Neutron rootwarp(s) need to be updated for Kilo

[Kevin Carter]

The following rootwrap filters need to be updated in order to run OpenStack Kilo
* roles/os_neutron/files/rootwrap.d/dhcp.filters
  - Replace: https://github.com/stackforge/os-ansible-deployment/blob/master/playbooks/roles/os_neutron/files/rootwrap.d/dhcp.filters
  - With: https://github.com/openstack/neutron/blob/master/etc/neutron/rootwrap.d/dhcp.filters

* roles/os_neutron/files/rootwrap.d/l3.filters
  - Replace: https://github.com/stackforge/os-ansible-deployment/blob/master/playbooks/roles/os_neutron/files/rootwrap.d/l3.filters
  - With: https://github.com/openstack/neutron/blob/master/etc/neutron/rootwrap.d/l3.filters

Without updating these rootwrap files neutron has no ability to run dhcp and l3 related commands:

-- Stacktrace --
2015-03-05 04:54:01.074 662 ERROR neutron.agent.dhcp.agent [-] Unable to enable dhcp for b921bd96-6573-43f9-8b74-f11f3a183b7c.
2015-03-05 04:54:01.074 662 TRACE neutron.agent.dhcp.agent Traceback (most recent call last):
2015-03-05 04:54:01.074 662 TRACE neutron.agent.dhcp.agent File "/usr/local/lib/python2.7/dist-packages/neutron/agent/dhcp/agent.py", line 112, in call_driver
2015-03-05 04:54:01.074 662 TRACE neutron.agent.dhcp.agent getattr(driver, action)(**action_kwargs)
2015-03-05 04:54:01.074 662 TRACE neutron.agent.dhcp.agent File "/usr/local/lib/python2.7/dist-packages/neutron/agent/linux/dhcp.py", line 207, in enable
2015-03-05 04:54:01.074 662 TRACE neutron.agent.dhcp.agent self.spawn_process()
2015-03-05 04:54:01.074 662 TRACE neutron.agent.dhcp.agent File "/usr/local/lib/python2.7/dist-packages/neutron/agent/linux/dhcp.py", line 375, in spawn_process
2015-03-05 04:54:01.074 662 TRACE neutron.agent.dhcp.agent self._spawn_or_reload_process(reload_with_HUP=False)
2015-03-05 04:54:01.074 662 TRACE neutron.agent.dhcp.agent File "/usr/local/lib/python2.7/dist-packages/neutron/agent/linux/dhcp.py", line 394, in _spawn_or_reload_process
2015-03-05 04:54:01.074 662 TRACE neutron.agent.dhcp.agent pid_file=pid_filename)
2015-03-05 04:54:01.074 662 TRACE neutron.agent.dhcp.agent File "/usr/local/lib/python2.7/dist-packages/neutron/agent/linux/external_process.py", line 179, in enable
2015-03-05 04:54:01.074 662 TRACE neutron.agent.dhcp.agent process_manager.enable(reload_cfg=reload_cfg)
2015-03-05 04:54:01.074 662 TRACE neutron.agent.dhcp.agent File "/usr/local/lib/python2.7/dist-packages/neutron/agent/linux/external_process.py", line 76, in enable
2015-03-05 04:54:01.074 662 TRACE neutron.agent.dhcp.agent ip_wrapper.netns.execute(cmd, addl_env=self.cmd_addl_env)
2015-03-05 04:54:01.074 662 TRACE neutron.agent.dhcp.agent File "/usr/local/lib/python2.7/dist-packages/neutron/agent/linux/ip_lib.py", line 554, in execute
2015-03-05 04:54:01.074 662 TRACE neutron.agent.dhcp.agent extra_ok_codes=extra_ok_codes, **kwargs)
2015-03-05 04:54:01.074 662 TRACE neutron.agent.dhcp.agent File "/usr/local/lib/python2.7/dist-packages/neutron/agent/linux/utils.py", line 87, in execute
2015-03-05 04:54:01.074 662 TRACE neutron.agent.dhcp.agent raise RuntimeError(m)
2015-03-05 04:54:01.074 662 TRACE neutron.agent.dhcp.agent RuntimeError:
2015-03-05 04:54:01.074 662 TRACE neutron.agent.dhcp.agent Command: ['sudo', '/usr/local/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'ip', 'netns', 'exec', 'qdhcp-b921bd96-6573-43f9-8b74-f11f3a183b7c', 'dnsmasq', '--no-hosts', '--no-resolv', '--strict-order', '--bind-interfaces', '--interface=ns-52e55e4a-2f', '--except-interface=lo', '--pid-file=/var/lib/neutron/dhcp/b921bd96-6573-43f9-8b74-f11f3a183b7c/pid', '--dhcp-hostsfile=/var/lib/neutron/dhcp/b921bd96-6573-43f9-8b74-f11f3a183b7c/host', '--addn-hosts=/var/lib/neutron/dhcp/b921bd96-6573-43f9-8b74-f11f3a183b7c/addn_hosts', '--dhcp-optsfile=/var/lib/neutron/dhcp/b921bd96-6573-43f9-8b74-f11f3a183b7c/opts', '--leasefile-ro', '--dhcp-authoritative', '--dhcp-range=set:tag0,192.168.74.0,static,86400s', '--dhcp-lease-max=256', '--conf-file=/etc/neutron/dnsmasq-neutron.conf', '--domain=openstacklocal']
2015-03-05 04:54:01.074 662 TRACE neutron.agent.dhcp.agent Exit code: 99

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/166986

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/166986
Committed: https://git.openstack.org/cgit/stackforge/os-ansible-deployment/commit/?id=33f0c13ef40f8972a434019514be0d504e4a22ce
Submitter: Jenkins
Branch: master

commit 33f0c13ef40f8972a434019514be0d504e4a22ce
Author: Kevin Carter <email address hidden>
Date: Sun Mar 22 09:09:53 2015 -0500

    Updated repository for minimum viable kilo install

    * Updated Keystone wsgi and paste files from upstream.
    * Updated all clients in the openstack_client.yml file.
    * Kilo services are tracking the head of master.
    * Removed pinned middleware because they're pinned else where.
    * Added additional service references for neutron vpnaas, fwaas, and
      lbaas which have now been moved into their own repos and no longer
      exist within the core neutron repository.
    * The neutron vpnaas, fwaas, and lbaas have been removed from the
      basic plugins being loaded and a comment has been added to describe
      how one might add them back in.
    * Updated rootwrap filters for neutron dhcp and l3.
    * Updated heat policy.json
    * Added the `python-libguestfs` to the nova-compute installation
      packages.
    * Updates all services to point to the latest kilo tag

    Services updated due to deprecated configs:
    * Keystone
    * Glance
    * Nova
    * Neutron (is still using the deprecated nova auth plugin)
    * Heat
    * Tempest

    Items for future work post initial release:
    * roles/os_neutron/files/post-up-checksum-rules:25:
      TODO(cloudnull) remove this script once the bug is fixed.
    * roles/rabbitmq_server/tasks/rabbitmq_cluster_join.yml:17:
      TODO(someone): implement a more robust way of checking

    Implements: blueprint minimal-kilo

    Closes-Bug: 1428421
    Closes-Bug: 1428431
    Closes-Bug: 1428437
    Closes-Bug: 1428445
    Closes-Bug: 1428451
    Closes-Bug: 1428469
    Closes-Bug: 1428639

    Change-Id: I28a305d9e40a9cf70148ef7d7b00d467a65ca076