Fix role SHA's for Ocata-3 release

This patch includes a SHA update.

For now we are leaving the ceilometer SHA pinned, and there are pending
items to still go in.

Change-Id: I52831c5e02fbf6faf51714f57982aed41a315e2a

ansible-role-requirements.yml

@@ -1,188 +1,188 @@
 - name: apt_package_pinning
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-apt_package_pinning
-  version: master
+  version: 4181e62d539f33c90e3276c0c6ebf6ce6f71c8c8
 - name: pip_install
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-pip_install
-  version: master
+  version: 786b5b637e49fefe36fb5d317bc644afad89a165
 - name: galera_client
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-galera_client
-  version: master
+  version: b2f4deb2ed0e9dd79d615cf49a5c3e09cdf44c9f
 - name: galera_server
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-galera_server
-  version: master
+  version: 4d8b80395b3ecd7bd2b06a3b2c4a71c9473ed963
 - name: ceph_client
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-ceph_client
-  version: master
+  version: 722a84eb7adaada62cb8c0a6cfae42a499b0f665
 - name: haproxy_server
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-haproxy_server
-  version: master
+  version: 9e6e9abee753da691ee1a3e4564b5b04c227931b
 - name: keepalived
   scm: git
   src: https://github.com/evrardjp/ansible-keepalived
-  version: master
+  version: 2.4.0
 - name: lxc_container_create
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-lxc_container_create
-  version: master
+  version: d9970fdeba081a2de97db994fca1e1ef86207ee3
 - name: lxc_hosts
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-lxc_hosts
-  version: master
+  version: 76f9f724d7ca1ed00ddd57b5dcf0a297f24d7f0e
 - name: memcached_server
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-memcached_server
-  version: master
+  version: 5f0defd39bb723f3b6124c9f4fa15387e6f474e1
 - name: openstack-ansible-security
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-security
-  version: master
+  version: b14056ee44fad250900a0b44fc2436ae509daca4
 - name: openstack_hosts
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-openstack_hosts
-  version: master
+  version: a436640aa7f51dd244be2b34773ff3c0bd04b296
 - name: os_keystone
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_keystone
-  version: master
+  version: cbeae2277b43917b18ca02f4f2a4edcfbc9518af
 - name: openstack_openrc
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-openstack_openrc
-  version: master
+  version: a19a049381370d935d58dea2d8a6eaf500437268
 - name: os_aodh
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_aodh
-  version: master
+  version: 6972fe39dc2f38e3e6406b96010dffa302cf5dcc
 - name: os_barbican
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_barbican
-  version: master
+  version: a347dcb333080de7d96931be633ce65be2d30336
 - name: os_ceilometer
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_ceilometer
-  version: master
+  version: 54e2b6e4caadcd0e85ffc99e34582e1fafd9ad77
 - name: os_cinder
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_cinder
-  version: master
+  version: 492e2394d4d23e77d80b7dd5d96ec8f28d56746d
 - name: os_glance
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_glance
-  version: master
+  version: 35a848c0dabe41bdb712fb30a6a50fe34c4ab103
 - name: os_gnocchi
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_gnocchi
-  version: master
+  version: 219889c69d781ab12ebc307d0083d1cf576197bf
 - name: os_heat
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_heat
-  version: master
+  version: 43b276613f16b946386055caef1289a9652d7d37
 - name: os_horizon
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_horizon
-  version: master
+  version: 3b65d22667a0d46e3504342550f178ff0e4cdb47
 - name: os_ironic
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_ironic
-  version: master
+  version: 9f5174d52ddc082c1451beb1912d9cdc441703b0
 - name: os_magnum
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_magnum
-  version: master
+  version: 5f574a6107e4f0e7e080de99647e9b5594374c7f
 - name: os_trove
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_trove
-  version: master
+  version: 8aa416f385f387eacf6dc34665aa0197bcd6f2f2
 - name: os_neutron
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_neutron
-  version: master
+  version: 3eaa45bf998dd4f4f483103d3d891ab1c0e78329
 - name: os_nova
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_nova
-  version: master
+  version: a89f13c608bc1c111a700e4aeef9abdb30abdc44
 - name: os_rally
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_rally
-  version: master
+  version: dc9dd4f7720c7750e130bf795133bc1c7326b39a
 - name: os_sahara
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_sahara
-  version: master
+  version: 68ddfa4d80f2f1d0d1e412923e4c123370ee0382
 - name: os_swift
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_swift
-  version: master
+  version: ed41f565a05168f295472a414438f31f2c404236
 - name: os_tempest
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_tempest
-  version: master
+  version: d57237c8aeb7c4af833f4d27e3af9a5537a085c2
 - name: plugins
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-plugins
-  version: master
+  version: 80d59cdf96fbd1e157cbbead0262801df7283ce1
 - name: rabbitmq_server
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-rabbitmq_server
-  version: master
+  version: 9c09b4a0658d3d25593eaa65f30db8fd3395e5f8
 - name: repo_build
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-repo_build
-  version: master
+  version: 1d0493b58ae06bf0167d1bf4dc90f274a796c80a
 - name: repo_server
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-repo_server
-  version: master
+  version: b8b9d63592eab5437c9ea8cdbbb44041a2bcc61d
 - name: rsyslog_client
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-rsyslog_client
-  version: master
+  version: 0dbf44a894792a3db5bcca9e0c5fb1207a4bfbc4
 - name: rsyslog_server
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-rsyslog_server
-  version: master
+  version: 3ca2f1e7b0d6b4935f2565586b9674247dcdaa0b
 - name: sshd
   scm: git
   src: https://github.com/willshersystems/ansible-sshd
-  version: master
+  version: 0.4.5
 - name: bird
   scm: git
   src: https://github.com/logan2211/ansible-bird
-  version: master
+  version: '1.2'
 - name: etcd
   scm: git
   src: https://github.com/logan2211/ansible-etcd
-  version: master
+  version: '1.2'
 - name: unbound
   scm: git
   src: https://github.com/logan2211/ansible-unbound
-  version: master
+  version: '1.1'
 - name: resolvconf
   scm: git
   src: https://github.com/logan2211/ansible-resolvconf
-  version: master
+  version: '1.2'
 - name: os_designate
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_designate
-  version: master
+  version: 4921521677171459ea15fc9f531b8cf0b50fe305
 - name: ceph.ceph-common
   scm: git
   src: https://github.com/ceph/ansible-ceph-common
-  version: master
+  version: v2.1.4
 - name: ceph.ceph-docker-common
   scm: git
   src: https://github.com/ceph/ansible-ceph-docker-common
-  version: master
+  version: ca86fd0ef6d24aa2c750a625acdcb8012c374aa0
 - name: ceph-mon
   scm: git
   src: https://github.com/ceph/ansible-ceph-mon
-  version: master
+  version: v2.1.4
 - name: ceph-osd
   scm: git
   src: https://github.com/ceph/ansible-ceph-osd
-  version: master
+  version: v2.1.4

releasenotes/notes/apt-source-filenamed-2cc698add82f5eea.yaml

@@ -0,0 +1,5 @@
+---
+features:
+  - The filename of the apt source for the ubuntu
+    cloud archive can now be defined with the
+    variable ``uca_apt_source_list_filename``.

releasenotes/notes/apt-source-filenamed-4b0f490c2bd97c19.yaml

@@ -0,0 +1,6 @@
+---
+features:
+  - The filename of the apt source for the ubuntu
+    cloud archive used in ceph client can now be
+    defined by giving a filename in the uca part
+    of the dict ``ceph_apt_repos``.

releasenotes/notes/apt-source-filenamed-796a4feb4434655c.yaml

@@ -0,0 +1,5 @@
+---
+features:
+  - The filename of the apt source for the ubuntu
+    cloud archive can now be defined with the
+    variable ``uca_apt_source_list_filename``.

releasenotes/notes/apt-source-filenamed-9718897bcfa7b36b.yaml

@@ -0,0 +1,4 @@
+---
+features:
+  - The filename of the apt/yum source can now be
+    defined with the variable ``mariadb_repo_filename``.

releasenotes/notes/apt-source-filenamed-9f83d18619debf26.yaml

@@ -0,0 +1,6 @@
+---
+features:
+  - The filename of the apt source can now be defined
+    with the variable ``filename`` inside the dicts
+    ``galera_repo`` and
+    ``galera_percona_xtrabackup_repo``.

releasenotes/notes/apt-source-filenamed-e710006ed93a9c67.yaml

@@ -0,0 +1,5 @@
+---
+features:
+  - The filename of the apt source for the ubuntu
+    cloud archive can now be defined with the
+    variable ``uca_apt_source_list_filename``.

releasenotes/notes/bump-xtrabackup-ppc64le-479623f2d4ea3f52.yaml

@@ -0,0 +1,4 @@
+---
+other:
+  - XtraBackup is currently on version 2.4.5 for ppc64le architecture
+    when pulling deb packages from the repos.

releasenotes/notes/bump-xtrabackup-version-91f09e88863e9487.yaml

@@ -0,0 +1,7 @@
+---
+other:
+  - XtraBackup is currently on version 2.4.5 for amd64 architecture
+    when pulling rpm/deb packages from the repos. To pull the latest
+    available 2.4 branch version from the yum/apt repository set the
+    ``use_percona_upstream`` variable to ``True``. The default
+    behavior using deb packages is unchanged.

releasenotes/notes/ceilometer_conf_from_upstream-3bc88e19085cdace.yaml

@@ -0,0 +1,14 @@
+---
+features:
+  - The ceilometer configuration files other than
+    ``ceilometer.conf`` are now retrieved from upstream.
+    You can override the repository from which these are
+    retrieved by setting the
+   ``ceilometer_git_config_lookup_location`` variable
+    which defaults to the git.openstack.org.
+deprecations:
+  - The vars to set ``source_sample_interval`` for the
+    ``os_ceilometer`` role are deprecated and will be
+    removed in the Queen cycle. To override these variables
+    after Queen, utilize the
+    ``ceilometer_pipeline_yaml_overrides`` file.

releasenotes/notes/cinder-backups-e615607a558248cd.yaml

@@ -0,0 +1,10 @@
+---
+features:
+  - |
+    Deployers can set ``heat_cinder_backups_enabled`` to enable or disable
+    the cinder backups feature in heat. If heat has cinder backups enabled,
+    but cinder's backup service is disabled, newly built stacks will be
+    undeletable.
+
+    The ``heat_cinder_backups_enabled`` variable is set to ``false`` by
+    default.

releasenotes/notes/cinder-nfs-multibackend-df133e8fff374da4.yaml

@@ -0,0 +1,5 @@
+---
+upgrade:
+  - The global override ``cinder_nfs_client`` is replaced
+    in favor of fully supporting multi backends
+    configuration via the cinder_backends stanza.

releasenotes/notes/disable_non_tls_listeners-ef9c20d70f820a69.yaml

@@ -0,0 +1,5 @@
+---
+features:
+  - The ``rabbitmq_server`` role now supports disabling listeners that do not
+    use TLS. Deployers can override the ``rabbitmq_disable_non_tls_listeners``
+    variable, setting a value of ``True`` if they wish to enable this feature.

releasenotes/notes/distribute-extra-keys-d01164639ff9bdf9.yaml

@@ -0,0 +1,6 @@
+---
+fixes:
+  - Properly distrubute client keys to nova hypervisors
+    when extra ceph clusters are being deployed.
+  - Properly remove temporary files used to transfer
+    ceph client keys from the deploy host and hypervisors. 

releasenotes/notes/fix-wrong-amount-of-open-files-systemd-54af64659bf61518.yaml

@@ -0,0 +1,8 @@
+---
+fixes:
+  - Systems using systemd (like Ubuntu Xenial) were
+    incorrectly limited to a low amount of open files.
+    This was causing issues when restarting galera.
+    A deployer can still define the maximum number
+    of open files with the variable
+    ``galera_file_limits`` (Defaults to 65536).

releasenotes/notes/galera_package_arch-913fb39b07a139fd.yaml

@@ -0,0 +1,9 @@
+---
+features:
+  - You can specify the ``galera_package_arch`` variable
+    to force a specific architecture when installing
+    percona and qpress packages. This will be automatically
+    calculated based on the architecture of the
+    ``galera_server`` host. Acceptable values are ``x86_64``
+    for ``Ubuntu-16.04`` and ``RHEL 7``, and ``ppc64le`` for
+    ``Ubuntu-16.04``.

releasenotes/notes/gnocchi_default_basic_authmode-32c951e1ab8f21ed.yaml

@@ -0,0 +1,12 @@
+---
+features:
+  - Specify the ``gnocchi_auth_mode`` var to set the
+    ``auth_mode`` for gnocchi. This defaults to ``basic``
+    which has changed from ``noauth`` to match upstream.
+    If ``gnocchi_keystone_auth`` is ``true`` or ``yes``
+    this value will default to ``keystone``.
+deprecations:
+  - The ``gnocchi_keystone_auth`` is deprecated, and
+    will be removed in the ``Queen`` cycle. Setting
+    ``gnocchi_auth_mode`` to ``keystone`` will achieve
+    the same result.

releasenotes/notes/gnocchi_remove_policy_api_paste-40941301f475f1d1.yaml

@@ -0,0 +1,8 @@
+---
+features:
+  - Specify the ``gnocchi_git_config_lookup_location``
+    value to specify the git repository where the
+    ``gnocchi`` config files can be retrieved. The
+    ``api-paste.ini`` and ``policy.json`` files are
+    now retrieved from the specified git repository
+    and are not carried in the ``os_gnocchi`` role.

releasenotes/notes/horizon_disallow_iframe_embed-8c115e431b812655.yaml

@@ -0,0 +1,6 @@
+---
+features:
+  - It's now possible to change the behavior of
+    ``DISALLOW_IFRAME_EMBED`` by defining the variable
+    ``horizon_disallow_iframe_embed`` in the user
+    variables.

releasenotes/notes/jewel-default-release-cf139062bb5fc972.yaml

@@ -0,0 +1,4 @@
+---
+upgrade:
+  - The latest stable release of Ceph, Jewel, is now used as the default client
+    version since Hammer was scheduled for EOL in November 2016.

releasenotes/notes/make-sure-the-repo-is-removed-if-not-used-36670d0a276192f1.yaml

@@ -0,0 +1,9 @@
+---
+fixes:
+  - The percona repository stayed in placed even after
+    a change of the variable ``use_percona_upstream``.
+    From now on, the percona repository will not be
+    present unless the deployer decides to
+    ``use_percona_upstream``. This also fixes a bug
+    of the presence of this apt repository after an
+    upgdrade from Mitaka.

releasenotes/notes/network_sriov_mappings-7e4c9bcb164625c3.yaml

@@ -0,0 +1,8 @@
+---
+features:
+        - The new provider network attribute ``sriov_host_interfaces``
+          is added to support SR-IOV network mappings inside Neutron.
+          The provider_network adds new items network_sriov_mappings
+          and network_sriov_mappings_list to the provider_networks
+          dictionary.
+          Multiple interfaces can be defined by comma separation.

releasenotes/notes/os-keystone-zero-downtime-upgrade-5f19ab84183490b9.yaml

@@ -1,5 +1,5 @@
 ---
 features:
   - The os_keystone role now performs a rolling upgrade
-    without downtime during installation. This process
+    without downtime during installation. `The process
-    is documented `here <http://docs.openstack.org/developer/keystone/upgrading.html#upgrading-without-downtime>`__.
+    for rolling upgrades is documented here <http://docs.openstack.org/developer/keystone/upgrading.html#upgrading-without-downtime>`_.

releasenotes/notes/os_ceilometer-centos-support-2a87df89aa7b7556.yaml

@@ -0,0 +1,3 @@
+---
+features:
+  - CentOS7/RHEL support has been added to the os_ceilometer role.

releasenotes/notes/purge-archive-policies-and-rules-support-4eee3b183d8c4cdc.yaml

@@ -0,0 +1,10 @@
+---
+upgrade:
+  - The gnocchi_archive_policies and
+    gnocchi_archive_policy_rules variables never had full
+    support in the role so were ineffective at the intended
+    purpose. The task references to them have been removed
+    and the library to perform gnocchi operations has also
+    been removed. This eliminates the need for the gnocchi
+    client to be installed outside the virtual environment
+    as well.

releasenotes/notes/rabbitmq-using-external-repo-instead-of-pkg-file-8cdd00f58d3496ba.yaml

@@ -0,0 +1,14 @@
+---
+features:
+  - |
+    RabbitMQ Server can now be installed from different
+    methods: a deb file (default), from standard
+    repository package and from external repository.
+    Current behavior is unchanged. Please define
+    ``rabbitmq_install_method: distro`` to use packages
+    provided by your distribution or
+    ``rabbitmq_install_method: external_repo`` to use
+    packages stored in an external repo. In the case
+    ``external_repo`` is used, the process will install
+    RabbitMQ from the packages hosted by packagecloud.io,
+    as recommended by RabbitMQ.

releasenotes/notes/rhel7-stig-default-f6c7c97498a8b2e7.yaml

@@ -0,0 +1,19 @@
+---
+features:
+  - |
+    The Red Hat Enterprise Linux (RHEL) 7 STIG content is now deployed by
+    default. Deployers can continue using the RHEL 7 STIG content by setting
+    the following Ansible variable:
+
+    .. code-block:: yaml
+
+        stig_version: rhel6
+upgrade:
+  - |
+    Deployers should review the new RHEL 7 STIG variables in
+    ``defaults/main.yml`` to provide custom configuration for the Ansible
+    tasks.
+deprecations:
+  - |
+    The Red Hat Enteprise Linux 6 STIG content has been deprecated. The tasks
+    and variables for the RHEL 6 STIG will be removed in a future release.

releasenotes/notes/swift-pypy-support-9706519c4b88a571.yaml

@@ -4,8 +4,8 @@ features:
     now an option. This change adds the ability to greatly improve swift 
     performance without the core code modifications. These changes have
     been implemented using the documentation provided by Intel and
-    Swiftstack. Notes about the performance increase can be seen
+    Swiftstack. `Notes about the performance increase can be seen
-    `here <https://software.intel.com/en-us/blogs/2016/05/06/doubling-the-performance-of-openstack-swift-with-no-code-changes>`__.
+    here <https://software.intel.com/en-us/blogs/2016/05/06/doubling-the-performance-of-openstack-swift-with-no-code-changes>`_.
 upgrade:
   - A new option `swift_pypy_enabled` has been added to enable or
     disable the pypy interpreter for swift. The default is "false".