Nova API services need keystoneclient not keystone

The API service recipes have been pulling in the entire
python-keystone package, which is the entire Keystone
set of services. This hasn't been necessary since
some time after Grizzly, when the tokenauth middleware
was moved to the client.

Closes-Bug: #1305318

Change-Id: I75ff23847936bb288ea49ca41d1e46edb5bd7730
New libvirt conf section for icehouse

Add new [libvirt] section.
Update names to remove libvirt_ prefix where needed, see bug.
Update tests.

Change-Id: I778df6a890e2880f515628e768ff4f33ea5611ab
Closes-Bug: #1266456
Fix default paths for lock and instances

Since $state_path only gets expanded when Nova reads it
from the configuration files, we have to assemble our
own path in the cookbooks to work against the directories.

Change-Id: I100b2912c0833b10a406f011b12067d0dd44cdaf
Closes-Bug: #1306806
Merge "Nova API services need keystoneclient not keystone"
Merge "Fix default paths for lock and instances"
[compute] Allow binding locally to different IP than endpoint IP

Sometimes you want the actual endpoint IP to be a load balanced IP, but
the bind IP to be a local IP (different per node).

This change allows that by using the <servicename>-bind attributes for the
actual local bind addresses

Implements blueprint increase-ip-binding-flexibility

Change-Id: Ib861d80dc97ab356297ecdc34210e43a2d768584
Merge "[compute] Allow binding locally to different IP than endpoint IP"
Merge "New libvirt conf section for icehouse"
Lock selinux to major version instead of minor

Minor versions should be backwards compat and this
allows people to pick up the COOK-4528 fix for the
selinux cookbook.

Change-Id: I2fd9ba69dd3f8ebabaacaca185ac9523f5dfd7fb
Closes-Bug: 1312952
Add network_allocate_retries option to nova.conf.erb.

Change-Id: Ia1055e752592bc6151b98a0a460dd167a3ef9097
Closes-Bug: 1313578
Speeding up ChefSpec test cases

Change-Id: I99f03b67f2d42904b8e82707bfd28b5456d3e209
Merge "Speeding up ChefSpec test cases"