Retry rabbitmq password change

Due to the bug referenced below, on Fedora it is possible for
the rabbitmq password change to fail the first time rabbitmq is
started.  This change adds a retry loop to avoid the problem in
devstack.  One retry should be enough in most (all?) cases, but
this will retry up to ten times just to be safe.

Note that just retrying the password change is not enough.  The
rabbitmq-server service must be restarted as well.

Change-Id: I403dcd503aa8e74e2ba6312a0decf0d4fd0d8795
bz: https://bugzilla.redhat.com/show_bug.cgi?id=1059028
Pull docker images from global registry

The global docker registry is where images are
being built and uploaded. It's effectively docker's
version of, say, 'pip'. The static tarballs are
not only an extra maintenance burden as they're outside
the standard build and publishing process, but are presently
outside the scope of an open development / release
process as well.

While this process does cause some trouble with
network-independence for CI purposes, the fetching
is still done from install-docker.sh; Additionally,
this driver is not currently tested via the community CI effort.

Change-Id: I3ee6bfee9c273cd3aabe1e00a1d1a8856a466189
Make MySQL query logging optional

* lib/databases/mysql: Wrap query log configuration in a check for a
ENABLE_QUERY_LOGGING variable.

* stackrc: Add the DATABASE_QUERY_LOGGING variable defaulted to True.

Change-Id: Iddf8538ad0a1e36e2c6944dc70315984026c8245
LDAP root DN creation fails

When keystone is configured to set up an LDAP server to use as
it's identity backend, the creation of the root DN fails.  The
problem is that one of the mods in the modify operation that sets
up the root DN is incorrect, which causes the entire modify
operation to fail.  The incorrect mod is attempting to configure
some attribute indexes, but one of the attributes it specifies is
undefined.  This patch removes the undefined attribute from the
template that is used to create the modify operation.

Change-Id: I413587130c64ca4f5f467b2ea1c0ab12867999ce
Closes-Bug: 1275158
Merge "Retry rabbitmq password change"
Merge "Make MySQL query logging optional"
Merge "LDAP root DN creation fails"
use ext4 for guest default ephemeral

this isn't upstream default because of compatibility questions
with really old host on providers. However there is no reason not
to do it in devstack.

Change-Id: I6438c0efb297cfa5d3dbb5f00701b24f01c39d14
Merge "use ext4 for guest default ephemeral"
Have ceilometer to respect the keystone settings

lib/ceilometer ignored the global settings related to keystone settings.

It can cause issues for example when the keystone does not listen on
127.0.0.1 even in single node deployment.

Change-Id: I6e4654daa2ec624ac11aaf7f49495fcfaa72071d
Use service role with glance service

glance just used to admin role for token validation,
the service role is sufficient for this.

glance also needs an user with enough permission to use swift,
so creating a dedictated service user for swift usage when s-proxy is
enabled.

Change-Id: I6df3905e5db35ea3421468ca1ee6d8de3271f8d1
bash_completion for heat and ceilometer

Installing bash completion for heat and ceilometer by using a
similar way used with other services.

Change-Id: I5094648272f2666f6bff181bfa3aeb35e863bd97
Merge "Have ceilometer to respect the keystone settings"
Merge "Pull docker images from global registry"
Merge "Use service role with glance service"
Initial Barbican entry for DevStack

Change-Id: I02a303a6d3e4ee202b804fbbdf329656aa04c7b3