Currently, when there are some qemu processes which may be some useful
virtual machines running by the operator running on non compute node, the
cleanup script will fail the cleanup operation for that node. We need to
ignore the qemu process check for non compute nodes.

Change-Id: If49a1a30764063935b2a65312de8f3b2357c7fbc
Closes-bug: 1633005

Change-Id: I9779d5df65c5d560854dec55cc0a70cb82f895c4
Closes-Bug: #1632697

We need install qemu-kvm package which come from the Cloud SIG rather
then qemu-system-x86 which come from EPEL.

Change-Id: Ibd027069771552d3db0e4fe0c7406ddd1bfc0673
Closes-Bug: #1631984

TrivialFix

Co-Authored-By: zhubingbing <zhubingbing10@gmail.com>

Change-Id: Idcd4c0024f93266746a00a2320980c08eca8b7e2

By default Barbican has not enabled the Keystone authentication:

[pipeline:barbican_api]
pipeline = cors unauthenticated-context apiapp

According to the Barbican install guide[1] this pipeline should be:

pipeline = cors authtoken context apiapp

[1]: http://docs.openstack.org/developer/barbican/setup/keystone.html

Change-Id: I941515a98772a72762b20507e100e7872f3b4ab8
Closes-bug: #1625337

By default barbican uwsgi is configured to listen all address on host
[1], we need to change this to the ip address of the host.

[1]:
https://github.com/openstack/barbican/blob/master/etc/barbican/vassals/barbican-api.ini

Change-Id: I4a1f9fb44ad55caf21f82c1b6d272a9743d65fd8
Closes-bug: #1632177

uwsgi is not installed for barbican-api in ubuntu.

Change-Id: Ibaaf7eb9dfae2f88a5a2d9c3b4983d403e52c932
Closes-bug: #1632170

The destroy playbook calls the cleanup-images script.  All other
scripts related to destroy were in setup.cfg while cleanup-images
was missing.

TrivialFix

Change-Id: I3d5dc435d03aded9e8b415dda8435b5e1c5ec937

TrivialFix

Change-Id: If98f7aff71b5d003effc466cc8b6dbec219792cf

The provider_config is configured wrong. And Grafana only supports one
Memcached instance for session, which is bad for high available.

Use mysql to provider the session storage.

TrivialFix

Change-Id: I889a961d7f36f44701654fbac04b4bff05043506

netaddr is required by the ipaddr filter used in
ansible/roles/prechecks/tasks/port_checks.yml.

Change-Id: I766d87949553fb46ef2c0480e7706ee1ef2d26d0
Closes-bug: #1631921

Change-Id: I860fdc3268d0fdcb775ea345bb0eb621c8dafe07
Closes-bug: #1631902

Sahara api workers is hard-coded to 2 [1], it should be configurable as
other services do.

[1]:
https://github.com/openstack/kolla/blob/master/ansible/roles/sahara/templates/sahara.conf.j2#L9

Change-Id: Iefb487275c4e0d02f58a198e3995ca096f5e9218
Closes-bug: 1631835

Closes-Bug: #1630947

Change-Id: Ie28ec6399add384962cfdcf83c93c3bef132d57e

In cases where a proxy command is being used to access cluster
instances, rootwrap is needed for sahara user in docker container.

http://docs.openstack.org/developer/sahara/userdoc/advanced.configuration.guide.html#non-root-users

TrivialFix

Change-Id: Ic2b7deb6bd0e5f740944c32d89390fb56b88f4fa

Change-Id: I61d0d5a904177c9719357792dfd9f051f5b19d60

When all mariadb nodes are stopped gracefully, mariadb galera will
write it's last executed position into the grastate.dat file. Need find
the node with largest seqno number in that file and recovery from that
node.

Closes-Bug: #1627717
Change-Id: I6e97c190eec99c966bffde0698f783e519ba14bd

Closes-Bug: #1626364
Change-Id: I9d586b950b7099a9b160f7b32c9ff00b189a0287

mistral create keystone client by using auth_uri to v3 explicitly[0]

[0] https://github.com/openstack/mistral/blob/7685cdb1b653ecbeda28ad45adcc3196cb52767e/mistral/utils/openstack/keystone.py#L174,#L184

Change-Id: Iff38204414289a9aa36232b2c461bc5bdde46e56
Closes-Bug: #1620630