Comment 10 for bug 1860607

Reviewed: https://review.opendev.org/706521
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=c8144799e8ef125437f74ef4911923a487970854
Submitter: Zuul
Branch: stable/train

commit c8144799e8ef125437f74ef4911923a487970854
Author: Alex Schultz <email address hidden>
Date: Wed Jan 22 14:24:41 2020 -0700

    Update ro excludes

    When container-puppet.sh (or docker-puppet.sh) runs, we always bind
    mount in certain directories and files. However if these files change
    while we're running the puppet execution externally on the host, they
    end up being copied to our puppet-generated path. This path is copied
    into the container when kolla starts up. Because we re-mount these same
    paths in the end container as read-only, kolla will try and update the
    read-only mount which errors. This change updates our rsync excludes to
    include:

     * /etc/pki/ca-trust/extracted
     * /etc/pki/ca-trust/source/anchors
     * /etc/pki/tls/certs/ca-bundle.crt
     * /etc/pki/tls/certs/ca-bundle.trust.crt
     * /etc/pki/tls/cert.pem
     * /etc/hosts
     * /etc/localtime

    Change-Id: I858a7b8745688c6271b01795460ab4adbf3f2be5
    Closes-Bug: #1860607
    (cherry picked from commit 36ea0148e8b2ed30fb0a03fe6f812fd00657924b)