This patchset obsoletes switching from "dhcp" to "static" during
deployment.

Example pillars:
salt:
  control:
    enabled: true
    virt_enabled: true
    size:
      small:
        cpu: 1
        ram: 1
    cluster:
      infra:
        domain: example.com
        engine: virt
        config:
          engine: salt
          host: master.domain.com
        cloud_init:
          network_data:
            links:
            - id: ens2
              name: ens2
              type: phy
          user_data:
            disable_ec2_metadata: true
            resize_rootfs: True
            timezone: UTC
            ssh_deletekeys: True
            ssh_genkeytypes: ['rsa', 'dsa', 'ecdsa']
            ssh_svcname: ssh
            locale: en_US.UTF-8
            disable_root: true
            apt_preserve_sources_list: false
            apt:
              sources_list: ""
              sources:
                ubuntu.list:
                  source: ${linux:system:repo:ubuntu:source}
                mcp_saltstack.list:
                  source: ${linux:system:repo:mcp_saltstack:source}
        node:
          ctl01:
            provider: kvm01.example.com
            image: ubuntu-16.04.qcow2
            size: small
            cloud_init:
              network_data:
                networks:
                - id: private-ipv4
                  ip_address: 192.168.0.161
                  link: ens2
                  netmask: 255.255.255.0
                  routes:
                  - gateway: 192.168.0.1
                    netmask: 0.0.0.0
                    network: 0.0.0.0
                  type: ipv4

Change-Id: I087518404c61e0bab2303e40957bacca94692102

The metadata will be used to get list of enabled applications
that implement formula based upgrades.

Change-Id: Ibc368d993aa1c3c8715598513467da78792c752b

Related-Bug: PROD-21498 (PROD:21498)

Change-Id: I59ab700630f86f38d25571368a4cecb83baa988f

Change-Id: Ia9410364a82ac84889b80b30380ec5f897c7165c

Fixes: PROD-21792 (PROD:21792)

Change-Id: Iff22ba927c74a9cb3bd8726253106ebdbb20fe32

By default salt minion meta files are created with wide
permissions.

This makes OS tokens, keystone credentials unprotected.

Patch fixes this.

Prod-Related: CEEMCP-13 unprotected keystone credentials
Customer-Found

Change-Id: I18283cff4aec795e0656b7b3519381792e8a6e54

Change-Id: Iea79e2c8c9f29ddc5903a97c104e013878f63cd7

Salt (ca.sls) supports generation a few CA.cert but it works incorrectly.
When we generate a few ca.cert, salt must upload it to mine. But it overwrites previous ones.

Related-Prod: PROD-21740

Change-Id: I60f1089cc58758d3be65371deaaa69348fde86a4

This reverts commit a84007cf9e.

Change-Id: I547d741da0699abe3e645a0b767d55d5d53e0dbb

This reverts commit 0cd19b9ea1.

Change-Id: Iea9bc493c246d2c4fdee48d58883d21a10ebf054

The patch adds _orchestrate.conf file to salt minion
configuration. Its template searches for "/meta/salt.yml"
file across all installed formulas and parses them if found.
As of now config will contain following data, e.g.:
orchestration:
  deploy:
    applications:
      cinder:
        priority: 150
      keystone:
        priority: 100

Application priorities will be used later for salt deploy
orchestration

Change-Id: I56b0d15e5a13ca4975d98b9675991f84885120e6
Related-PROD: PROD-19973

There is issue [1] with reactor in salt 2017, one
of the workarounds is to set reactor workers to 1

[1] https://github.com/saltstack/salt/issues/47539

Change-Id: I47d76cc1dc5d0afe6d8b215e2d32cdbab3ac1a8c
Related-Prod: https://mirantis.jira.com/browse/PROD-21463

It is important to be able to increase timeouts on api when running
orchestrate tasks via pepper.

Change-Id: I3ff0988bfec3ec4715348c5de15247fe0b075443

The conflicting ID is 'libvirt_service' and is found in SLS:
- libvirt.server.service
- salt.control.virt

Change-Id: Ibb0b6f0a574a53f1cb8517a9fe0d7f0febb07bb3

Prod-Related: PROD-20747

Change-Id: Id7822963ab45ff7db3252f5329a9376aa4bf10d6

Change-Id: I602338811610d4ff08dfb8b2b3aed9dc46f5b3b0

The patch adds ability to configure REDIS as cache
backed for salt-master to be used as distibuted cache
further.

Change-Id: I62a29713c23ad3f591f6e937bfc5b13eba92f402
Related-PROD: PROD-20581

Change-Id: Idd52f0285ca3c858d21850f8d324cdfe64e149d6

Related bug: PROD-20531

Change-Id: Ia00a4310c5e1ec590ddd9c16b8013e42198632ac

The patch adds ability to enable/disable salt-syndic
by changing the value with soft params.

Depends-on: Id97088e0a8c449c38943b8ceaa2111647fea19fc
Change-Id: I019fc1a08ae4781a1bfd39f39acf1d695691b997
Related-PROD: PROD-20579

PROD-20712

Change-Id: I5f498e3a21cc3c78c313c7d3a72ecb303e7c4f61

Change-Id: Iee0165a071ed29fd1ffc63b88edf687247c396d4

Change-Id: I7572d8e16e9126d5164a683ccf99b21f4c280cdb

Change-Id: I9d834d67e29d7c6d0b11599b0b543427cf1d7706

Change-Id: Id8fbf6f94533346af6ceea10257cd4d2dd745a6a

Change-Id: I8279e79eac334dbd0007f17eb645b24fdce5005f
PROD-related: PROD-19892

Prod-Related: PROD-20181
Change-Id: I86fb92022521f42a70b6ffd112f0c5eff3fd607b

related to bug: PROD-20139

Change-Id: I32fee91f22e0963ec60de63b4c6e020df92f9f3b

- LOG_FILE
  - LOG_LEVEL
  - LOG_LEVEL_LOGFILE

Change-Id: Ic8c0c3bb2a4a80ba0590ca79d8e491dd4f840897

Change alerts names, severities and descriptions.

Change-Id: Ife9443a850a31c6d44b2339f4894c01dc353d921
Closes-bug: PROD-19840

* Salt minion is unable unencrypt the messages from master during boot
    because of lack of entropy, throwing the exception:

    File "/usr/lib/python2.7/dist-packages/salt/utils/rsax931.py", line 146, in sign
    raise SSLError('Unable to encrypt message')
    SSLError: Unable to encrypt message:
    error:80064191:lib(128):osrandom_init:getrandom() initialization failed with EAGAIN. Most likely Kernel CPRNG is not se
    error:80065190:lib(128):osrandom_rand_bytes:getrandom() initialization failed.
    error:04088003:rsa routines:RSA_setup_blinding:BN lib
    error:04066044:rsa routines:RSA_EAY_PRIVATE_ENCRYPT:internal error

    After node has been booted up, and /dev/random device collected some
    extra entropy, salt-minion could start.

    This patch configures libvirt vms to use /dev/urandom for faster
    entropy regeneration

Change-Id: I470166b4424752d24ac4bb2cb87d9f99cd14752e
Co-Authored-By: Oleksandr Savatieiev <osavatieiev@mirantis.com>
Prod-Related: PROD-19711

Change-Id: Iff0423bc33b7ef5ed033653baddba2c4914367ad

Change-Id: Idb5037fb9c7cb032a8ba81f85a6cb902b3d693a7

When proxy parameter was defined and host is empty string, salt is complaining with warning. With this patch when host is empty parameters are not used.

Change-Id: I11150e5f141182d5934564611d6c39b2b379b5e9

Change-Id: I28bbc7a6b5810dfb56b8391a557aecd1fa523385