creating service.

    In some cases it is useful to be able to just configure
    the service in Keystone and not the service user. This
    is the case when e.g. a read only LDAP backend is used.
    Added parameters configure_user and configure_user_role
    (default to true).

    Change-Id: If3d53c2c9070691b4731142f512b1f4bb754be00
    Closes-Bug: 1360232
Update nova