Typical usage:
   cp /etc/kolla/passwords.yml /etc/kolla/passwords.yml.old
   kolla-genpwd
   kolla-mergepwd --old /etc/kolla/passwords.yml.old \
                  --new /etc/kolla/passwords.yml     \
                  --final /etc/kolla/passwords.yml

Change-Id: Ibbc598909e28e096145841aec929d0cfcf8f7cab
Implements: blueprint kolla-merge-passwords

Change-Id: Ia1befbc1e3bd54ba4dcc3655d39c4a5445782bbf

Add pull task for object-expirer image.

Change-Id: Icc3cb3111e3b78545678e011f7321ba623ec85c2
Closes-Bug: #1643741

When configuring kolla with

 - kolla_enable_tls_external: "yes"

ceilometer service credential defaults to publicURL.

Ceilometer should work with the internal interface (v3 API Identity syntax):

.....
[service_credentials]
interface = internal
.....

Change-Id: I898ffb2b901f08b810756d80dbb988d8c9298219
Closes-Bug: #1643860

Change-Id: I5d76f9a6e5614600f4752330a3984504fc51377a
Closes-Bug: #1642237

Disable ipv6 will lose the vm

Change-Id: I7316d013d9281946c1c566279cd64ecbe6b67d37
Closes-Bug: #1643858

Change-Id: I25c426646ed7de88e3468c6f6923fe6dc72ab028
Closes-Bug: #1634641

ceilometer is not sending logs to heka because no heka-ceilometer.toml is created.
Updated templates files.

Change-Id: I69f3d93377c6c51d22f37ed120800f7489f5a8a0
Closes-Bug: #1642665

* update ceph tasks
* update mariadb tasks
Closes-Bug: #1643633

Change-Id: Ib81789574843edba6e33394a7f66a2e8077075eb

network_* and should be replaced with network.* [1]

[1]: https://github.com/openstack/cloudkitty/blob/master/etc/cloudkitty/cloudkitty.conf.sample#L126

Closes-bug: #1641940
Change-Id: I2a151898a58bae6a31f2e133aa3a6ee1b3cc7b09

Change-Id: I6f9190eccb2e1a1c5bd450ba63833f35f5d09aac

* Build kolla image by using kolla project's code
* bump openstack_release to 4.0.0
* Remove tox deploy related env, it is useless now.

Depends-On: I132ee005bce993cbadf411697817c2e95548dc81
Change-Id: Id899eb39d476b95130fbeb43adf4fd49ef32be32

Change-Id: If3cfda8a1bcb0ec0af39c0f7a067ead1f68cb4ff

In destination path gnocchi keyring file, keyring spelling is
written as keryring.

Change-Id: I8e0ad26dec9a61206692b0f3f2de7b318ded172d
Closes-Bug: #1642621

TrivialFix

Change-Id: I2ba1e29cbebaa78edf50f21ff8089f0b5cacc830

Build related jobs are removed in project-config, remove the related tox
env.

Change-Id: If1112b688fed185ba93a2d28a1ba3e77037d392c

Change-Id: I8dbb25d643ab8da2b049f70d28bdd0839b9f2605
Closes-Bug: #1641591
(cherry picked from commit 2f0d4ccee32df4999e0b50a327a9df2c2ac55971)

There is no liberty, mitaka and newton branch in kolla-ansible project.

Change-Id: I6d1ecaaea4382050bab3a8130667759bbcde3e91

PyMySQL is prefered to PythonMySQL for Sqlalchemy, as it provides
python3 support and is actively maintained, and is therefore the
currently recommended lib for db connections.
 * https://wiki.openstack.org/wiki/PyMySQL_evaluation

Kolla currently uses PyMySQL for all connections bar Barbican
(which works fine with PyMySQL): once this commit is merged it will
be possible to remove the PythonMySQL libs, and mysql libs for kolla
images (except kolla-toolbox).

TrivialFix

Change-Id: Id256387134ca551a181c5e49c9b6d63f62b72523

Set a default for CONFIG_DIR in service_checks to more easily allow
consumers not using the kolla-ansible tool to run the prechecks.

Change-Id: I78bc5dd6f37e6a60ecc6a86d43e56b05803a4fd5
Closes-Bug: #1629893

If an operator wants to deploy a single node (e.g. add an additional
compute), they may want to use the --limit feature of Ansible to avoid
waiting for every play across every node.

The problem with this is that --limit will gather facts for that node
only, causing template errors such as the infamous ('dict object' has no
attribute u'ansible_eth0'").

Ansible has catered to this problem to an extent with it's
"delegate_facts" mechanism. The only problem is that in the default 'all
nodes' case, we end up with a storm of SSHs as each node SSHs to every
other. I'm solving this with a separate task to only use this mechanism
when a subset of nodes has been specified (see ansible_play_batch).

Useful links on this subject:
- https://medium.com/@george.shuklin/perfecting-forced-fact-gathering-in-ansible-1611f9c8d0d5#.tr5zs3e7x
- http://docs.ansible.com/ansible/playbooks_delegation.html#delegated-facts

Change-Id: Ibb691eae15cacd9e5129ae9280fd296f5ba95940
Closes-Bug: 1642004

Fix .gitreview for new project name.

Change-Id: I89e73f69d8e59ffd887d61f498c1e8e3338b0c73

Using the `when` conditional on a `with_` loop gets evaluated on each
loop iteration and will not skip a task entirely. Use the `skip`
attribute to ignore errors in this scenario but only `skip` when
`enable_cinder_backend_nfs` is not enabled. If it is enabled the
`nfs_shares` file should be required and this task should fail if it
does not exist.

Co-authored-by: Andrew Widdersheim <amwiddersheim@gmail.com>
Change-Id: I6b997dd943efe7b16beb63899c1488fa5353d996
Closes-Bug: #1641183