need to add ulimit arg for kolla docker run when use elasticsearch 5.4

[MarginHu]

Hi Guys:
I'm using elasticsearch 5.4 in kolla, but I met memlock failed as following:

[2017-05-15T13:22:41,304][INFO ][o.e.b.BootstrapChecks ] [192.168.102.21] bound or publishing to a non-loopback or non-link-local address, enforcing bootstrap checks
ERROR: bootstrap checks failed
memory locking requested for elasticsearch process but memory is not locked

according to elasticsearch doc:
https://www.elastic.co/guide/en/elasticsearch/reference/5.2/docker.html#docker-configuration-methods

run elasticsearch container should be with arguments "--cap-add=IPC_LOCK --ulimit memlock=-1:-1 --ulimit nofile=65536:65536"

I have found "cap_add" in kolla_docker.py but not ulimit.

[Michal Nasiadka (mnasiadka)]

Should be fixed with https://docs.openstack.org/kolla-ansible/latest/reference/deployment-config/resource-constraints.html

[Gaëtan Trellu (goldyfruit)]

The ulimit still not supported which could be an issue for Neutron agents if too many files are open.

Bug: https://bugs.launchpad.net/oslo.rootwrap/+bug/1760471
Review: https://review.openstack.org/#/c/559268/