Comment 12 for bug 1860607

Reviewed: https://review.opendev.org/706532
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=1f0d31e5d5ea5f4423ee12df56c42ef6ddf8a7b5
Submitter: Zuul
Branch: stable/queens

commit 1f0d31e5d5ea5f4423ee12df56c42ef6ddf8a7b5
Author: Alex Schultz <email address hidden>
Date: Wed Jan 22 14:24:41 2020 -0700

    Update ro excludes

    When container-puppet.sh (or docker-puppet.sh) runs, we always bind
    mount in certain directories and files. However if these files change
    while we're running the puppet execution externally on the host, they
    end up being copied to our puppet-generated path. This path is copied
    into the container when kolla starts up. Because we re-mount these same
    paths in the end container as read-only, kolla will try and update the
    read-only mount which errors. This change updates our rsync excludes to
    include:

     * /etc/pki/ca-trust/extracted
     * /etc/pki/ca-trust/source/anchors
     * /etc/pki/tls/certs/ca-bundle.crt
     * /etc/pki/tls/certs/ca-bundle.trust.crt
     * /etc/pki/tls/cert.pem
     * /etc/hosts
     * /etc/localtime

    Conflicts:
            common/container-puppet.sh

    Change-Id: I858a7b8745688c6271b01795460ab4adbf3f2be5
    Closes-Bug: #1860607
    (cherry picked from commit 36ea0148e8b2ed30fb0a03fe6f812fd00657924b)