Since we added to nstat's telegraf plugin the possibility
to collect data from `/proc/net/softnet_stat` regarding
dropped packets and rx_net_action a.k.a time squeeze, we need to enable
it globally on all hosts.

Also grafana dashboard update to include new graphs + added four
new Prometheus alers.

Related-Bug: PROD-21090

Change-Id: I9dfe87bdc8b677a51e3f305dd3c75c7d4cc4e0d4

nscd is recommended package for libpam-ldapd and libnss-ldapd, but
since we disabled Install-Recommends for apt in
https://gerrit.mcp.mirantis.net/14431 we need to specify this package in
linux formula.
nscd is a daemon which handles passwd, group and host lookups for
running programs and caches the results for the next query.

Change-Id: Ia17441da2b3072d943d0e9225721dc9921de2514

PROD-20944

Change-Id: I9ef98b529d57171cf17c33597fd6af69d2f43a41

Change alerts names, severity and descriptions.

Closes-bug: PROD-19718
Change-Id: I238fbcd51cf48389b504ccb531ba9b2bc9dd4be6

Change-Id: I66e5c2f96dcbe432fd8d893683a4a3288170dff0
Closes-bug: PROD-18660

This is also covers the following CIS items
* CIS 1.7.1.5 Ensure permissions on /etc/issue are configured (Scored)

Change-Id: If8c237ff4db7e9ab7ee244278d28f632e73ecb56
Related-Prod: PROD-19166

Change-Id: I99fe6d4252ea5d9cdfce82ea2fed5405a4b0f4fa
Related-Prod: PROD-19365

Issue: First time you configure dpdk ovs switch it would stuck on
       answering salt-minion because kernel options, such as
       intel_iommu,iommu,isolcpus, are not set and ovs would
       exhaust all hugepages and fail to apply options on the fly.

Fix:   Configure ovs switch without waiting for an answer and
       reboot the node afterall as we do this all the time before
       starting automated pipeline.

Change-Id: Ica27a6cc47312bcc0762cddde049a0abf771f9fb

Change-Id: I5c63fd6856a3fabb1a1c2b850c7e12d4d0815114

This patch implements pam ldap integration for linux host.

Related Prod: PROD-16022
Customer-Found
Change-Id: I2a05cfb4821d176724f03c61253700ef1f4d0bd8

Wipe off this excess meta package from dpdk required packages
list in order to be compatible with UCA repos as well.

Change-Id: Ia0e894e48f2cbb9d911f33756cf5a5508a20179c
Closes-Bug: #PROD-17033

primary for bond modes 1, 5, and 6
arp_ip_target for bond modes 0, and 2

Change-Id: I47cbb45019fdb6a930dd25038186c6f18915fbb1

Salt states/network supports "noifupdown" as a parameter for each interface.
Adjust linux.network.interface by extending the "interface_params".

Change-Id: Ie23b1a361a452dd0410871acdd0483806fb0bd92
Signed-off-by: Alexandru Avadanii <Alexandru.Avadanii@enea.com>
Signed-off-by: Charalampos Kominos <Charalampos.Kominos@enea.com>
Signed-off-by: Guillermo Herrero <Guillermo.Herrero@enea.com>

This workaround is required until salt with the patch [1] is not
used.

- use 'ifenslave' tool to enslave necessary interfaces only if bond
  interface has been changed
- install package that provides 'ifenslave' tool

[1] https://github.com/saltstack/salt/pull/39912

Change-Id: I65b607f26cf7319efb60f154951855d1334e1640

Change-Id: I59297736406469e5314236cb40851d9a6f94386e

Change-Id: I430f9ed46ebd72ed66eeb9508e95d7c5970d678e

Change-Id: I2c5e4a75ac84099c063bb2c2259ace9c9c80635a

Change-Id: I8f2a66c6edafc425794d7cedc8b9217df7ee5951

Change-Id: I6fc8cdbd5d96740e45dd32ead4f5ea0263818efb

Change-Id: I1c8e752de9ad3479da830706ae736df6846b977f

Change-Id: Idc73c152a0e71d5ac2a8c10f46c955755d8e77ae

Change-Id: I630861bd8f425aa8aa0369d109362d96b01a806c

Change-Id: I556ab82a1dc0ce711958404165e419275ff5ce19

The `linux_netlink.ls` function used a regex to choose which interfaces
to collect metric for.

`_alphanum_re = re.compile(r'^[a-z0-9]+$')`

Unfortunately, by default this excludes vlan and tap interfaces, which
are kind of important.  ie `bond0.120` or `tap2a3dab86-fb`.

We also have a problem where even if we update the regex to include
these interfaces... if someone deletes and spawns a new instance then
the tap device name changes on the compute host, which will not be
monitored unless someone re-runs the `collectd` on the compute again.
Less than ideal.

This commit lets us choose `VerboseInterface "all"` using Pillar data
to avoid this problem.

Change-Id: I25fb0eb0d4b922b8853eceb0c1c220a4040e1704

Allows configuring general section as well as configuring
    each dhcp enabled interface separetly.
    Does not allow alias or lease configuration.

Introduce dpdk support for linux OVS configuration.
It configures dpdk interface bind, ovs dpdk ports, bonding,
parameters for dpdk cpu pmd and set multique queues for specific
ovs dpdk interfaces.

Change-Id: I3f38660bab8db0c2b38f03ed8c94eb10b6b3beb9
Epic: PROD-8957
Epic: PROD-8958

* Add support for autoupdates

only Debian-based systems are supported for now
(through unattended-upgrades package)

* Fix test on system.autoupdates.pkgs

This state allows to configure loopback device(s). This isn't meant to
be used in production but offers a cheap way to test Cinder with LVM
volumes.

This reverts commit a63f4053f3.

This patch replaces the "interface" collectd plugin by the "netlink" one. The
"netlink" plugin provides the same metrics as "interface" but plus other
metrics such as the number of dropped packets.

There is an error in salt doc. Hashing-alghoritm is correct, 90bbf8dc4f/salt/modules/debian_ip.py (L1045)