Handle this option to allow/deny a minion to push
a file up to the master server (disabled by default).

Change-Id: I08f9bfedbc5356442c314992326dd206484e34ab

Fix/arch master config

Do not change VCP disk profile globally, it causes to re-use
the properties from one node in another.

Change-Id: Iff98010c32c1060b50bc0ae040edb72108c57da1

Change-Id: I8dee93ffd4441391a5b26ba2c5b46e43357a0ca7

added backupninja support, by default is disable

Change-Id: I7636e3b43996abfa8be21f58ff485d998eacf74c

It adds oauth package to 'dependency_pkgs' and
'dependency_pkgs_pip' sections to have it installed
by system package manager or by pip.

Change-Id: I2e799c92c6e6f7c0705bb962ac32b8c166723af1

Change-Id: I336b0825712218e2381e1654251765a24581da00

Fix minion install pkgs and dependency packages

Change-Id: I1407f89306b192ace13752f1fbc0a8594310aead

Change-Id: I6b80e66f720a9e238ba5a3dd5a1bac012fe2fe94

Fix Travis tests

Change-Id: I15c668d239fa2909caf38143f3cb7ac21e1dbe9f

Example:

parameters:
  salt:
    control:
      size: #RAM 4096,8192,16384,32768,65536
        openstack.control:
          cpu: 8
          ram: 32768
          disk_profile: small_two_disks
          net_profile: default

  virt:
    disk:
      small_two_disks:
        - system:
            size: 50000
            image: http:/path/to/image.qcow2
        - cinder-volume:
            size: 50000

Change-Id: Ie092b77627cb2b1d36ba4b7a2a7d749ad91881c8

Change-Id: Idfe764a5b8106e02614eb3eab78895629a6fc570

Change-Id: I8fe09f450695eaad1546262cef8df5bc4bb02308

Change-Id: I22f892b8a606cc9464a2bd49d4eb336936a3de58

Change-Id: I841e8d0aad0892fddfd34bfc27936403a46243f6

Change-Id: I08ab88c3cdbe3914973ce87039222f29e1dff824

Change-Id: Ic9decbeaf57e9aba2f95c3dd616393dc32763fcc

Change-Id: Ifac3f5e03099e8190db0a3af62a7be1f762f87be

Change-Id: Id7983027c5f5c518af5856edde7adf315277d51b

Change-Id: I2439b7bb618cc060f0ea7e58b48f879201897283

Change-Id: Ic40eeb417175dff9f22fb4c34509b4c495cb5c36

Change-Id: Iaaa95f7aa4c8d0ff3b9de2cfecd45946ccdadc43

Change-Id: Ia3b1e93e5f0b3da7097a285122d24c5b1d2b20e2

Change-Id: I1d09c5297440a6469cfaabbfc67d1f1c11decece

Change-Id: I07e86cb5d132a83b2460deda08b8a7e65f379d33

Exposing CA keys in a mine creates a security flaw, thus such
should be avoided.
This change removes code responsible for putting and retrieving
CA key from a mine and changes the ca.sls state to allow configuring
where CA cert and its key would be generated as well as their owners.

Fixes PROD-13439

Change-Id: I6d78b13dcb3754c51606edd7e2d8158e128244a4

Issues:
* cmd.wait doesn't work correctly with bg=True
* cmd.wait will be deprecated in next releases [1]
* watch/watch_in work differently than onchanges/onchanges_in as some
* module override mod_watch()

This patch does:
* Replaces cmd.wait to cmd.run with onchanges.
* On any config file changes salt_minion_service_restart will be
  triggered so salt master will get state immediately because of bg=True
* salt_minion_service is used only for service enablement

[1] https://docs.saltstack.com/en/latest/ref/states/all/salt.states.cmd.html

Change-Id: I7b87b3614708b861e1767566426c7a67c337ba01
Signed-off-by: Sergii Golovatiuk <sgolovatiuk@mirantis.com>

Change-Id: Id84434f5e0b699a00d0165a3e2318f4ad54f530d

Change-Id: Ia4ba14bac02ddbceb986f725cf25664eca77bfe0

In cases  when a service whants to generate and sign a certificate
it requires a CA key along with a CA cert itself.
For example, Octavia needs it for signing a certificate it generates
for a newly spawned amphora.

This change add sending a CA key to the mine from where it can be
extracted in the cert.sls state.
Also allow managing permissions for a CA cert and key retrieved
from the mine.

Related PROD: PROD-11933

Change-Id: I911effb4a63ae048e348ed04b7aca33998e359aa