Comment 8 for bug 1860607

Reviewed: https://review.opendev.org/706530
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=bbfb02b2d0929dccfed67014d3cc06a1ffaf2a1c
Submitter: Zuul
Branch: stable/stein

commit bbfb02b2d0929dccfed67014d3cc06a1ffaf2a1c
Author: Alex Schultz <email address hidden>
Date: Wed Jan 22 14:24:41 2020 -0700

    Update ro excludes

    When container-puppet.sh (or docker-puppet.sh) runs, we always bind
    mount in certain directories and files. However if these files change
    while we're running the puppet execution externally on the host, they
    end up being copied to our puppet-generated path. This path is copied
    into the container when kolla starts up. Because we re-mount these same
    paths in the end container as read-only, kolla will try and update the
    read-only mount which errors. This change updates our rsync excludes to
    include:

     * /etc/pki/ca-trust/extracted
     * /etc/pki/ca-trust/source/anchors
     * /etc/pki/tls/certs/ca-bundle.crt
     * /etc/pki/tls/certs/ca-bundle.trust.crt
     * /etc/pki/tls/cert.pem
     * /etc/hosts
     * /etc/localtime

    Conflicts:
            common/container-puppet.sh

    Change-Id: I858a7b8745688c6271b01795460ab4adbf3f2be5
    Closes-Bug: #1860607
    (cherry picked from commit 36ea0148e8b2ed30fb0a03fe6f812fd00657924b)