2018-09-07 21:17:22,969 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,103 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,105 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,109 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,112 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,468 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,473 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,478 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,540 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,543 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,547 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,552 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,736 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,861 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,865 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,869 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,875 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,880 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,887 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,890 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,897 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,902 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,908 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,913 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,917 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,923 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,927 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,932 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,938 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,942 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,948 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,952 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,959 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,964 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,968 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,973 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,979 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,983 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,989 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,994 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:23,999 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:24,003 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:24,010 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:24,014 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:24,021 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:24,025 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:24,031 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:24,036 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:24,041 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:24,045 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:24,050 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:24,054 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:24,060 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:24,064 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:24,071 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:24,074 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:24,080 [salt.utils.decorators:82  ][ERROR   ][1803] Exception encountered when attempting to inspect frame in dependency decorator: list index out of range
2018-09-07 21:17:56,815 [salt.utils.decorators:613 ][WARNING ][1803] The function "module.run" is using its deprecated version and will expire in version "Sodium".
2018-09-07 21:18:20,547 [salt.state       :292 ][ERROR   ][1803] An exception occurred in this state: Traceback (most recent call last):
  File "/usr/lib/python2.7/dist-packages/salt/state.py", line 1879, in call
    **cdata['kwargs'])
  File "/usr/lib/python2.7/dist-packages/salt/loader.py", line 1826, in wrapper
    return f(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/salt/states/x509.py", line 530, in certificate_managed
    certificate = __salt__['x509.create_certificate'](text=True, **kwargs)
  File "/usr/lib/python2.7/dist-packages/salt/modules/x509.py", line 1387, in create_certificate
    'ca_server did not respond'
SaltInvocationError: ca_server did not respond salt master must permit peers to call the sign_remote_certificate function.

2018-09-07 21:19:21,337 [salt.loaded.int.states.file:2150][WARNING ][1803] State for file: /etc/ssl/certs/ca-salt_master_ca.crt - Neither 'source' nor 'contents' nor 'contents_pillar' nor 'contents_grains' was defined, yet 'replace' was set to 'True'. As there is no source to replace the file with, 'replace' has been set to 'False' to avoid reading the file unnecessarily.
2018-09-07 21:19:41,723 [salt.utils.decorators:613 ][WARNING ][3150] The function "module.run" is using its deprecated version and will expire in version "Sodium".
2018-09-07 21:20:07,169 [salt.utils.decorators:613 ][WARNING ][3150] The function "module.run" is using its deprecated version and will expire in version "Sodium".
2018-09-07 21:20:07,718 [salt.loaded.int.module.cmdmod:722 ][ERROR   ][3150] Command '['ifup', 'ens3']' failed with return code: 1
2018-09-07 21:20:07,721 [salt.loaded.int.module.cmdmod:724 ][ERROR   ][3150] stdout: RTNETLINK answers: File exists
Failed to bring up ens3.
2018-09-07 21:20:07,722 [salt.loaded.int.module.cmdmod:728 ][ERROR   ][3150] retcode: 1
2018-09-07 21:20:09,601 [salt.loaded.int.module.debian_ip:1970][WARNING ][3150] The network state sls is requiring a reboot of the system to properly apply network configuration.
2018-09-07 21:20:19,111 [salt.loaded.int.module.cmdmod:395 ][INFO    ][7490] Executing command ['systemctl', 'status', 'salt-minion.service', '-n', '0'] in directory '/root'
2018-09-07 21:20:19,152 [salt.loaded.int.module.cmdmod:395 ][INFO    ][7490] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'salt-minion.service'] in directory '/root'
2018-09-07 21:20:19,178 [salt.utils.parsers:1051][WARNING ][1452] Minion received a SIGTERM. Exiting.
2018-09-07 21:20:20,105 [salt.cli.daemons :293 ][INFO    ][7550] Setting up the Salt Minion "prx01.mcp-ovs-ha.local"
2018-09-07 21:20:20,226 [salt.cli.daemons :82  ][INFO    ][7550] Starting up the Salt Minion
2018-09-07 21:20:20,227 [salt.utils.event :1017][INFO    ][7550] Starting pull socket on /var/run/salt/minion/minion_event_ff902ec8d4_pull.ipc
2018-09-07 21:20:21,005 [salt.minion      :976 ][INFO    ][7550] Creating minion process manager
2018-09-07 21:20:22,499 [salt.loader.192.168.11.2.int.module.cmdmod:395 ][INFO    ][7550] Executing command ['date', '+%z'] in directory '/root'
2018-09-07 21:20:22,529 [salt.utils.schedule:568 ][INFO    ][7550] Updating job settings for scheduled job: __mine_interval
2018-09-07 21:20:22,533 [salt.minion      :1107][INFO    ][7550] Added mine.update to scheduler
2018-09-07 21:20:22,539 [salt.minion      :1965][INFO    ][7550] Minion is starting as user 'root'
2018-09-07 21:20:22,553 [salt.minion      :2324][INFO    ][7550] Minion is ready to receive requests!
2018-09-07 21:20:24,562 [salt.minion      :1307][INFO    ][7550] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907212024550066
2018-09-07 21:20:24,585 [salt.minion      :1431][INFO    ][7632] Starting a new job with PID 7632
2018-09-07 21:20:24,605 [salt.minion      :1708][INFO    ][7632] Returning information for job: 20180907212024550066
2018-09-07 21:20:45,239 [salt.minion      :1307][INFO    ][7550] User sudo_ubuntu Executing command ssh.set_auth_key with jid 20180907212045224953
2018-09-07 21:20:45,268 [salt.minion      :1431][INFO    ][7659] Starting a new job with PID 7659
2018-09-07 21:20:45,303 [salt.minion      :1708][INFO    ][7659] Returning information for job: 20180907212045224953
2018-09-07 21:20:45,978 [salt.minion      :1307][INFO    ][7550] User sudo_ubuntu Executing command system.reboot with jid 20180907212045966061
2018-09-07 21:20:45,997 [salt.minion      :1431][INFO    ][7664] Starting a new job with PID 7664
2018-09-07 21:20:46,006 [salt.loader.192.168.11.2.int.module.cmdmod:395 ][INFO    ][7664] Executing command ['shutdown', '-r', 'now'] in directory '/root'
2018-09-07 21:20:46,146 [salt.utils.parsers:1051][WARNING ][7550] Minion received a SIGTERM. Exiting.
2018-09-07 21:20:46,147 [salt.cli.daemons :82  ][INFO    ][7550] Shutting down the Salt Minion
2018-09-07 21:20:46,940 [salt.minion      :1708][INFO    ][7664] Returning information for job: 20180907212045966061
2018-09-07 21:20:58,480 [salt.cli.daemons :293 ][INFO    ][1571] Setting up the Salt Minion "prx01.mcp-ovs-ha.local"
2018-09-07 21:20:58,814 [salt.cli.daemons :82  ][INFO    ][1571] Starting up the Salt Minion
2018-09-07 21:20:58,816 [salt.utils.event :1017][INFO    ][1571] Starting pull socket on /var/run/salt/minion/minion_event_ff902ec8d4_pull.ipc
2018-09-07 21:20:59,730 [salt.minion      :976 ][INFO    ][1571] Creating minion process manager
2018-09-07 21:21:01,435 [salt.loader.192.168.11.2.int.module.cmdmod:395 ][INFO    ][1571] Executing command ['date', '+%z'] in directory '/root'
2018-09-07 21:21:01,475 [salt.utils.schedule:568 ][INFO    ][1571] Updating job settings for scheduled job: __mine_interval
2018-09-07 21:21:01,478 [salt.minion      :1107][INFO    ][1571] Added mine.update to scheduler
2018-09-07 21:21:01,485 [salt.minion      :1965][INFO    ][1571] Minion is starting as user 'root'
2018-09-07 21:21:01,502 [salt.minion      :2324][INFO    ][1571] Minion is ready to receive requests!
2018-09-07 21:21:02,599 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command test.ping with jid 20180907212101706064
2018-09-07 21:21:02,617 [salt.minion      :1431][INFO    ][1724] Starting a new job with PID 1724
2018-09-07 21:21:02,660 [salt.minion      :1708][INFO    ][1724] Returning information for job: 20180907212101706064
2018-09-07 21:21:03,323 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command pkg.upgrade with jid 20180907212102423017
2018-09-07 21:21:03,346 [salt.minion      :1431][INFO    ][1729] Starting a new job with PID 1729
2018-09-07 21:21:03,429 [salt.loader.192.168.11.2.int.module.cmdmod:395 ][INFO    ][1729] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-07 21:21:03,991 [salt.loader.192.168.11.2.int.module.cmdmod:395 ][INFO    ][1729] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'dist-upgrade'] in directory '/root'
2018-09-07 21:21:08,419 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907212107525498
2018-09-07 21:21:08,443 [salt.minion      :1431][INFO    ][1785] Starting a new job with PID 1785
2018-09-07 21:21:08,540 [salt.minion      :1708][INFO    ][1785] Returning information for job: 20180907212107525498
2018-09-07 21:21:17,592 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907212117583812
2018-09-07 21:21:17,623 [salt.minion      :1431][INFO    ][1842] Starting a new job with PID 1842
2018-09-07 21:21:17,653 [salt.minion      :1708][INFO    ][1842] Returning information for job: 20180907212117583812
2018-09-07 21:21:27,632 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907212127618592
2018-09-07 21:21:27,657 [salt.minion      :1431][INFO    ][1955] Starting a new job with PID 1955
2018-09-07 21:21:27,683 [salt.minion      :1708][INFO    ][1955] Returning information for job: 20180907212127618592
2018-09-07 21:21:37,734 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907212137725307
2018-09-07 21:21:37,756 [salt.minion      :1431][INFO    ][2764] Starting a new job with PID 2764
2018-09-07 21:21:37,779 [salt.minion      :1708][INFO    ][2764] Returning information for job: 20180907212137725307
2018-09-07 21:21:44,859 [salt.loader.192.168.11.2.int.module.cmdmod:395 ][INFO    ][1729] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-07 21:21:44,911 [salt.minion      :1708][INFO    ][1729] Returning information for job: 20180907212102423017
2018-09-07 21:21:52,850 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command test.ping with jid 20180907212152840049
2018-09-07 21:21:52,888 [salt.minion      :1431][INFO    ][3052] Starting a new job with PID 3052
2018-09-07 21:21:52,918 [salt.minion      :1708][INFO    ][3052] Returning information for job: 20180907212152840049
2018-09-07 21:21:53,056 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command state.sls with jid 20180907212153042149
2018-09-07 21:21:53,078 [salt.minion      :1431][INFO    ][3057] Starting a new job with PID 3057
2018-09-07 21:21:58,071 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907212158061705
2018-09-07 21:21:58,090 [salt.minion      :1431][INFO    ][3062] Starting a new job with PID 3062
2018-09-07 21:21:58,106 [salt.minion      :1708][INFO    ][3062] Returning information for job: 20180907212158061705
2018-09-07 21:22:00,721 [salt.state       :905 ][INFO    ][3057] Loading fresh modules for state activity
2018-09-07 21:22:00,786 [salt.fileclient  :1215][INFO    ][3057] Fetching file from saltenv 'base', ** done ** 'keepalived/init.sls'
2018-09-07 21:22:00,824 [salt.fileclient  :1215][INFO    ][3057] Fetching file from saltenv 'base', ** done ** 'keepalived/cluster.sls'
2018-09-07 21:22:02,152 [salt.state       :1770][INFO    ][3057] Running state [keepalived] at time 21:22:02.152328
2018-09-07 21:22:02,153 [salt.state       :1803][INFO    ][3057] Executing state pkg.installed for [keepalived]
2018-09-07 21:22:02,154 [salt.loaded.int.module.cmdmod:395 ][INFO    ][3057] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-07 21:22:02,585 [salt.loaded.int.module.cmdmod:395 ][INFO    ][3057] Executing command ['apt-cache', '-q', 'policy', 'keepalived'] in directory '/root'
2018-09-07 21:22:02,714 [salt.loaded.int.module.cmdmod:395 ][INFO    ][3057] Executing command ['apt-get', '-q', 'update'] in directory '/root'
2018-09-07 21:22:04,846 [salt.loaded.int.module.cmdmod:395 ][INFO    ][3057] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-07 21:22:04,883 [salt.loaded.int.module.cmdmod:395 ][INFO    ][3057] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'keepalived'] in directory '/root'
2018-09-07 21:22:08,117 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907212208108646
2018-09-07 21:22:08,143 [salt.minion      :1431][INFO    ][4166] Starting a new job with PID 4166
2018-09-07 21:22:08,162 [salt.minion      :1708][INFO    ][4166] Returning information for job: 20180907212208108646
2018-09-07 21:22:10,191 [salt.loaded.int.module.cmdmod:395 ][INFO    ][3057] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-07 21:22:10,233 [salt.state       :290 ][INFO    ][3057] Made the following changes:
'libsnmp30' changed from 'absent' to '5.7.3+dfsg-1ubuntu4.1'
'libsensors4' changed from 'absent' to '1:3.4.0-2'
'libsnmp-base' changed from 'absent' to '5.7.3+dfsg-1ubuntu4.1'
'keepalived' changed from 'absent' to '1:1.3.9-1ubuntu0.18.04.1~cloud0'
'ipvsadm' changed from 'absent' to '1:1.28-3'
'libnl-route-3-200' changed from 'absent' to '3.2.27-1ubuntu0.16.04.1'

2018-09-07 21:22:10,261 [salt.state       :905 ][INFO    ][3057] Loading fresh modules for state activity
2018-09-07 21:22:10,304 [salt.state       :1941][INFO    ][3057] Completed state [keepalived] at time 21:22:10.304703 duration_in_ms=8152.375
2018-09-07 21:22:10,310 [salt.state       :1770][INFO    ][3057] Running state [lsof] at time 21:22:10.310784
2018-09-07 21:22:10,311 [salt.state       :1803][INFO    ][3057] Executing state pkg.installed for [lsof]
2018-09-07 21:22:11,036 [salt.state       :290 ][INFO    ][3057] All specified packages are already installed
2018-09-07 21:22:11,037 [salt.state       :1941][INFO    ][3057] Completed state [lsof] at time 21:22:11.037171 duration_in_ms=726.386
2018-09-07 21:22:11,042 [salt.state       :1770][INFO    ][3057] Running state [/etc/keepalived/keepalived.conf] at time 21:22:11.042244
2018-09-07 21:22:11,042 [salt.state       :1803][INFO    ][3057] Executing state file.managed for [/etc/keepalived/keepalived.conf]
2018-09-07 21:22:11,072 [salt.fileclient  :1215][INFO    ][3057] Fetching file from saltenv 'base', ** done ** 'keepalived/files/keepalived.conf'
2018-09-07 21:22:11,130 [salt.state       :290 ][INFO    ][3057] File changed:
New file
2018-09-07 21:22:11,130 [salt.state       :1941][INFO    ][3057] Completed state [/etc/keepalived/keepalived.conf] at time 21:22:11.130412 duration_in_ms=88.168
2018-09-07 21:22:11,130 [salt.state       :1770][INFO    ][3057] Running state [/usr/local/bin/vrrp_script_check_pidof.sh] at time 21:22:11.130658
2018-09-07 21:22:11,130 [salt.state       :1803][INFO    ][3057] Executing state file.managed for [/usr/local/bin/vrrp_script_check_pidof.sh]
2018-09-07 21:22:11,256 [salt.fileclient  :1215][INFO    ][3057] Fetching file from saltenv 'base', ** done ** 'keepalived/files/vrrp_script_check_pidof.sh'
2018-09-07 21:22:11,268 [salt.state       :290 ][INFO    ][3057] File changed:
New file
2018-09-07 21:22:11,268 [salt.state       :1941][INFO    ][3057] Completed state [/usr/local/bin/vrrp_script_check_pidof.sh] at time 21:22:11.268421 duration_in_ms=137.763
2018-09-07 21:22:11,270 [salt.state       :1770][INFO    ][3057] Running state [keepalived] at time 21:22:11.270235
2018-09-07 21:22:11,270 [salt.state       :1803][INFO    ][3057] Executing state service.running for [keepalived]
2018-09-07 21:22:11,271 [salt.loaded.int.module.cmdmod:395 ][INFO    ][3057] Executing command ['systemctl', 'status', 'keepalived.service', '-n', '0'] in directory '/root'
2018-09-07 21:22:11,288 [salt.loaded.int.module.cmdmod:395 ][INFO    ][3057] Executing command ['systemctl', 'is-active', 'keepalived.service'] in directory '/root'
2018-09-07 21:22:11,303 [salt.loaded.int.module.cmdmod:395 ][INFO    ][3057] Executing command ['systemctl', 'is-enabled', 'keepalived.service'] in directory '/root'
2018-09-07 21:22:11,324 [salt.loaded.int.module.cmdmod:395 ][INFO    ][3057] Executing command ['systemd-run', '--scope', 'systemctl', 'start', 'keepalived.service'] in directory '/root'
2018-09-07 21:22:11,408 [salt.loaded.int.module.cmdmod:395 ][INFO    ][3057] Executing command ['systemctl', 'is-active', 'keepalived.service'] in directory '/root'
2018-09-07 21:22:11,427 [salt.loaded.int.module.cmdmod:395 ][INFO    ][3057] Executing command ['systemctl', 'is-enabled', 'keepalived.service'] in directory '/root'
2018-09-07 21:22:11,444 [salt.loaded.int.module.cmdmod:395 ][INFO    ][3057] Executing command ['systemctl', 'is-enabled', 'keepalived.service'] in directory '/root'
2018-09-07 21:22:11,466 [salt.state       :290 ][INFO    ][3057] {'keepalived': True}
2018-09-07 21:22:11,466 [salt.state       :1941][INFO    ][3057] Completed state [keepalived] at time 21:22:11.466498 duration_in_ms=196.262
2018-09-07 21:22:11,468 [salt.minion      :1708][INFO    ][3057] Returning information for job: 20180907212153042149
2018-09-07 21:26:04,520 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command pillar.get with jid 20180907212604508436
2018-09-07 21:26:04,545 [salt.minion      :1431][INFO    ][4512] Starting a new job with PID 4512
2018-09-07 21:26:04,557 [salt.minion      :1708][INFO    ][4512] Returning information for job: 20180907212604508436
2018-09-07 21:38:08,019 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command state.sls with jid 20180907213808010269
2018-09-07 21:38:08,044 [salt.minion      :1431][INFO    ][4826] Starting a new job with PID 4826
2018-09-07 21:38:13,134 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907213813118353
2018-09-07 21:38:13,159 [salt.minion      :1431][INFO    ][4835] Starting a new job with PID 4835
2018-09-07 21:38:13,179 [salt.minion      :1708][INFO    ][4835] Returning information for job: 20180907213813118353
2018-09-07 21:38:16,476 [salt.state       :905 ][INFO    ][4826] Loading fresh modules for state activity
2018-09-07 21:38:17,987 [salt.fileclient  :1215][INFO    ][4826] Fetching file from saltenv 'base', ** done ** 'memcached/init.sls'
2018-09-07 21:38:18,032 [salt.fileclient  :1215][INFO    ][4826] Fetching file from saltenv 'base', ** done ** 'memcached/server.sls'
2018-09-07 21:38:18,071 [salt.fileclient  :1215][INFO    ][4826] Fetching file from saltenv 'base', ** done ** 'memcached/map.jinja'
2018-09-07 21:38:18,897 [salt.state       :1770][INFO    ][4826] Running state [memcached] at time 21:38:18.897185
2018-09-07 21:38:18,897 [salt.state       :1803][INFO    ][4826] Executing state pkg.installed for [memcached]
2018-09-07 21:38:18,898 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4826] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-07 21:38:19,352 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4826] Executing command ['apt-cache', '-q', 'policy', 'memcached'] in directory '/root'
2018-09-07 21:38:19,481 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4826] Executing command ['apt-get', '-q', 'update'] in directory '/root'
2018-09-07 21:38:21,775 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4826] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-07 21:38:21,806 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4826] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'memcached'] in directory '/root'
2018-09-07 21:38:23,267 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907213823257817
2018-09-07 21:38:23,293 [salt.minion      :1431][INFO    ][5437] Starting a new job with PID 5437
2018-09-07 21:38:23,315 [salt.minion      :1708][INFO    ][5437] Returning information for job: 20180907213823257817
2018-09-07 21:38:25,726 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4826] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-07 21:38:25,769 [salt.state       :290 ][INFO    ][4826] Made the following changes:
'memcached' changed from 'absent' to '1.4.25-2ubuntu1.4'

2018-09-07 21:38:25,794 [salt.state       :905 ][INFO    ][4826] Loading fresh modules for state activity
2018-09-07 21:38:25,839 [salt.state       :1941][INFO    ][4826] Completed state [memcached] at time 21:38:25.838941 duration_in_ms=6941.756
2018-09-07 21:38:25,845 [salt.state       :1770][INFO    ][4826] Running state [python-memcache] at time 21:38:25.845603
2018-09-07 21:38:25,846 [salt.state       :1803][INFO    ][4826] Executing state pkg.installed for [python-memcache]
2018-09-07 21:38:26,647 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4826] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-07 21:38:26,682 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4826] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'python-memcache'] in directory '/root'
2018-09-07 21:38:28,768 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4826] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-07 21:38:28,837 [salt.state       :290 ][INFO    ][4826] Made the following changes:
'python-memcache' changed from 'absent' to '1.57+fixed-1~u16.04+mcp1'

2018-09-07 21:38:28,858 [salt.state       :905 ][INFO    ][4826] Loading fresh modules for state activity
2018-09-07 21:38:28,907 [salt.state       :1941][INFO    ][4826] Completed state [python-memcache] at time 21:38:28.907901 duration_in_ms=3062.297
2018-09-07 21:38:28,914 [salt.state       :1770][INFO    ][4826] Running state [/etc/memcached.conf] at time 21:38:28.914007
2018-09-07 21:38:28,914 [salt.state       :1803][INFO    ][4826] Executing state file.managed for [/etc/memcached.conf]
2018-09-07 21:38:28,948 [salt.fileclient  :1215][INFO    ][4826] Fetching file from saltenv 'base', ** done ** 'memcached/files/memcached.conf'
2018-09-07 21:38:28,986 [salt.state       :290 ][INFO    ][4826] File changed:
--- 
+++ 
@@ -1,11 +1,10 @@
+
 # memcached default config file
 # 2003 - Jay Bonci <jaybonci@debian.org>
-# This configuration file is read by the start-memcached script provided as
-# part of the Debian GNU/Linux distribution.
+# This configuration file is read by the start-memcached script provided as part of the Debian GNU/Linux distribution. 
 
 # Run memcached as a daemon. This command is implied, and is not needed for the
-# daemon to run. See the README.Debian that comes with this package for more
-# information.
+# daemon to run. See the README.Debian that comes with this package for more information.
 -d
 
 # Log memcached's output to /var/log/memcached
@@ -18,13 +17,13 @@
 # -vv
 
 # Start with a cap of 64 megs of memory. It's reasonable, and the daemon default
-# Note that the daemon will grow to this size, but does not start out holding this much
-# memory
+# Note that the daemon will grow to this size, but does not start out holding this much memory
 -m 64
 
 # Default connection port is 11211
 -p 11211
 
+-U 11211
 # Run the daemon as root. The start-memcached will default to running as root if no
 # -u command is present in this config file
 -u memcache
@@ -32,10 +31,12 @@
 # Specify which IP address to listen on. The default is to listen on all IP addresses
 # This parameter is one of the only security measures that memcached has, so make sure
 # it's listening on a firewalled interface.
--l 127.0.0.1
+-l 0.0.0.0
 
 # Limit the number of simultaneous incoming connections. The daemon default is 1024
 # -c 1024
+# Mirantis
+-c 8192
 
 # Lock down all paged memory. Consult with the README and homepage before you do this
 # -k
@@ -45,3 +46,9 @@
 
 # Maximize core file limit
 # -r
+
+# Number of threads to use to process incoming requests.
+-t 1
+
+# Set size of each slab page. Default value for this parameter is 1m, minimum is 1k, max is 128m.
+-I 1m

2018-09-07 21:38:28,995 [salt.state       :1941][INFO    ][4826] Completed state [/etc/memcached.conf] at time 21:38:28.995004 duration_in_ms=80.996
2018-09-07 21:38:29,543 [salt.state       :1770][INFO    ][4826] Running state [memcached] at time 21:38:29.542980
2018-09-07 21:38:29,543 [salt.state       :1803][INFO    ][4826] Executing state service.running for [memcached]
2018-09-07 21:38:29,544 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4826] Executing command ['systemctl', 'status', 'memcached.service', '-n', '0'] in directory '/root'
2018-09-07 21:38:29,565 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4826] Executing command ['systemctl', 'is-active', 'memcached.service'] in directory '/root'
2018-09-07 21:38:29,583 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4826] Executing command ['systemctl', 'is-enabled', 'memcached.service'] in directory '/root'
2018-09-07 21:38:29,603 [salt.state       :290 ][INFO    ][4826] The service memcached is already running
2018-09-07 21:38:29,604 [salt.state       :1941][INFO    ][4826] Completed state [memcached] at time 21:38:29.604000 duration_in_ms=61.021
2018-09-07 21:38:29,604 [salt.state       :1770][INFO    ][4826] Running state [memcached] at time 21:38:29.604318
2018-09-07 21:38:29,604 [salt.state       :1803][INFO    ][4826] Executing state service.mod_watch for [memcached]
2018-09-07 21:38:29,605 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4826] Executing command ['systemctl', 'is-active', 'memcached.service'] in directory '/root'
2018-09-07 21:38:29,624 [salt.loaded.int.module.cmdmod:395 ][INFO    ][4826] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'memcached.service'] in directory '/root'
2018-09-07 21:38:29,658 [salt.state       :290 ][INFO    ][4826] {'memcached': True}
2018-09-07 21:38:29,659 [salt.state       :1941][INFO    ][4826] Completed state [memcached] at time 21:38:29.659668 duration_in_ms=55.349
2018-09-07 21:38:29,664 [salt.minion      :1708][INFO    ][4826] Returning information for job: 20180907213808010269
2018-09-07 22:21:02,506 [salt.utils.schedule:1375][INFO    ][1571] Running scheduled job: __mine_interval
2018-09-07 22:27:52,229 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command state.sls with jid 20180907222752218802
2018-09-07 22:27:52,251 [salt.minion      :1431][INFO    ][7029] Starting a new job with PID 7029
2018-09-07 22:27:57,332 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907222757321400
2018-09-07 22:27:57,357 [salt.minion      :1431][INFO    ][7034] Starting a new job with PID 7034
2018-09-07 22:27:57,381 [salt.minion      :1708][INFO    ][7034] Returning information for job: 20180907222757321400
2018-09-07 22:28:00,253 [salt.state       :905 ][INFO    ][7029] Loading fresh modules for state activity
2018-09-07 22:28:00,319 [salt.fileclient  :1215][INFO    ][7029] Fetching file from saltenv 'base', ** done ** 'apache/init.sls'
2018-09-07 22:28:00,363 [salt.fileclient  :1215][INFO    ][7029] Fetching file from saltenv 'base', ** done ** 'apache/server/init.sls'
2018-09-07 22:28:00,404 [salt.fileclient  :1215][INFO    ][7029] Fetching file from saltenv 'base', ** done ** 'apache/server/service/init.sls'
2018-09-07 22:28:00,531 [salt.fileclient  :1215][INFO    ][7029] Fetching file from saltenv 'base', ** done ** 'apache/server/service/modules.sls'
2018-09-07 22:28:00,643 [salt.fileclient  :1215][INFO    ][7029] Fetching file from saltenv 'base', ** done ** 'apache/server/service/mpm.sls'
2018-09-07 22:28:00,747 [salt.fileclient  :1215][INFO    ][7029] Fetching file from saltenv 'base', ** done ** 'apache/server/site.sls'
2018-09-07 22:28:00,924 [salt.fileclient  :1215][INFO    ][7029] Fetching file from saltenv 'base', ** done ** 'apache/server/users.sls'
2018-09-07 22:28:01,032 [salt.fileclient  :1215][INFO    ][7029] Fetching file from saltenv 'base', ** done ** 'apache/server/robots.sls'
2018-09-07 22:28:01,129 [salt.fileclient  :1215][INFO    ][7029] Fetching file from saltenv 'base', ** done ** 'horizon/init.sls'
2018-09-07 22:28:01,168 [salt.fileclient  :1215][INFO    ][7029] Fetching file from saltenv 'base', ** done ** 'horizon/server/init.sls'
2018-09-07 22:28:01,204 [salt.fileclient  :1215][INFO    ][7029] Fetching file from saltenv 'base', ** done ** 'horizon/server/service.sls'
2018-09-07 22:28:01,331 [salt.fileclient  :1215][INFO    ][7029] Fetching file from saltenv 'base', ** done ** 'horizon/server/plugin.sls'
2018-09-07 22:28:02,496 [salt.state       :1770][INFO    ][7029] Running state [apache2] at time 22:28:02.496092
2018-09-07 22:28:02,497 [salt.state       :1803][INFO    ][7029] Executing state pkg.installed for [apache2]
2018-09-07 22:28:02,498 [salt.loaded.int.module.cmdmod:395 ][INFO    ][7029] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-07 22:28:03,053 [salt.loaded.int.module.cmdmod:395 ][INFO    ][7029] Executing command ['apt-cache', '-q', 'policy', 'apache2'] in directory '/root'
2018-09-07 22:28:03,220 [salt.loaded.int.module.cmdmod:395 ][INFO    ][7029] Executing command ['apt-get', '-q', 'update'] in directory '/root'
2018-09-07 22:28:07,439 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907222807419410
2018-09-07 22:28:07,468 [salt.minion      :1431][INFO    ][7417] Starting a new job with PID 7417
2018-09-07 22:28:07,488 [salt.minion      :1708][INFO    ][7417] Returning information for job: 20180907222807419410
2018-09-07 22:28:08,631 [salt.loaded.int.module.cmdmod:395 ][INFO    ][7029] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-07 22:28:08,673 [salt.loaded.int.module.cmdmod:395 ][INFO    ][7029] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'apache2'] in directory '/root'
2018-09-07 22:28:17,596 [salt.loaded.int.module.cmdmod:395 ][INFO    ][7029] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-07 22:28:17,646 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907222817634028
2018-09-07 22:28:17,662 [salt.state       :290 ][INFO    ][7029] Made the following changes:
'apache2-data' changed from 'absent' to '2.4.18-2ubuntu3.9'
'httpd-cgi' changed from 'absent' to '1'
'apache2-utils' changed from 'absent' to '2.4.18-2ubuntu3.9'
'httpd' changed from 'absent' to '1'
'ssl-cert' changed from 'absent' to '1.0.37'
'apache2' changed from 'absent' to '2.4.18-2ubuntu3.9'

2018-09-07 22:28:17,666 [salt.minion      :1431][INFO    ][8477] Starting a new job with PID 8477
2018-09-07 22:28:17,685 [salt.minion      :1708][INFO    ][8477] Returning information for job: 20180907222817634028
2018-09-07 22:28:17,695 [salt.state       :905 ][INFO    ][7029] Loading fresh modules for state activity
2018-09-07 22:28:17,759 [salt.state       :1941][INFO    ][7029] Completed state [apache2] at time 22:28:17.759538 duration_in_ms=15263.447
2018-09-07 22:28:17,768 [salt.state       :1770][INFO    ][7029] Running state [openssl] at time 22:28:17.768242
2018-09-07 22:28:17,768 [salt.state       :1803][INFO    ][7029] Executing state pkg.installed for [openssl]
2018-09-07 22:28:18,718 [salt.state       :290 ][INFO    ][7029] All specified packages are already installed
2018-09-07 22:28:18,720 [salt.state       :1941][INFO    ][7029] Completed state [openssl] at time 22:28:18.720855 duration_in_ms=952.612
2018-09-07 22:28:18,722 [salt.state       :1770][INFO    ][7029] Running state [a2enmod ssl] at time 22:28:18.722661
2018-09-07 22:28:18,723 [salt.state       :1803][INFO    ][7029] Executing state cmd.run for [a2enmod ssl]
2018-09-07 22:28:18,724 [salt.loaded.int.module.cmdmod:395 ][INFO    ][7029] Executing command 'a2enmod ssl' in directory '/root'
2018-09-07 22:28:18,818 [salt.state       :290 ][INFO    ][7029] {'pid': 8513, 'retcode': 0, 'stderr': '', 'stdout': 'Considering dependency setenvif for ssl:\nModule setenvif already enabled\nConsidering dependency mime for ssl:\nModule mime already enabled\nConsidering dependency socache_shmcb for ssl:\nEnabling module socache_shmcb.\nEnabling module ssl.\nSee /usr/share/doc/apache2/README.Debian.gz on how to configure SSL and create self-signed certificates.\nTo activate the new configuration, you need to run:\n  service apache2 restart'}
2018-09-07 22:28:18,820 [salt.state       :1941][INFO    ][7029] Completed state [a2enmod ssl] at time 22:28:18.819979 duration_in_ms=97.318
2018-09-07 22:28:18,822 [salt.state       :1770][INFO    ][7029] Running state [a2enmod rewrite] at time 22:28:18.822037
2018-09-07 22:28:18,822 [salt.state       :1803][INFO    ][7029] Executing state cmd.run for [a2enmod rewrite]
2018-09-07 22:28:18,825 [salt.loaded.int.module.cmdmod:395 ][INFO    ][7029] Executing command 'a2enmod rewrite' in directory '/root'
2018-09-07 22:28:18,909 [salt.state       :290 ][INFO    ][7029] {'pid': 8526, 'retcode': 0, 'stderr': '', 'stdout': 'Enabling module rewrite.\nTo activate the new configuration, you need to run:\n  service apache2 restart'}
2018-09-07 22:28:18,911 [salt.state       :1941][INFO    ][7029] Completed state [a2enmod rewrite] at time 22:28:18.910925 duration_in_ms=88.888
2018-09-07 22:28:18,920 [salt.state       :1770][INFO    ][7029] Running state [/etc/apache2/mods-available/mpm_prefork.conf] at time 22:28:18.920845
2018-09-07 22:28:18,921 [salt.state       :1803][INFO    ][7029] Executing state file.managed for [/etc/apache2/mods-available/mpm_prefork.conf]
2018-09-07 22:28:18,963 [salt.fileclient  :1215][INFO    ][7029] Fetching file from saltenv 'base', ** done ** 'apache/files/mpm/mpm_prefork.conf'
2018-09-07 22:28:19,034 [salt.state       :290 ][INFO    ][7029] File changed:
--- 
+++ 
@@ -6,11 +6,12 @@
 # MaxConnectionsPerChild: maximum number of requests a server process serves
 
 <IfModule mpm_prefork_module>
-	StartServers			 5
-	MinSpareServers		  5
-	MaxSpareServers		 10
-	MaxRequestWorkers	  150
-	MaxConnectionsPerChild   0
+    StartServers            5
+    MinSpareServers         5
+    MaxSpareServers         10
+    MaxRequestWorkers       150
+    MaxConnectionsPerChild  0
+    ServerLimit             150
 </IfModule>
 
-# vim: syntax=apache ts=4 sw=4 sts=4 sr noet
+# vim: syntax=apache ts=4 sw=4 sts=4 sr et

2018-09-07 22:28:19,035 [salt.state       :1941][INFO    ][7029] Completed state [/etc/apache2/mods-available/mpm_prefork.conf] at time 22:28:19.035675 duration_in_ms=114.829
2018-09-07 22:28:19,035 [salt.state       :1770][INFO    ][7029] Running state [/etc/apache2/mods-enabled/mpm_worker.load] at time 22:28:19.035949
2018-09-07 22:28:19,036 [salt.state       :1803][INFO    ][7029] Executing state file.absent for [/etc/apache2/mods-enabled/mpm_worker.load]
2018-09-07 22:28:19,036 [salt.state       :290 ][INFO    ][7029] File /etc/apache2/mods-enabled/mpm_worker.load is not present
2018-09-07 22:28:19,037 [salt.state       :1941][INFO    ][7029] Completed state [/etc/apache2/mods-enabled/mpm_worker.load] at time 22:28:19.037128 duration_in_ms=1.18
2018-09-07 22:28:19,037 [salt.state       :1770][INFO    ][7029] Running state [/etc/apache2/mods-enabled/mpm_event.load] at time 22:28:19.037363
2018-09-07 22:28:19,038 [salt.state       :1803][INFO    ][7029] Executing state file.absent for [/etc/apache2/mods-enabled/mpm_event.load]
2018-09-07 22:28:19,038 [salt.state       :290 ][INFO    ][7029] {'removed': '/etc/apache2/mods-enabled/mpm_event.load'}
2018-09-07 22:28:19,038 [salt.state       :1941][INFO    ][7029] Completed state [/etc/apache2/mods-enabled/mpm_event.load] at time 22:28:19.038544 duration_in_ms=1.18
2018-09-07 22:28:19,040 [salt.state       :1770][INFO    ][7029] Running state [a2enmod mpm_prefork] at time 22:28:19.040635
2018-09-07 22:28:19,040 [salt.state       :1803][INFO    ][7029] Executing state cmd.run for [a2enmod mpm_prefork]
2018-09-07 22:28:19,042 [salt.loaded.int.module.cmdmod:395 ][INFO    ][7029] Executing command 'a2enmod mpm_prefork' in directory '/root'
2018-09-07 22:28:19,117 [salt.state       :290 ][INFO    ][7029] {'pid': 8539, 'retcode': 0, 'stderr': '', 'stdout': 'Considering conflict mpm_event for mpm_prefork:\nConsidering conflict mpm_worker for mpm_prefork:\nEnabling module mpm_prefork.\nTo activate the new configuration, you need to run:\n  service apache2 restart'}
2018-09-07 22:28:19,118 [salt.state       :1941][INFO    ][7029] Completed state [a2enmod mpm_prefork] at time 22:28:19.118591 duration_in_ms=77.955
2018-09-07 22:28:19,120 [salt.state       :1770][INFO    ][7029] Running state [/etc/apache2/mods-enabled/mpm_worker.conf] at time 22:28:19.120879
2018-09-07 22:28:19,124 [salt.state       :1803][INFO    ][7029] Executing state file.absent for [/etc/apache2/mods-enabled/mpm_worker.conf]
2018-09-07 22:28:19,125 [salt.state       :290 ][INFO    ][7029] File /etc/apache2/mods-enabled/mpm_worker.conf is not present
2018-09-07 22:28:19,126 [salt.state       :1941][INFO    ][7029] Completed state [/etc/apache2/mods-enabled/mpm_worker.conf] at time 22:28:19.126291 duration_in_ms=5.411
2018-09-07 22:28:19,126 [salt.state       :1770][INFO    ][7029] Running state [/etc/apache2/mods-enabled/mpm_event.conf] at time 22:28:19.126806
2018-09-07 22:28:19,127 [salt.state       :1803][INFO    ][7029] Executing state file.absent for [/etc/apache2/mods-enabled/mpm_event.conf]
2018-09-07 22:28:19,128 [salt.state       :290 ][INFO    ][7029] {'removed': '/etc/apache2/mods-enabled/mpm_event.conf'}
2018-09-07 22:28:19,128 [salt.state       :1941][INFO    ][7029] Completed state [/etc/apache2/mods-enabled/mpm_event.conf] at time 22:28:19.128810 duration_in_ms=2.004
2018-09-07 22:28:19,134 [salt.state       :1770][INFO    ][7029] Running state [apache_server_service_task] at time 22:28:19.133274
2018-09-07 22:28:19,135 [salt.state       :1803][INFO    ][7029] Executing state test.show_notification for [apache_server_service_task]
2018-09-07 22:28:19,136 [salt.state       :290 ][INFO    ][7029] Running apache.server.service
2018-09-07 22:28:19,136 [salt.state       :1941][INFO    ][7029] Completed state [apache_server_service_task] at time 22:28:19.136707 duration_in_ms=3.433
2018-09-07 22:28:19,137 [salt.state       :1770][INFO    ][7029] Running state [/etc/apache2/ports.conf] at time 22:28:19.137664
2018-09-07 22:28:19,138 [salt.state       :1803][INFO    ][7029] Executing state file.managed for [/etc/apache2/ports.conf]
2018-09-07 22:28:19,163 [salt.fileclient  :1215][INFO    ][7029] Fetching file from saltenv 'base', ** done ** 'apache/files/ports.conf'
2018-09-07 22:28:19,242 [salt.state       :290 ][INFO    ][7029] File changed:
--- 
+++ 
@@ -2,14 +2,4 @@
 # have to change the VirtualHost statement in
 # /etc/apache2/sites-enabled/000-default.conf
 
-Listen 80
-
-<IfModule ssl_module>
-	Listen 443
-</IfModule>
-
-<IfModule mod_gnutls.c>
-	Listen 443
-</IfModule>
-
 # vim: syntax=apache ts=4 sw=4 sts=4 sr noet

2018-09-07 22:28:19,242 [salt.state       :1941][INFO    ][7029] Completed state [/etc/apache2/ports.conf] at time 22:28:19.242659 duration_in_ms=104.994
2018-09-07 22:28:19,243 [salt.state       :1770][INFO    ][7029] Running state [/etc/apache2/conf-available/security.conf] at time 22:28:19.243170
2018-09-07 22:28:19,243 [salt.state       :1803][INFO    ][7029] Executing state file.managed for [/etc/apache2/conf-available/security.conf]
2018-09-07 22:28:19,266 [salt.fileclient  :1215][INFO    ][7029] Fetching file from saltenv 'base', ** done ** 'apache/files/security.conf'
2018-09-07 22:28:19,413 [salt.state       :290 ][INFO    ][7029] File changed:
--- 
+++ 
@@ -1,73 +1,14 @@
-#
-# Disable access to the entire file system except for the directories that
-# are explicitly allowed later.
-#
-# This currently breaks the configurations that come with some web application
-# Debian packages.
-#
-#<Directory />
-#   AllowOverride None
-#   Require all denied
-#</Directory>
+ServerSignature Off
+TraceEnable Off
+ServerTokens Prod
+<DirectoryMatch "/\.svn">
+    Require all denied
+</DirectoryMatch>
 
+<DirectoryMatch "/\.git">
+    Require all denied
+</DirectoryMatch>
 
-# Changing the following options will not really affect the security of the
-# server, but might make attacks slightly more difficult in some cases.
-
-#
-# ServerTokens
-# This directive configures what you return as the Server HTTP response
-# Header. The default is 'Full' which sends information about the OS-Type
-# and compiled in modules.
-# Set to one of:  Full | OS | Minimal | Minor | Major | Prod
-# where Full conveys the most information, and Prod the least.
-#ServerTokens Minimal
-ServerTokens OS
-#ServerTokens Full
-
-#
-# Optionally add a line containing the server version and virtual host
-# name to server-generated pages (internal error documents, FTP directory
-# listings, mod_status and mod_info output etc., but not CGI generated
-# documents or custom error documents).
-# Set to "EMail" to also include a mailto: link to the ServerAdmin.
-# Set to one of:  On | Off | EMail
-#ServerSignature Off
-ServerSignature On
-
-#
-# Allow TRACE method
-#
-# Set to "extended" to also reflect the request body (only for testing and
-# diagnostic purposes).
-#
-# Set to one of:  On | Off | extended
-TraceEnable Off
-#TraceEnable On
-
-#
-# Forbid access to version control directories
-#
-# If you use version control systems in your document root, you should
-# probably deny access to their directories. For example, for subversion:
-#
-#<DirectoryMatch "/\.svn">
-#   Require all denied
-#</DirectoryMatch>
-
-#
-# Setting this header will prevent MSIE from interpreting files as something
-# else than declared by the content type in the HTTP headers.
-# Requires mod_headers to be enabled.
-#
-#Header set X-Content-Type-Options: "nosniff"
-
-#
-# Setting this header will prevent other sites from embedding pages from this
-# site as frames. This defends against clickjacking attacks.
-# Requires mod_headers to be enabled.
-#
-#Header set X-Frame-Options: "sameorigin"
-
-
-# vim: syntax=apache ts=4 sw=4 sts=4 sr noet
+<DirectoryMatch "/\.hg">
+    Require all denied
+</DirectoryMatch>

2018-09-07 22:28:19,413 [salt.state       :1941][INFO    ][7029] Completed state [/etc/apache2/conf-available/security.conf] at time 22:28:19.413504 duration_in_ms=170.333
2018-09-07 22:28:19,422 [salt.state       :1770][INFO    ][7029] Running state [/etc/apache2/sites-enabled/000-default.conf] at time 22:28:19.422036
2018-09-07 22:28:19,422 [salt.state       :1803][INFO    ][7029] Executing state file.absent for [/etc/apache2/sites-enabled/000-default.conf]
2018-09-07 22:28:19,422 [salt.state       :290 ][INFO    ][7029] {'removed': '/etc/apache2/sites-enabled/000-default.conf'}
2018-09-07 22:28:19,422 [salt.state       :1941][INFO    ][7029] Completed state [/etc/apache2/sites-enabled/000-default.conf] at time 22:28:19.422887 duration_in_ms=0.851
2018-09-07 22:28:19,425 [salt.state       :1770][INFO    ][7029] Running state [apache2] at time 22:28:19.425094
2018-09-07 22:28:19,425 [salt.state       :1803][INFO    ][7029] Executing state service.running for [apache2]
2018-09-07 22:28:19,426 [salt.loaded.int.module.cmdmod:395 ][INFO    ][7029] Executing command ['systemctl', 'status', 'apache2.service', '-n', '0'] in directory '/root'
2018-09-07 22:28:19,453 [salt.loaded.int.module.cmdmod:395 ][INFO    ][7029] Executing command ['systemctl', 'is-active', 'apache2.service'] in directory '/root'
2018-09-07 22:28:19,477 [salt.loaded.int.module.cmdmod:395 ][INFO    ][7029] Executing command ['systemctl', 'is-enabled', 'apache2.service'] in directory '/root'
2018-09-07 22:28:19,508 [salt.state       :290 ][INFO    ][7029] The service apache2 is already running
2018-09-07 22:28:19,509 [salt.state       :1941][INFO    ][7029] Completed state [apache2] at time 22:28:19.508932 duration_in_ms=83.837
2018-09-07 22:28:19,510 [salt.state       :1770][INFO    ][7029] Running state [apache2] at time 22:28:19.509864
2018-09-07 22:28:19,511 [salt.state       :1803][INFO    ][7029] Executing state service.mod_watch for [apache2]
2018-09-07 22:28:19,514 [salt.loaded.int.module.cmdmod:395 ][INFO    ][7029] Executing command ['systemctl', 'is-active', 'apache2.service'] in directory '/root'
2018-09-07 22:28:19,536 [salt.loaded.int.module.cmdmod:395 ][INFO    ][7029] Executing command ['systemd-run', '--scope', 'systemctl', 'reload', 'apache2.service'] in directory '/root'
2018-09-07 22:28:19,811 [salt.state       :290 ][INFO    ][7029] {'apache2': True}
2018-09-07 22:28:19,812 [salt.state       :1941][INFO    ][7029] Completed state [apache2] at time 22:28:19.811983 duration_in_ms=302.118
2018-09-07 22:28:19,813 [salt.state       :1770][INFO    ][7029] Running state [/etc/apache2/conf-enabled/security.conf] at time 22:28:19.813799
2018-09-07 22:28:19,814 [salt.state       :1803][INFO    ][7029] Executing state file.symlink for [/etc/apache2/conf-enabled/security.conf]
2018-09-07 22:28:19,818 [salt.state       :290 ][INFO    ][7029] {'new': '/etc/apache2/conf-enabled/security.conf'}
2018-09-07 22:28:19,821 [salt.state       :1941][INFO    ][7029] Completed state [/etc/apache2/conf-enabled/security.conf] at time 22:28:19.820763 duration_in_ms=6.963
2018-09-07 22:28:19,822 [salt.state       :1770][INFO    ][7029] Running state [openstack-dashboard] at time 22:28:19.822310
2018-09-07 22:28:19,824 [salt.state       :1803][INFO    ][7029] Executing state pkg.installed for [openstack-dashboard]
2018-09-07 22:28:19,879 [salt.loaded.int.module.cmdmod:395 ][INFO    ][7029] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-07 22:28:19,920 [salt.loaded.int.module.cmdmod:395 ][INFO    ][7029] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'openstack-dashboard'] in directory '/root'
2018-09-07 22:28:27,756 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907222827743760
2018-09-07 22:28:27,777 [salt.minion      :1431][INFO    ][8787] Starting a new job with PID 8787
2018-09-07 22:28:27,802 [salt.minion      :1708][INFO    ][8787] Returning information for job: 20180907222827743760
2018-09-07 22:28:37,975 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907222837958964
2018-09-07 22:28:38,004 [salt.minion      :1431][INFO    ][9590] Starting a new job with PID 9590
2018-09-07 22:28:38,044 [salt.minion      :1708][INFO    ][9590] Returning information for job: 20180907222837958964
2018-09-07 22:28:47,990 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907222847975850
2018-09-07 22:28:48,011 [salt.minion      :1431][INFO    ][10304] Starting a new job with PID 10304
2018-09-07 22:28:48,034 [salt.minion      :1708][INFO    ][10304] Returning information for job: 20180907222847975850
2018-09-07 22:28:58,199 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907222858181714
2018-09-07 22:28:58,220 [salt.minion      :1431][INFO    ][11271] Starting a new job with PID 11271
2018-09-07 22:28:58,242 [salt.minion      :1708][INFO    ][11271] Returning information for job: 20180907222858181714
2018-09-07 22:29:08,233 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907222908223699
2018-09-07 22:29:08,255 [salt.minion      :1431][INFO    ][11714] Starting a new job with PID 11714
2018-09-07 22:29:08,278 [salt.minion      :1708][INFO    ][11714] Returning information for job: 20180907222908223699
2018-09-07 22:29:18,434 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907222918425282
2018-09-07 22:29:18,456 [salt.minion      :1431][INFO    ][12152] Starting a new job with PID 12152
2018-09-07 22:29:18,474 [salt.minion      :1708][INFO    ][12152] Returning information for job: 20180907222918425282
2018-09-07 22:29:28,638 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907222928624031
2018-09-07 22:29:28,668 [salt.minion      :1431][INFO    ][12217] Starting a new job with PID 12217
2018-09-07 22:29:28,690 [salt.minion      :1708][INFO    ][12217] Returning information for job: 20180907222928624031
2018-09-07 22:29:38,660 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907222938644071
2018-09-07 22:29:38,682 [salt.minion      :1431][INFO    ][12226] Starting a new job with PID 12226
2018-09-07 22:29:38,704 [salt.minion      :1708][INFO    ][12226] Returning information for job: 20180907222938644071
2018-09-07 22:29:48,874 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907222948862509
2018-09-07 22:29:48,902 [salt.minion      :1431][INFO    ][12235] Starting a new job with PID 12235
2018-09-07 22:29:48,922 [salt.minion      :1708][INFO    ][12235] Returning information for job: 20180907222948862509
2018-09-07 22:29:58,906 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907222958895503
2018-09-07 22:29:58,935 [salt.minion      :1431][INFO    ][12244] Starting a new job with PID 12244
2018-09-07 22:29:58,956 [salt.minion      :1708][INFO    ][12244] Returning information for job: 20180907222958895503
2018-09-07 22:30:08,929 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907223008914708
2018-09-07 22:30:08,956 [salt.minion      :1431][INFO    ][12253] Starting a new job with PID 12253
2018-09-07 22:30:08,978 [salt.minion      :1708][INFO    ][12253] Returning information for job: 20180907223008914708
2018-09-07 22:30:19,148 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907223019136118
2018-09-07 22:30:19,173 [salt.minion      :1431][INFO    ][12262] Starting a new job with PID 12262
2018-09-07 22:30:19,191 [salt.minion      :1708][INFO    ][12262] Returning information for job: 20180907223019136118
2018-09-07 22:30:24,573 [salt.loaded.int.module.cmdmod:395 ][INFO    ][7029] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-07 22:30:24,652 [salt.state       :290 ][INFO    ][7029] Made the following changes:
'python-routes' changed from 'absent' to '2.4.1-1~u16.04+mcp2'
'python-retrying' changed from 'absent' to '1.3.3-1'
'libjs-angular-file-upload' changed from 'absent' to '12.0.4+dfsg1-2.1~u16.04+mcp2'
'python-os-service-types' changed from 'absent' to '1.1.0-1.0~u16.04+mcp1'
'python-kombu' changed from 'absent' to '4.1.0-1~u16.04+mcp1'
'python-oslo.concurrency' changed from 'absent' to '3.25.0-1.0~u16.04+mcp2'
'python-xstatic-angular-fileupload' changed from 'absent' to '12.0.4.0+dfsg1-1.1~u16.04+mcp2'
'python-sqlparse' changed from 'absent' to '0.2.2-1~u16.04+mcp1'
'python-pint' changed from 'absent' to '0.6-1ubuntu1'
'python-monotonic' changed from 'absent' to '0.6-2'
'python2.7-pymongo' changed from 'absent' to '1'
'python-openstacksdk' changed from 'absent' to '0.11.3+repack-1.0~u16.04+mcp2'
'python-deprecation' changed from 'absent' to '1.0.1-1~u16.04+mcp2'
'python2.7-bson' changed from 'absent' to '1'
'libtiff5' changed from 'absent' to '4.0.6-1ubuntu0.4'
'python-secretstorage' changed from 'absent' to '2.1.3-1'
'libjs-jsencrypt' changed from 'absent' to '2.3.0+dfsg2-1~u16.04+mcp2'
'python-glanceclient' changed from 'absent' to '1:2.10.0-1.0~u16.04+mcp3'
'python-formencode' changed from 'absent' to '1.3.0-0ubuntu5'
'twitter-bootstrap' changed from 'absent' to '1'
'libjs-term.js' changed from 'absent' to '0.0.7-1~u16.04+mcp2'
'python-cachetools' changed from 'absent' to '2.0.0-2.0~u16.04+mcp1'
'python-xstatic-jasmine' changed from 'absent' to '2.4.1.1+fixed1-1~u16.04+mcp1'
'python-semantic-version' changed from 'absent' to '2.3.1-1'
'python-blinker' changed from 'absent' to '1.3.dfsg2-1build1'
'python-django-common' changed from 'absent' to '1:1.11.7-1~u16.04+mcp2'
'python-roman' changed from 'absent' to '2.0.0-2'
'python-prettytable' changed from 'absent' to '0.7.2-3'
'python-bs4' changed from 'absent' to '4.6.0-1~u16.04+mcp1'
'python2.7-pymongo-ext' changed from 'absent' to '1'
'python-tenacity' changed from 'absent' to '4.8.0-1.0~u16.04+mcp1'
'python-unittest2' changed from 'absent' to '1.1.0-6.1'
'python-setuptools' changed from 'absent' to '33.1.1-1~u16.04+mcp'
'python2.7-django-appconf' changed from 'absent' to '1'
'python-stevedore' changed from 'absent' to '1:1.25.0-1~u16.04+mcp2'
'docutils-doc' changed from 'absent' to '0.12+dfsg-1'
'python-dbus' changed from 'absent' to '1.2.0-3'
'python-gridfs' changed from 'absent' to '3.2-1build1'
'python-fixtures' changed from 'absent' to '3.0.0-1.1~u16.04+mcp2'
'python-xstatic-jquery.tablesorter' changed from 'absent' to '2.14.5.1-2.0~u16.04+mcp1'
'libjs-twitter-bootstrap' changed from 'absent' to '2.0.2+dfsg-9'
'python-testtools' changed from 'absent' to '2.3.0-1.0~u16.04+mcp1'
'libjs-jquery-cookie' changed from 'absent' to '10-2ubuntu2'
'python-anyjson' changed from 'absent' to '0.3.3-1build1'
'libjs-angularjs-smart-table' changed from 'absent' to '1.4.13-1~u16.04+mcp2'
'python-xstatic-hogan' changed from 'absent' to '2.0.0.2-1'
'python-dogpile.cache' changed from 'absent' to '0.6.2-1.1~u16.04+mcp2'
'python-compressor' changed from 'absent' to '1'
'python-dnspython' changed from 'absent' to '1.14.0-3.1~u16.04+mcp2'
'libjs-spin.js' changed from 'absent' to '1.2.8+dfsg2-1'
'fonts-roboto-fontface' changed from 'absent' to '0.5.0-2~u16.04+mcp2'
'python-pil' changed from 'absent' to '3.1.2-0ubuntu1.1'
'docutils-common' changed from 'absent' to '0.12+dfsg-1'
'python2.7-lxml' changed from 'absent' to '1'
'python-pika' changed from 'absent' to '0.10.0-1'
'libpaper-utils' changed from 'absent' to '1.1.24+nmu4ubuntu1'
'python-fasteners' changed from 'absent' to '0.12.0-2ubuntu1'
'python-babel' changed from 'absent' to '2.3.4+dfsg.1-2.1~u16.04+mcp2'
'python-osc-lib' changed from 'absent' to '1.9.0-1.0~u16.04+mcp1'
'liblcms2-2' changed from 'absent' to '2.6-3ubuntu2'
'python2.7-simplejson' changed from 'absent' to '1'
'python-extras' changed from 'absent' to '1.0.0-2.0~u16.04+mcp1'
'python-xstatic-bootstrap-scss' changed from 'absent' to '3.3.7.1-2~u16.04+mcp3'
'python-xstatic-term.js' changed from 'absent' to '0.0.7.0-2~u16.04+mcp2'
'python-bson-ext' changed from 'absent' to '3.2-1build1'
'python-scgi' changed from 'absent' to '1.13-1.1build1'
'python2.7-pil' changed from 'absent' to '1'
'python-repoze.lru' changed from 'absent' to '0.6-6'
'python-posix-ipc' changed from 'absent' to '0.9.8-2build2'
'formencode-i18n' changed from 'absent' to '1.3.0-0ubuntu5'
'python-xstatic-angular-bootstrap' changed from 'absent' to '2.2.0.0-1.1~u16.04+mcp2'
'python2.7-testtools' changed from 'absent' to '1'
'docutils' changed from 'absent' to '1'
'python-django-pyscss' changed from 'absent' to '2.0.2-4'
'python-xstatic-bootstrap-datepicker' changed from 'absent' to '1.3.1.1-1~u16.04+mcp1'
'python2.7-dbus' changed from 'absent' to '1'
'python-oslo.middleware' changed from 'absent' to '3.34.0-1.0~u16.04+mcp6'
'fonts-materialdesignicons-webfont' changed from 'absent' to '1.4.57-1.1~u16.04+mcp2'
'python-xstatic-angular' changed from 'absent' to '1.5.8.0-1.1~u16.04+mcp2'
'python-pillow' changed from 'absent' to '1'
'python2.7-cinderclient' changed from 'absent' to '1'
'libpaperg' changed from 'absent' to '1'
'python2.7-netifaces' changed from 'absent' to '1'
'python-xstatic-mdi' changed from 'absent' to '1.4.57.0-1.1~u16.04+mcp2'
'python-xstatic-jquery' changed from 'absent' to '1.10.2.1-2~u16.04+mcp2'
'python-oslo.context' changed from 'absent' to '1:2.20.0-1.0~u16.04+mcp6'
'python-neutronclient' changed from 'absent' to '1:6.7.0-1.0~u16.04+mcp14'
'python-pymongo-ext' changed from 'absent' to '3.2-1build1'
'python-xstatic-angular-schema-form' changed from 'absent' to '0.8.13.0-1.1~u16.04+mcp2'
'python2.7-pyinotify' changed from 'absent' to '1'
'libjs-jquery-tablesorter' changed from 'absent' to '10-2ubuntu2'
'python-pyparsing' changed from 'absent' to '2.1.10+dfsg1-1.1~u16.04+mcp2'
'python-babel-localedata' changed from 'absent' to '2.3.4+dfsg.1-2.1~u16.04+mcp2'
'python-positional' changed from 'absent' to '1.1.1-3.1~u16.04+mcp2'
'python-appconf' changed from 'absent' to '1'
'python-cmd2' changed from 'absent' to '0.6.8-1'
'libjs-magic-search' changed from 'absent' to '0.2.5-1'
'python-distribute' changed from 'absent' to '1'
'python-xstatic-tv4' changed from 'absent' to '1.2.7.0-1.1~u16.04+mcp2'
'python-oslo-log' changed from 'absent' to '1'
'python-keystoneclient' changed from 'absent' to '1:3.15.0-1.0~u16.04+mcp6'
'python-xstatic-font-awesome' changed from 'absent' to '4.7.0.0-3~u16.04+mcp2'
'python-rjsmin' changed from 'absent' to '1.0.12+dfsg1-2ubuntu1'
'python-pygments' changed from 'absent' to '2.2.0+dfsg-1~u16.04+mcp2'
'python-pathlib' changed from 'absent' to '1.0.1-2'
'python-iso8601' changed from 'absent' to '0.1.11-1'
'python-xstatic-jsencrypt' changed from 'absent' to '2.3.1.1-2~u16.04+mcp2'
'python-jsonpatch' changed from 'absent' to '1.21-1~u16.04+mcp1'
'python-xstatic-d3' changed from 'absent' to '3.5.17.0-2~u16.04+mcp2'
'libwebpmux1' changed from 'absent' to '0.4.4-1'
'python-xstatic-roboto-fontface' changed from 'absent' to '0.5.0.0-2~u16.04+mcp2'
'python-oslo.policy' changed from 'absent' to '1.33.2-1.0~u16.04+mcp3'
'python-xstatic' changed from 'absent' to '1.0.0-4'
'python-paste' changed from 'absent' to '2.0.3+dfsg-4.1~u16.04+mcp1'
'python-xstatic-jquery-ui' changed from 'absent' to '1.12.0.1+debian+dfsg3-2~u16.04+mcp2'
'python-lxml' changed from 'absent' to '3.5.0-1build1'
'python-oslo.config' changed from 'absent' to '1:5.2.0-1.0~u16.04+mcp7'
'python-futurist' changed from 'absent' to '1.6.0-1.0~u16.04+mcp1'
'libpaper1' changed from 'absent' to '1.1.24+nmu4ubuntu1'
'python-webob' changed from 'absent' to '1:1.7.2-1~u16.04+mcp2'
'python2.7-gi' changed from 'absent' to '1'
'python-linecache2' changed from 'absent' to '1.0.0-2'
'python-xstatic-objectpath' changed from 'absent' to '1.2.1.0-2.1~u16.04+mcp2'
'python-pastedeploy-tpl' changed from 'absent' to '1.5.2-1'
'python-oauthlib' changed from 'absent' to '1.0.3-1'
'python-mimeparse' changed from 'absent' to '0.1.4-1build1'
'python-gi' changed from 'absent' to '3.20.0-0ubuntu1'
'python-xstatic-spin' changed from 'absent' to '1.2.8.0+dfsg1-1'
'python2.7-django-compressor' changed from 'absent' to '1'
'python-xstatic-angular-lrdragndrop' changed from 'absent' to '1.0.2.2-1'
'python-contextlib2' changed from 'absent' to '0.5.1-1'
'python-xstatic-bootswatch' changed from 'absent' to '3.3.7.0-2~u16.04+mcp2'
'python-xstatic-jquery-migrate' changed from 'absent' to '1.2.1.1+dfsg1-1'
'libjs-jquery.quicksearch' changed from 'absent' to '2.0.4-1'
'python-novaclient' changed from 'absent' to '2:9.1.1-1~u16.04+mcp6'
'python-oslo.utils' changed from 'absent' to '3.35.1-1.0~u16.04+mcp3'
'python-pika-pool' changed from 'absent' to '0.1.3-1ubuntu1'
'python-django' changed from 'absent' to '1:1.11.7-1~u16.04+mcp2'
'libjs-twitter-bootstrap-datepicker' changed from 'absent' to '1.3.1+dfsg1-1'
'python-debtcollector' changed from 'absent' to '1.3.0-2'
'python2.7-iso8601' changed from 'absent' to '1'
'python-bson' changed from 'absent' to '3.2-1build1'
'python-simplejson' changed from 'absent' to '3.8.1-1ubuntu2'
'fonts-font-awesome' changed from 'absent' to '4.7.0~dfsg-3~u16.04+mcp2'
'python-docutils' changed from 'absent' to '0.12+dfsg-1'
'python-openid' changed from 'absent' to '2.2.5-6'
'python-pastedeploy' changed from 'absent' to '1.5.2-1'
'python2.7-cmd2' changed from 'absent' to '1'
'libjs-jquery-ui' changed from 'absent' to '1.12.1+dfsg-5~u16.04+mcp2'
'python-tz' changed from 'absent' to '2014.10~dfsg1-0ubuntu2'
'python-pastescript' changed from 'absent' to '1.7.5-3build1'
'python-cliff' changed from 'absent' to '2.8.0-1~u16.04+mcp2'
'python-oslo.i18n' changed from 'absent' to '3.19.0-1.0~u16.04+mcp6'
'python-munch' changed from 'absent' to '2.2.0-1.0~u16.04+mcp1'
'python-xstatic-magic-search' changed from 'absent' to '0.2.5.1-1'
'python-appdirs' changed from 'absent' to '1.4.0-2'
'python2.7-pathlib' changed from 'absent' to '1'
'python-statsd' changed from 'absent' to '3.2.1-2~u16.04+mcp2'
'libjs-d3' changed from 'absent' to '3.5.17-2~u16.04+mcp2'
'python-keyring' changed from 'absent' to '8.5.1-1.1~u16.04+mcp2'
'python-django-appconf' changed from 'absent' to '1.0.1-4'
'python-xstatic-jquery.quicksearch' changed from 'absent' to '2.0.4.1-1'
'python-xstatic-smart-table' changed from 'absent' to '1.4.13.2-2~u16.04+mcp1'
'python-oslo-utils' changed from 'absent' to '1'
'python-oslo.serialization' changed from 'absent' to '2.24.0-1.0~u16.04+mcp5'
'python-django-babel' changed from 'absent' to '0.5.1-1.1~u16.04+mcp2'
'python-unicodecsv' changed from 'absent' to '0.14.1-1'
'python-wrapt' changed from 'absent' to '1.8.0-5build2'
'python-rfc3986' changed from 'absent' to '0.3.1-2.1~u16.04+mcp2'
'python-eventlet' changed from 'absent' to '0.20.0-4~u16.04+mcp2'
'python-django-horizon' changed from 'absent' to '3:13.0.1-4~u16.04+mcp46'
'python2.7-pyparsing' changed from 'absent' to '1'
'python-oslo.log' changed from 'absent' to '3.36.0-1.0~u16.04+mcp8'
'python-pyscss' changed from 'absent' to '1.3.4-5'
'python-pyinotify' changed from 'absent' to '0.9.6-1.1~u16.04+mcp2'
'libjpeg-turbo8' changed from 'absent' to '1.4.2-0ubuntu3.1'
'libjs-angularjs' changed from 'absent' to '1.5.10-1.1~u16.04+mcp2'
'libjpeg8' changed from 'absent' to '8c-2ubuntu8'
'python-amqp' changed from 'absent' to '2.2.1-1~exp1~u16.04+mcp1'
'libjs-bootswatch' changed from 'absent' to '3.3.7+dfsg2-1~u16.04+mcp2'
'libwebp5' changed from 'absent' to '0.4.4-1'
'python-vine' changed from 'absent' to '1.1.3+dfsg-2~u16.04+mcp3'
'python-django-compressor' changed from 'absent' to '2.1-1~u16.04+mcp2'
'python-netifaces' changed from 'absent' to '0.10.4-0.1build2'
'python-decorator' changed from 'absent' to '4.0.6-1'
'python-osprofiler' changed from 'absent' to '1.15.2-1.0~u16.04+mcp3'
'python-os-client-config' changed from 'absent' to '1.29.0-1.0~u16.04+mcp2'
'python-oslo.messaging' changed from 'absent' to '5.35.1-1.0~u16.04+mcp16'
'python-warlock' changed from 'absent' to '1.2.0-2.0~u16.04+mcp1'
'python-tempita' changed from 'absent' to '0.5.2-1build1'
'python-keyrings.alt' changed from 'absent' to '1.1.1-1'
'openstack-dashboard' changed from 'absent' to '3:13.0.1-4~u16.04+mcp46'
'python-json-pointer' changed from 'absent' to '1.9-3'
'libjs-lrdragndrop' changed from 'absent' to '1.0.2-2'
'python-html5lib' changed from 'absent' to '0.999-4'
'python-swiftclient' changed from 'absent' to '1:3.5.0-1~u16.04+mcp3'
'python-jwt' changed from 'absent' to '1.3.0-1ubuntu0.1'
'python2.7-gridfs' changed from 'absent' to '1'
'python-greenlet' changed from 'absent' to '0.4.12-2.0~u16.04+mcp1'
'python-oslo.service' changed from 'absent' to '1.29.0-1.0~u16.04+mcp1'
'python-rcssmin' changed from 'absent' to '1.0.6-1ubuntu1'
'python-ceilometerclient' changed from 'absent' to '2.9.0-2~u16.04+mcp1'
'python-csscompressor' changed from 'absent' to '0.9.4-2'
'python-traceback2' changed from 'absent' to '1.4.0-3'
'python-jmespath' changed from 'absent' to '0.9.0-2'
'python-keystoneauth1' changed from 'absent' to '3.4.0-1.0~u16.04+mcp7'
'libjs-angular-gettext' changed from 'absent' to '2.3.8-2~u16.04+mcp2'
'python-pymongo' changed from 'absent' to '3.2-1build1'
'libjs-jquery-metadata' changed from 'absent' to '10-2ubuntu2'
'libjs-rickshaw' changed from 'absent' to '1.5.1.dfsg-1'
'python-xstatic-rickshaw' changed from 'absent' to '1.5.0.2-2'
'python-cinderclient' changed from 'absent' to '1:3.5.0-1.0~u16.04+mcp1'
'python-requestsexceptions' changed from 'absent' to '1.3.0-3~u16.04+mcp2'
'python-oslo-context' changed from 'absent' to '1'
'python2.7-bson-ext' changed from 'absent' to '1'
'python-xstatic-angular-gettext' changed from 'absent' to '2.3.8.0-2~u16.04+mcp2'
'libjbig0' changed from 'absent' to '2.1-3.1'

2018-09-07 22:30:24,685 [salt.state       :905 ][INFO    ][7029] Loading fresh modules for state activity
2018-09-07 22:30:24,744 [salt.state       :1941][INFO    ][7029] Completed state [openstack-dashboard] at time 22:30:24.744236 duration_in_ms=124921.925
2018-09-07 22:30:24,753 [salt.state       :1770][INFO    ][7029] Running state [python-lesscpy] at time 22:30:24.753251
2018-09-07 22:30:24,753 [salt.state       :1803][INFO    ][7029] Executing state pkg.installed for [python-lesscpy]
2018-09-07 22:30:27,090 [salt.loaded.int.module.cmdmod:395 ][INFO    ][7029] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-07 22:30:27,137 [salt.loaded.int.module.cmdmod:395 ][INFO    ][7029] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'python-lesscpy'] in directory '/root'
2018-09-07 22:30:29,359 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907223029350127
2018-09-07 22:30:29,384 [salt.minion      :1431][INFO    ][12433] Starting a new job with PID 12433
2018-09-07 22:30:29,406 [salt.minion      :1708][INFO    ][12433] Returning information for job: 20180907223029350127
2018-09-07 22:30:29,822 [salt.loaded.int.module.cmdmod:395 ][INFO    ][7029] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-07 22:30:29,895 [salt.state       :290 ][INFO    ][7029] Made the following changes:
'python-lesscpy' changed from 'absent' to '0.10-1'

2018-09-07 22:30:29,940 [salt.state       :905 ][INFO    ][7029] Loading fresh modules for state activity
2018-09-07 22:30:30,210 [salt.state       :1941][INFO    ][7029] Completed state [python-lesscpy] at time 22:30:30.210394 duration_in_ms=5457.142
2018-09-07 22:30:30,217 [salt.state       :1770][INFO    ][7029] Running state [python-memcache] at time 22:30:30.217275
2018-09-07 22:30:30,218 [salt.state       :1803][INFO    ][7029] Executing state pkg.installed for [python-memcache]
2018-09-07 22:30:31,182 [salt.state       :290 ][INFO    ][7029] All specified packages are already installed
2018-09-07 22:30:31,183 [salt.state       :1941][INFO    ][7029] Completed state [python-memcache] at time 22:30:31.183448 duration_in_ms=965.825
2018-09-07 22:30:31,184 [salt.state       :1770][INFO    ][7029] Running state [gettext-base] at time 22:30:31.184227
2018-09-07 22:30:31,184 [salt.state       :1803][INFO    ][7029] Executing state pkg.installed for [gettext-base]
2018-09-07 22:30:31,197 [salt.state       :290 ][INFO    ][7029] All specified packages are already installed
2018-09-07 22:30:31,197 [salt.state       :1941][INFO    ][7029] Completed state [gettext-base] at time 22:30:31.197895 duration_in_ms=13.667
2018-09-07 22:30:31,199 [salt.state       :1770][INFO    ][7029] Running state [openstack-dashboard-apache] at time 22:30:31.199001
2018-09-07 22:30:31,199 [salt.state       :1803][INFO    ][7029] Executing state pkg.purged for [openstack-dashboard-apache]
2018-09-07 22:30:31,220 [salt.state       :290 ][INFO    ][7029] All specified packages are already absent
2018-09-07 22:30:31,221 [salt.state       :1941][INFO    ][7029] Completed state [openstack-dashboard-apache] at time 22:30:31.221107 duration_in_ms=22.106
2018-09-07 22:30:31,223 [salt.state       :1770][INFO    ][7029] Running state [/etc/openstack-dashboard/local_settings.py] at time 22:30:31.223416
2018-09-07 22:30:31,223 [salt.state       :1803][INFO    ][7029] Executing state file.managed for [/etc/openstack-dashboard/local_settings.py]
2018-09-07 22:30:31,248 [salt.fileclient  :1215][INFO    ][7029] Fetching file from saltenv 'base', ** done ** 'horizon/files/local_settings/queens_settings.py'
2018-09-07 22:30:31,339 [salt.fileclient  :1215][INFO    ][7029] Fetching file from saltenv 'base', ** done ** 'horizon/files/horizon_settings/_local_settings.py'
2018-09-07 22:30:31,431 [salt.fileclient  :1215][INFO    ][7029] Fetching file from saltenv 'base', ** done ** 'horizon/files/horizon_settings/_horizon_settings.py'
2018-09-07 22:30:31,478 [salt.fileclient  :1215][INFO    ][7029] Fetching file from saltenv 'base', ** done ** 'horizon/files/horizon_settings/_keystone_settings.py'
2018-09-07 22:30:31,529 [salt.fileclient  :1215][INFO    ][7029] Fetching file from saltenv 'base', ** done ** 'horizon/files/horizon_settings/_nova_settings.py'
2018-09-07 22:30:31,555 [salt.fileclient  :1215][INFO    ][7029] Fetching file from saltenv 'base', ** done ** 'horizon/files/horizon_settings/_glance_settings.py'
2018-09-07 22:30:31,579 [salt.fileclient  :1215][INFO    ][7029] Fetching file from saltenv 'base', ** done ** 'horizon/files/horizon_settings/_neutron_settings.py'
2018-09-07 22:30:31,608 [salt.fileclient  :1215][INFO    ][7029] Fetching file from saltenv 'base', ** done ** 'horizon/files/horizon_settings/_heat_settings.py'
2018-09-07 22:30:31,635 [salt.fileclient  :1215][INFO    ][7029] Fetching file from saltenv 'base', ** done ** 'horizon/files/horizon_settings/_websso_settings.py'
2018-09-07 22:30:31,676 [salt.fileclient  :1215][INFO    ][7029] Fetching file from saltenv 'base', ** done ** 'horizon/files/horizon_settings/_ssl_settings.py'
2018-09-07 22:30:31,691 [salt.state       :290 ][INFO    ][7029] File changed:
--- 
+++ 
@@ -1,173 +1,83 @@
-# -*- coding: utf-8 -*-
-
 import os
 
+from django.utils.translation import pgettext_lazy
 from django.utils.translation import ugettext_lazy as _
-
-from horizon.utils import secret_key
-
-from openstack_dashboard.settings import HORIZON_CONFIG
-
-DEBUG = True
-
-# This setting controls whether or not compression is enabled. Disabling
-# compression makes Horizon considerably slower, but makes it much easier
-# to debug JS and CSS changes
-#COMPRESS_ENABLED = not DEBUG
-
-# This setting controls whether compression happens on the fly, or offline
-# with `python manage.py compress`
-# See https://django-compressor.readthedocs.io/en/latest/usage/#offline-compression
-# for more information
-#COMPRESS_OFFLINE = not DEBUG
-
-# WEBROOT is the location relative to Webserver root
-# should end with a slash.
-WEBROOT = '/'
-#LOGIN_URL = WEBROOT + 'auth/login/'
-#LOGOUT_URL = WEBROOT + 'auth/logout/'
-#
-# LOGIN_REDIRECT_URL can be used as an alternative for
-# HORIZON_CONFIG.user_home, if user_home is not set.
-# Do not set it to '/home/', as this will cause circular redirect loop
-#LOGIN_REDIRECT_URL = WEBROOT
-
-# If horizon is running in production (DEBUG is False), set this
-# with the list of host/domain names that the application can serve.
-# For more information see:
-# https://docs.djangoproject.com/en/dev/ref/settings/#allowed-hosts
-ALLOWED_HOSTS = [ 'prx01', 'localhost', ]
-
-# Set SSL proxy settings:
-# Pass this header from the proxy after terminating the SSL,
-# and don't forget to strip it from the client's request.
-# For more information see:
-# https://docs.djangoproject.com/en/dev/ref/settings/#secure-proxy-ssl-header
-#SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https')
-
-# If Horizon is being served through SSL, then uncomment the following two
-# settings to better secure the cookies from security exploits
-#CSRF_COOKIE_SECURE = True
-#SESSION_COOKIE_SECURE = True
-
-# The absolute path to the directory where message files are collected.
-# The message file must have a .json file extension. When the user logins to
-# horizon, the message files collected are processed and displayed to the user.
-#MESSAGES_PATH=None
-
-# Overrides for OpenStack API versions. Use this setting to force the
-# OpenStack dashboard to use a specific API version for a given service API.
-# Versions specified here should be integers or floats, not strings.
-# NOTE: The version should be formatted as it appears in the URL for the
-# service API. For example, The identity service APIs have inconsistent
-# use of the decimal point, so valid options would be 2.0 or 3.
-# Minimum compute version to get the instance locked status is 2.9.
-#OPENSTACK_API_VERSIONS = {
-#    "data-processing": 1.1,
-#    "identity": 3,
-#    "image": 2,
-#    "volume": 2,
-#    "compute": 2,
-#}
-
-# Set this to True if running on a multi-domain model. When this is enabled, it
-# will require the user to enter the Domain name in addition to the username
-# for login.
-#OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT = False
-
-# Set this to True if you want available domains displayed as a dropdown menu
-# on the login screen. It is strongly advised NOT to enable this for public
-# clouds, as advertising enabled domains to unauthenticated customers
-# irresponsibly exposes private information. This should only be used for
-# private clouds where the dashboard sits behind a corporate firewall.
-#OPENSTACK_KEYSTONE_DOMAIN_DROPDOWN = False
-
-# If OPENSTACK_KEYSTONE_DOMAIN_DROPDOWN is enabled, this option can be used to
-# set the available domains to choose from. This is a list of pairs whose first
-# value is the domain name and the second is the display name.
-#OPENSTACK_KEYSTONE_DOMAIN_CHOICES = (
-#  ('Default', 'Default'),
-#)
-
-# Overrides the default domain used when running on single-domain model
-# with Keystone V3. All entities will be created in the default domain.
-# NOTE: This value must be the name of the default domain, NOT the ID.
-# Also, you will most likely have a value in the keystone policy file like this
-#    "cloud_admin": "rule:admin_required and domain_id:<your domain id>"
-# This value must be the name of the domain whose ID is specified there.
-#OPENSTACK_KEYSTONE_DEFAULT_DOMAIN = 'Default'
-
-# Set this to True to enable panels that provide the ability for users to
-# manage Identity Providers (IdPs) and establish a set of rules to map
-# federation protocol attributes to Identity API attributes.
-# This extension requires v3.0+ of the Identity API.
-#OPENSTACK_KEYSTONE_FEDERATION_MANAGEMENT = False
-
-# Set Console type:
-# valid options are "AUTO"(default), "VNC", "SPICE", "RDP", "SERIAL", "MKS"
-# or None. Set to None explicitly if you want to deactivate the console.
-#CONSOLE_TYPE = "AUTO"
-
-# Toggle showing the openrc file for Keystone V2.
-# If set to false the link will be removed from the user dropdown menu
-# and the API Access page
-#SHOW_KEYSTONE_V2_RC = True
-
-# If provided, a "Report Bug" link will be displayed in the site header
-# which links to the value of this setting (ideally a URL containing
-# information on how to report issues).
-#HORIZON_CONFIG["bug_url"] = "http://bug-report.example.com"
-
-# Show backdrop element outside the modal, do not close the modal
-# after clicking on backdrop.
-#HORIZON_CONFIG["modal_backdrop"] = "static"
-
-# Specify a regular expression to validate user passwords.
-#HORIZON_CONFIG["password_validator"] = {
-#    "regex": '.*',
-#    "help_text": _("Your password does not meet the requirements."),
-#}
-
-# Disable simplified floating IP address management for deployments with
-# multiple floating IP pools or complex network requirements.
-#HORIZON_CONFIG["simple_ip_management"] = False
-
-# Turn off browser autocompletion for forms including the login form and
-# the database creation workflow if so desired.
-#HORIZON_CONFIG["password_autocomplete"] = "off"
-
-# Setting this to True will disable the reveal button for password fields,
-# including on the login form.
-#HORIZON_CONFIG["disable_password_reveal"] = False
+from openstack_dashboard import exceptions
+
+HORIZON_CONFIG = {
+    'user_home': 'openstack_dashboard.views.get_user_home',
+    'ajax_queue_limit': 10,
+    'auto_fade_alerts': {
+        'delay': 3000,
+        'fade_duration': 1500,
+        'types': ['alert-success', 'alert-info']
+    },
+    'help_url': "http://docs.openstack.org",
+    'exceptions': {'recoverable': exceptions.RECOVERABLE,
+                   'not_found': exceptions.NOT_FOUND,
+                   'unauthorized': exceptions.UNAUTHORIZED},
+    'modal_backdrop': 'static',
+    'angular_modules': [],
+    'js_files': [],
+    'js_spec_files': [],
+    'disable_password_reveal': True,
+    'password_autocomplete': 'off'
+}
+# 'key', 'label', 'path'
+AVAILABLE_THEMES = [
+    (
+        "default",
+        pgettext_lazy("Default style theme", "Default"),
+        "themes/default"
+    ),
+    (
+        "material",
+        pgettext_lazy("Google's Material Design style theme", "Material"),
+        "themes/material"
+    ),
+]
+
+# The default theme if no cookie is present
+DEFAULT_THEME = 'default'
+
+# Theme Static Directory
+THEME_COLLECTION_DIR = 'themes'
+
+# Theme Cookie Name
+THEME_COOKIE_NAME = 'theme'
+
+INSTALLED_APPS = (
+    'openstack_dashboard',
+    'django.contrib.contenttypes',
+    'django.contrib.auth',
+    'django.contrib.sessions',
+    'django.contrib.messages',
+    'django.contrib.staticfiles',
+    'django.contrib.humanize',
+    'compressor',
+    'horizon',
+    'openstack_auth',
+)
+
+
+
+DEBUG = False
+
+TEMPLATE_DEBUG = DEBUG
+
+ALLOWED_HOSTS = ['*']
+
+AUTHENTICATION_URLS = ['openstack_auth.urls']
 
 LOCAL_PATH = os.path.dirname(os.path.abspath(__file__))
 
-# Set custom secret key:
-# You can either set it to a specific value or you can let horizon generate a
-# default secret key that is unique on this machine, e.i. regardless of the
-# amount of Python WSGI workers (if used behind Apache+mod_wsgi): However,
-# there may be situations where you would want to set this explicitly, e.g.
-# when multiple dashboard instances are distributed on different machines
-# (usually behind a load-balancer). Either you have to make sure that a session
-# gets all requests routed to the same dashboard instance or you set the same
-# SECRET_KEY for all of them.
-SECRET_KEY = secret_key.generate_or_read_from_file(
-    os.path.join("/","var","lib","openstack-dashboard","secret-key", '.secret_key_store'))
-
-# We recommend you use memcached for development; otherwise after every reload
-# of the django development server, you will have to login again. To use
-# memcached set CACHES to something like
-#CACHES = {
-#    'default': {
-#        'BACKEND': 'django.core.cache.backends.memcached.MemcachedCache',
-#        'LOCATION': '127.0.0.1:11211',
-#    },
-#}
+SECRET_KEY = 'opaesee8Que2yahJoh9fo0eefo1Aeyo6ahyei8zeiboh3aeth5loth7ieNa5xi5e'
 
 CACHES = {
     'default': {
-        'BACKEND': 'django.core.cache.backends.locmem.LocMemCache',
-    },
+        'BACKEND': 'django.core.cache.backends.memcached.MemcachedCache',
+        'LOCATION': "100.64.200.102:11211"
+    }
 }
 
 # Send email to the console by default
@@ -176,76 +86,249 @@
 #EMAIL_BACKEND = 'django.core.mail.backends.dummy.EmailBackend'
 
 # Configure these for your outgoing email host
-#EMAIL_HOST = 'smtp.my-company.com'
-#EMAIL_PORT = 25
-#EMAIL_HOST_USER = 'djangomail'
-#EMAIL_HOST_PASSWORD = 'top-secret!'
+# EMAIL_HOST = 'smtp.my-company.com'
+# EMAIL_PORT = 25
+# EMAIL_HOST_USER = 'djangomail'
+# EMAIL_HOST_PASSWORD = 'top-secret!'
+
+# The number of objects (Swift containers/objects or images) to display
+# on a single page before providing a paging element (a "more" link)
+# to paginate results.
+API_RESULT_LIMIT = 1000
+API_RESULT_PAGE_SIZE = 20
+
+# The timezone of the server. This should correspond with the timezone
+# of your entire OpenStack installation, and hopefully be in UTC.
+TIME_ZONE = "UTC"
+
+COMPRESS_OFFLINE = True
+
+# Trove user and database extension support. By default support for
+# creating users and databases on database instances is turned on.
+# To disable these extensions set the permission here to something
+# unusable such as ["!"].
+# TROVE_ADD_USER_PERMS = []
+# TROVE_ADD_DATABASE_PERMS = []
+
+SITE_BRANDING = 'OpenStack Dashboard'
+SESSION_COOKIE_HTTPONLY = True
+BOOT_ONLY_FROM_VOLUME = True
+
+REST_API_REQUIRED_SETTINGS = ['OPENSTACK_HYPERVISOR_FEATURES',
+                             'LAUNCH_INSTANCE_DEFAULTS',
+                             'OPENSTACK_IMAGE_FORMATS']
+
+
+# Specify a regular expression to validate user passwords.
+# HORIZON_CONFIG["password_validator"] = {
+#     "regex": '.*',
+#     "help_text": _("Your password does not meet the requirements.")
+# }
+
+# Turn off browser autocompletion for the login form if so desired.
+# HORIZON_CONFIG["password_autocomplete"] = "off"
+
+# The Horizon Policy Enforcement engine uses these values to load per service
+# policy rule files. The content of these files should match the files the
+# OpenStack services are using to determine role based access control in the
+# target installation.
+
+SESSION_TIMEOUT = 43200
+SESSION_ENGINE = "django.contrib.sessions.backends.cache"
+DROPDOWN_MAX_ITEMS = 30
+# A dictionary of settings which can be used to provide the default values for
+# properties found in the Launch Instance modal.
+
+# Path to directory containing policy.json files
+POLICY_FILES_PATH = "/usr/share/openstack-dashboard/openstack_dashboard/conf"
+# Map of local copy of service policy files
+POLICY_FILES = {
+    "compute": "nova_policy.json",
+    "network": "neutron_policy.json",
+    "image": "glance_policy.json",
+    "telemetry": "ceilometer_policy.json",
+    "volume": "cinder_policy.json",
+    "orchestration": "heat_policy.json",
+    "identity": "keystone_policy.json",
+}
+
+LOGGING = {
+    'version': 1,
+    # When set to True this will disable all logging except
+    # for loggers specified in this configuration dictionary. Note that
+    # if nothing is specified here and disable_existing_loggers is True,
+    # django.db.backends will still log unless it is disabled explicitly.
+    
+    'disable_existing_loggers': False,
+    'handlers': {
+        'null': {
+            'level': 'DEBUG',
+            'class': 'logging.NullHandler',
+        },
+        'console': {
+            # Set the level to "DEBUG" for verbose output logging.
+            'level': 'INFO',
+            'class': 'logging.StreamHandler',
+        },
+        'file': {
+            'level': 'DEBUG',
+            'class': 'logging.FileHandler',
+            'filename': '/var/log/horizon/horizon.log',
+        },
+    },
+    'loggers': {
+        # Logging from django.db.backends is VERY verbose, send to null
+        # by default.
+        'django.db.backends': {
+            'handlers': ['null'],
+            'propagate': False,
+        },
+        # DEBUG level for django.template starting Pike has some false positive traces, set it to INFO
+        # by default. Caused by bug PROD-17558.
+        'django.template': {
+            'handlers': ['file'],
+            'level': 'INFO',
+            'propagate': True,
+        },
+        'requests': {
+            'handlers': ['null'],
+            'propagate': False,
+        },
+        'horizon': {
+            'handlers': ['file'],
+            'level': 'DEBUG',
+            'propagate': False,
+        },
+        'openstack_dashboard': {
+            'handlers': ['file'],
+            'level': 'DEBUG',
+            'propagate': False,
+        },
+        'novaclient': {
+            'handlers': ['file'],
+            'level': 'DEBUG',
+            'propagate': False,
+        },
+        'cinderclient': {
+            'handlers': ['file'],
+            'level': 'DEBUG',
+            'propagate': False,
+        },
+        'keystoneclient': {
+            'handlers': ['file'],
+            'level': 'DEBUG',
+            'propagate': False,
+        },
+        'glanceclient': {
+            'handlers': ['file'],
+            'level': 'DEBUG',
+            'propagate': False,
+        },
+        'neutronclient': {
+            'handlers': ['file'],
+            'level': 'DEBUG',
+            'propagate': False,
+        },
+        'heatclient': {
+            'handlers': ['file'],
+            'level': 'DEBUG',
+            'propagate': False,
+        },
+        'ceilometerclient': {
+            'handlers': ['file'],
+            'level': 'DEBUG',
+            'propagate': False,
+        },
+        'troveclient': {
+            'handlers': ['file'],
+            'level': 'DEBUG',
+            'propagate': False,
+        },
+        'mistralclient': {
+            'handlers': ['file'],
+            'level': 'DEBUG',
+            'propagate': False,
+        },
+        'swiftclient': {
+            'handlers': ['file'],
+            'level': 'DEBUG',
+            'propagate': False,
+        },
+        'openstack_auth': {
+            'handlers': ['file'],
+            'level': 'DEBUG',
+            'propagate': False,
+        },
+        'scss.expression': {
+            'handlers': ['file'],
+            'level': 'DEBUG',
+            'propagate': False,
+        },
+        'nose.plugins.manager': {
+            'handlers': ['file'],
+            'level': 'DEBUG',
+            'propagate': False,
+        },
+        'django': {
+            'handlers': ['file'],
+            'level': 'DEBUG',
+            'propagate': False,
+        },
+        'iso8601': {
+            'handlers': ['null'],
+            'propagate': False,
+        },
+    }
+}
+
+
+# Overrides for OpenStack API versions. Use this setting to force the
+# OpenStack dashboard to use a specfic API version for a given service API.
+# NOTE: The version should be formatted as it appears in the URL for the
+# service API. For example, The identity service APIs have inconsistent
+# use of the decimal point, so valid options would be "2.0" or "3".
+OPENSTACK_API_VERSIONS = {
+    "identity": 3
+}
+# Set this to True if running on multi-domain model. When this is enabled, it
+# will require user to enter the Domain name in addition to username for login.
+# OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT = False
+
+# Overrides the default domain used when running on single-domain model
+# with Keystone V3. All entities will be created in the default domain.
+# OPENSTACK_KEYSTONE_DEFAULT_DOMAIN = 'Default'
 
 # For multiple regions uncomment this configuration, and add (endpoint, title).
-#AVAILABLE_REGIONS = [
-#    ('http://cluster1.example.com:5000/v3', 'cluster1'),
-#    ('http://cluster2.example.com:5000/v3', 'cluster2'),
-#]
-
-OPENSTACK_HOST = "127.0.0.1"
+# AVAILABLE_REGIONS = [
+#     ('http://cluster1.example.com:5000/v2.0', 'cluster1'),
+#     ('http://cluster2.example.com:5000/v2.0', 'cluster2'),
+# ]
+
+
+OPENSTACK_HOST = "192.168.10.35"
 OPENSTACK_KEYSTONE_URL = "http://%s:5000/v3" % OPENSTACK_HOST
-OPENSTACK_KEYSTONE_DEFAULT_ROLE = "_member_"
-
-# For setting the default service region on a per-endpoint basis. Note that the
-# default value for this setting is {}, and below is just an example of how it
-# should be specified.
-#DEFAULT_SERVICE_REGIONS = {
-#    OPENSTACK_KEYSTONE_URL: 'RegionOne'
-#}
-
-# Enables keystone web single-sign-on if set to True.
-#WEBSSO_ENABLED = False
-
-# Authentication mechanism to be selected as default.
-# The value must be a key from WEBSSO_CHOICES.
-#WEBSSO_INITIAL_CHOICE = "credentials"
-
-# The list of authentication mechanisms which include keystone
-# federation protocols and identity provider/federation protocol
-# mapping keys (WEBSSO_IDP_MAPPING). Current supported protocol
-# IDs are 'saml2' and 'oidc'  which represent SAML 2.0, OpenID
-# Connect respectively.
-# Do not remove the mandatory credentials mechanism.
-# Note: The last two tuples are sample mapping keys to a identity provider
-# and federation protocol combination (WEBSSO_IDP_MAPPING).
-#WEBSSO_CHOICES = (
-#    ("credentials", _("Keystone Credentials")),
-#    ("oidc", _("OpenID Connect")),
-#    ("saml2", _("Security Assertion Markup Language")),
-#    ("acme_oidc", "ACME - OpenID Connect"),
-#    ("acme_saml2", "ACME - SAML2"),
-#)
-
-# A dictionary of specific identity provider and federation protocol
-# combinations. From the selected authentication mechanism, the value
-# will be looked up as keys in the dictionary. If a match is found,
-# it will redirect the user to a identity provider and federation protocol
-# specific WebSSO endpoint in keystone, otherwise it will use the value
-# as the protocol_id when redirecting to the WebSSO by protocol endpoint.
-# NOTE: The value is expected to be a tuple formatted as: (<idp_id>, <protocol_id>).
-#WEBSSO_IDP_MAPPING = {
-#    "acme_oidc": ("acme", "oidc"),
-#    "acme_saml2": ("acme", "saml2"),
-#}
-
-# The Keystone Provider drop down uses Keystone to Keystone federation
-# to switch between Keystone service providers.
-# Set display name for Identity Provider (dropdown display name)
-#KEYSTONE_PROVIDER_IDP_NAME = "Local Keystone"
-# This id is used for only for comparison with the service provider IDs. This ID
-# should not match any service provider IDs.
-#KEYSTONE_PROVIDER_IDP_ID = "localkeystone"
+
+OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT = False
+OPENSTACK_KEYSTONE_DEFAULT_DOMAIN = "default"
+
+OPENSTACK_KEYSTONE_DEFAULT_ROLE = "Member"
 
 # Disable SSL certificate checks (useful for self-signed certificates):
-#OPENSTACK_SSL_NO_VERIFY = True
 
 # The CA certificate to use to verify SSL connections
-#OPENSTACK_SSL_CACERT = '/path/to/cacert.pem'
+# OPENSTACK_SSL_CACERT = '/path/to/cacert.pem'
+
+# OPENSTACK_ENDPOINT_TYPE specifies the endpoint type to use for the endpoints
+# in the Keystone service catalog. Use this setting when Horizon is running
+# external to the OpenStack environment. The default is 'publicURL'.
+OPENSTACK_ENDPOINT_TYPE = "internalURL"
+
+# SECONDARY_ENDPOINT_TYPE specifies the fallback endpoint type to use in the
+# case that OPENSTACK_ENDPOINT_TYPE is not present in the endpoints
+# in the Keystone service catalog. Use this setting when Horizon is running
+# external to the OpenStack environment. The default is None.  This
+# value should differ from OPENSTACK_ENDPOINT_TYPE if used.
+#SECONDARY_ENDPOINT_TYPE = "publicURL"
 
 # The OPENSTACK_KEYSTONE_BACKEND settings can be used to identify the
 # capabilities of the auth backend for Keystone.
@@ -259,43 +342,13 @@
     'can_edit_group': True,
     'can_edit_project': True,
     'can_edit_domain': True,
-    'can_edit_role': True,
-}
-
-# Setting this to True, will add a new "Retrieve Password" action on instance,
-# allowing Admin session password retrieval/decryption.
-#OPENSTACK_ENABLE_PASSWORD_RETRIEVE = False
-
-# This setting allows deployers to control whether a token is deleted on log
-# out. This can be helpful when there are often long running processes being
-# run in the Horizon environment.
-#TOKEN_DELETION_DISABLED = False
-
-# The Launch Instance user experience has been significantly enhanced.
-# You can choose whether to enable the new launch instance experience,
-# the legacy experience, or both. The legacy experience will be removed
-# in a future release, but is available as a temporary backup setting to ensure
-# compatibility with existing deployments. Further development will not be
-# done on the legacy experience. Please report any problems with the new
-# experience via the Launchpad tracking system.
-#
-# Toggle LAUNCH_INSTANCE_LEGACY_ENABLED and LAUNCH_INSTANCE_NG_ENABLED to
-# determine the experience to enable.  Set them both to true to enable
-# both.
-#LAUNCH_INSTANCE_LEGACY_ENABLED = True
-#LAUNCH_INSTANCE_NG_ENABLED = False
-
-# A dictionary of settings which can be used to provide the default values for
-# properties found in the Launch Instance modal.
-#LAUNCH_INSTANCE_DEFAULTS = {
-#    'config_drive': False,
-#    'enable_scheduler_hints': True,
-#    'disable_image': False,
-#    'disable_instance_snapshot': False,
-#    'disable_volume': False,
-#    'disable_volume_snapshot': False,
-#    'create_volume': True,
-#}
+    'can_edit_role': True
+}
+
+
+# Set Console type:
+# valid options would be "AUTO", "VNC" or "SPICE"
+# CONSOLE_TYPE = "AUTO"
 
 # The Xen Hypervisor has the ability to set the mount point for volumes
 # attached to instances (other Hypervisors currently do not). Setting
@@ -304,102 +357,52 @@
 OPENSTACK_HYPERVISOR_FEATURES = {
     'can_set_mount_point': False,
     'can_set_password': False,
-    'requires_keypair': False,
-    'enable_quotas': True
-}
-
-# This settings controls whether IP addresses of servers are retrieved from
-# neutron in the project instance table. Setting this to ``False`` may mitigate
-# a performance issue in the project instance table in large deployments.
-#OPENSTACK_INSTANCE_RETRIEVE_IP_ADDRESSES = True
-
-# The OPENSTACK_CINDER_FEATURES settings can be used to enable optional
-# services provided by cinder that is not exposed by its extension API.
-OPENSTACK_CINDER_FEATURES = {
-    'enable_backup': False,
-}
-
-# The OPENSTACK_NEUTRON_NETWORK settings can be used to enable optional
-# services provided by neutron. Options currently available are load
-# balancer service, security groups, quotas, VPN service.
-OPENSTACK_NEUTRON_NETWORK = {
-    'enable_router': True,
-    'enable_quotas': True,
-    'enable_ipv6': True,
-    'enable_distributed_router': False,
-    'enable_ha_router': False,
-    'enable_fip_topology_check': True,
-
-    # Default dns servers you would like to use when a subnet is
-    # created.  This is only a default, users can still choose a different
-    # list of dns servers when creating a new subnet.
-    # The entries below are examples only, and are not appropriate for
-    # real deployments
-    # 'default_dns_nameservers': ["8.8.8.8", "8.8.4.4", "208.67.222.222"],
-
-    # Set which provider network types are supported. Only the network types
-    # in this list will be available to choose from when creating a network.
-    # Network types include local, flat, vlan, gre, vxlan and geneve.
-    # 'supported_provider_types': ['*'],
-
-    # You can configure available segmentation ID range per network type
-    # in your deployment.
-    # 'segmentation_id_range': {
-    #     'vlan': [1024, 2048],
-    #     'vxlan': [4094, 65536],
-    # },
-
-    # You can define additional provider network types here.
-    # 'extra_provider_types': {
-    #     'awesome_type': {
-    #         'display_name': 'Awesome New Type',
-    #         'require_physical_network': False,
-    #         'require_segmentation_id': True,
-    #     }
-    # },
-
-    # Set which VNIC types are supported for port binding. Only the VNIC
-    # types in this list will be available to choose from when creating a
-    # port.
-    # VNIC types include 'normal', 'direct', 'direct-physical', 'macvtap',
-    # 'baremetal' and 'virtio-forwarder'
-    # Set to empty list or None to disable VNIC type selection.
-    'supported_vnic_types': ['*'],
-
-    # Set list of available physical networks to be selected in the physical
-    # network field on the admin create network modal. If it's set to an empty
-    # list, the field will be a regular input field.
-    # e.g. ['default', 'test']
-    'physical_networks': [],
-
-}
-
-# The OPENSTACK_HEAT_STACK settings can be used to disable password
-# field required while launching the stack.
-OPENSTACK_HEAT_STACK = {
-    'enable_user_pass': True,
-}
+}
+
+# When set, enables the instance action "Retrieve password"
+# allowing password retrieval
+OPENSTACK_ENABLE_PASSWORD_RETRIEVE = False
+
+# When launching an instance, the menu of available flavors is
+# sorted by RAM usage, ascending.  Provide a callback method here
+# (and/or a flag for reverse sort) for the sorted() method if you'd
+# like a different behaviour.  For more info, see
+# http://docs.python.org/2/library/functions.html#sorted
+# CREATE_INSTANCE_FLAVOR_SORT = {
+#     'key': my_awesome_callback_method,
+#     'reverse': False,
+# }
+
+FLAVOR_EXTRA_KEYS = {
+    'flavor_keys': [
+        ('quota:read_bytes_sec', _('Quota: Read bytes')),
+        ('quota:write_bytes_sec', _('Quota: Write bytes')),
+        ('quota:cpu_quota', _('Quota: CPU')),
+        ('quota:cpu_period', _('Quota: CPU period')),
+        ('quota:inbound_average', _('Quota: Inbound average')),
+        ('quota:outbound_average', _('Quota: Outbound average')),
+    ]
+}
+
 
 # The OPENSTACK_IMAGE_BACKEND settings can be used to customize features
 # in the OpenStack Dashboard related to the Image service, such as the list
 # of supported image formats.
-#OPENSTACK_IMAGE_BACKEND = {
-#    'image_formats': [
-#        ('', _('Select format')),
-#        ('aki', _('AKI - Amazon Kernel Image')),
-#        ('ami', _('AMI - Amazon Machine Image')),
-#        ('ari', _('ARI - Amazon Ramdisk Image')),
-#        ('docker', _('Docker')),
-#        ('iso', _('ISO - Optical Disk Image')),
-#        ('ova', _('OVA - Open Virtual Appliance')),
-#        ('qcow2', _('QCOW2 - QEMU Emulator')),
-#        ('raw', _('Raw')),
-#        ('vdi', _('VDI - Virtual Disk Image')),
-#        ('vhd', _('VHD - Virtual Hard Disk')),
-#        ('vhdx', _('VHDX - Large Virtual Hard Disk')),
-#        ('vmdk', _('VMDK - Virtual Machine Disk')),
-#    ],
-#}
+OPENSTACK_IMAGE_BACKEND = {
+    'image_formats': [
+        ('', ''),
+        ('aki', _('AKI - Amazon Kernel Image')),
+        ('ami', _('AMI - Amazon Machine Image')),
+        ('ari', _('ARI - Amazon Ramdisk Image')),
+        ('iso', _('ISO - Optical Disk Image')),
+        ('qcow2', _('QCOW2 - QEMU Emulator')),
+        ('raw', _('Raw')),
+        ('vdi', _('VDI')),
+        ('vhd', _('VHD')),
+        ('vmdk', _('VMDK')),
+        ('docker', _('Docker Container'))
+    ]
+}
 
 # The IMAGE_CUSTOM_PROPERTY_TITLES settings is used to customize the titles for
 # image custom property attributes that appear on image detail pages.
@@ -409,285 +412,53 @@
     "ramdisk_id": _("Ramdisk ID"),
     "image_state": _("Euca2ools state"),
     "project_id": _("Project ID"),
-    "image_type": _("Image Type"),
-}
-
-# The IMAGE_RESERVED_CUSTOM_PROPERTIES setting is used to specify which image
-# custom properties should not be displayed in the Image Custom Properties
-# table.
-IMAGE_RESERVED_CUSTOM_PROPERTIES = []
-
-# Set to 'legacy' or 'direct' to allow users to upload images to glance via
-# Horizon server. When enabled, a file form field will appear on the create
-# image form. If set to 'off', there will be no file form field on the create
-# image form. See documentation for deployment considerations.
-#HORIZON_IMAGES_UPLOAD_MODE = 'legacy'
-
-# Allow a location to be set when creating or updating Glance images.
-# If using Glance V2, this value should be False unless the Glance
-# configuration and policies allow setting locations.
-#IMAGES_ALLOW_LOCATION = False
-
-# A dictionary of default settings for create image modal.
-#CREATE_IMAGE_DEFAULTS = {
-#    'image_visibility': "public",
-#}
-
-# OPENSTACK_ENDPOINT_TYPE specifies the endpoint type to use for the endpoints
-# in the Keystone service catalog. Use this setting when Horizon is running
-# external to the OpenStack environment. The default is 'publicURL'.
-#OPENSTACK_ENDPOINT_TYPE = "publicURL"
-
-# SECONDARY_ENDPOINT_TYPE specifies the fallback endpoint type to use in the
-# case that OPENSTACK_ENDPOINT_TYPE is not present in the endpoints
-# in the Keystone service catalog. Use this setting when Horizon is running
-# external to the OpenStack environment. The default is None. This
-# value should differ from OPENSTACK_ENDPOINT_TYPE if used.
-#SECONDARY_ENDPOINT_TYPE = None
-
-# The number of objects (Swift containers/objects or images) to display
-# on a single page before providing a paging element (a "more" link)
-# to paginate results.
-API_RESULT_LIMIT = 1000
-API_RESULT_PAGE_SIZE = 20
-
-# The size of chunk in bytes for downloading objects from Swift
-SWIFT_FILE_TRANSFER_CHUNK_SIZE = 512 * 1024
-
-# The default number of lines displayed for instance console log.
-INSTANCE_LOG_LENGTH = 35
-
-# Specify a maximum number of items to display in a dropdown.
-DROPDOWN_MAX_ITEMS = 30
-
-# The timezone of the server. This should correspond with the timezone
-# of your entire OpenStack installation, and hopefully be in UTC.
-TIME_ZONE = "UTC"
-
-# When launching an instance, the menu of available flavors is
-# sorted by RAM usage, ascending. If you would like a different sort order,
-# you can provide another flavor attribute as sorting key. Alternatively, you
-# can provide a custom callback method to use for sorting. You can also provide
-# a flag for reverse sort. For more info, see
-# http://docs.python.org/2/library/functions.html#sorted
-#CREATE_INSTANCE_FLAVOR_SORT = {
-#    'key': 'name',
-#     # or
-#    'key': my_awesome_callback_method,
-#    'reverse': False,
-#}
-
-# Set this to True to display an 'Admin Password' field on the Change Password
-# form to verify that it is indeed the admin logged-in who wants to change
-# the password.
-#ENFORCE_PASSWORD_CHECK = False
-
-# Modules that provide /auth routes that can be used to handle different types
-# of user authentication. Add auth plugins that require extra route handling to
-# this list.
-#AUTHENTICATION_URLS = [
-#    'openstack_auth.urls',
-#]
-
-# The Horizon Policy Enforcement engine uses these values to load per service
-# policy rule files. The content of these files should match the files the
-# OpenStack services are using to determine role based access control in the
-# target installation.
-
-# Path to directory containing policy.json files
-#POLICY_FILES_PATH = os.path.join(ROOT_PATH, "conf")
-
-# Map of local copy of service policy files.
-# Please insure that your identity policy file matches the one being used on
-# your keystone servers. There is an alternate policy file that may be used
-# in the Keystone v3 multi-domain case, policy.v3cloudsample.json.
-# This file is not included in the Horizon repository by default but can be
-# found at
-# http://git.openstack.org/cgit/openstack/keystone/tree/etc/ \
-# policy.v3cloudsample.json
-# Having matching policy files on the Horizon and Keystone servers is essential
-# for normal operation. This holds true for all services and their policy files.
-#POLICY_FILES = {
-#    'identity': 'keystone_policy.json',
-#    'compute': 'nova_policy.json',
-#    'volume': 'cinder_policy.json',
-#    'image': 'glance_policy.json',
-#    'network': 'neutron_policy.json',
-#}
-
-# TODO: (david-lyle) remove when plugins support adding settings.
-# Note: Only used when trove-dashboard plugin is configured to be used by
-# Horizon.
-# Trove user and database extension support. By default support for
-# creating users and databases on database instances is turned on.
-# To disable these extensions set the permission here to something
-# unusable such as ["!"].
-#TROVE_ADD_USER_PERMS = []
-#TROVE_ADD_DATABASE_PERMS = []
-
-# Change this patch to the appropriate list of tuples containing
-# a key, label and static directory containing two files:
-# _variables.scss and _styles.scss
-#AVAILABLE_THEMES = [
-#    ('default', 'Default', 'themes/default'),
-#    ('material', 'Material', 'themes/material'),
-#]
-
-LOGGING = {
-    'version': 1,
-    # When set to True this will disable all logging except
-    # for loggers specified in this configuration dictionary. Note that
-    # if nothing is specified here and disable_existing_loggers is True,
-    # django.db.backends will still log unless it is disabled explicitly.
-    'disable_existing_loggers': False,
-    # If apache2 mod_wsgi is used to deploy OpenStack dashboard
-    # timestamp is output by mod_wsgi. If WSGI framework you use does not
-    # output timestamp for logging, add %(asctime)s in the following
-    # format definitions.
-    'formatters': {
-        'console': {
-            'format': '%(levelname)s %(name)s %(message)s'
-        },
-        'operation': {
-            # The format of "%(message)s" is defined by
-            # OPERATION_LOG_OPTIONS['format']
-            'format': '%(message)s'
-        },
-    },
-    'handlers': {
-        'null': {
-            'level': 'DEBUG',
-            'class': 'logging.NullHandler',
-        },
-        'console': {
-            # Set the level to "DEBUG" for verbose output logging.
-            'level': 'INFO',
-            'class': 'logging.StreamHandler',
-            'formatter': 'console',
-        },
-        'operation': {
-            'level': 'INFO',
-            'class': 'logging.StreamHandler',
-            'formatter': 'operation',
-        },
-    },
-    'loggers': {
-        'horizon': {
-            'handlers': ['console'],
-            'level': 'DEBUG',
-            'propagate': False,
-        },
-        'horizon.operation_log': {
-            'handlers': ['operation'],
-            'level': 'INFO',
-            'propagate': False,
-        },
-        'openstack_dashboard': {
-            'handlers': ['console'],
-            'level': 'DEBUG',
-            'propagate': False,
-        },
-        'novaclient': {
-            'handlers': ['console'],
-            'level': 'DEBUG',
-            'propagate': False,
-        },
-        'cinderclient': {
-            'handlers': ['console'],
-            'level': 'DEBUG',
-            'propagate': False,
-        },
-        'keystoneauth': {
-            'handlers': ['console'],
-            'level': 'DEBUG',
-            'propagate': False,
-        },
-        'keystoneclient': {
-            'handlers': ['console'],
-            'level': 'DEBUG',
-            'propagate': False,
-        },
-        'glanceclient': {
-            'handlers': ['console'],
-            'level': 'DEBUG',
-            'propagate': False,
-        },
-        'neutronclient': {
-            'handlers': ['console'],
-            'level': 'DEBUG',
-            'propagate': False,
-        },
-        'swiftclient': {
-            'handlers': ['console'],
-            'level': 'DEBUG',
-            'propagate': False,
-        },
-        'oslo_policy': {
-            'handlers': ['console'],
-            'level': 'DEBUG',
-            'propagate': False,
-        },
-        'openstack_auth': {
-            'handlers': ['console'],
-            'level': 'DEBUG',
-            'propagate': False,
-        },
-        'nose.plugins.manager': {
-            'handlers': ['console'],
-            'level': 'DEBUG',
-            'propagate': False,
-        },
-        'django': {
-            'handlers': ['console'],
-            'level': 'DEBUG',
-            'propagate': False,
-        },
-        # Logging from django.db.backends is VERY verbose, send to null
-        # by default.
-        'django.db.backends': {
-            'handlers': ['null'],
-            'propagate': False,
-        },
-        'requests': {
-            'handlers': ['null'],
-            'propagate': False,
-        },
-        'urllib3': {
-            'handlers': ['null'],
-            'propagate': False,
-        },
-        'chardet.charsetprober': {
-            'handlers': ['null'],
-            'propagate': False,
-        },
-        'iso8601': {
-            'handlers': ['null'],
-            'propagate': False,
-        },
-        'scss': {
-            'handlers': ['null'],
-            'propagate': False,
-        },
-    },
+    "image_type": _("Image Type")
+}
+
+HORIZON_IMAGES_UPLOAD_MODE = "legacy"
+IMAGES_ALLOW_LOCATION = True
+
+
+# Disable simplified floating IP address management for deployments with
+# multiple floating IP pools or complex network requirements.
+# HORIZON_CONFIG["simple_ip_management"] = False
+
+# The OPENSTACK_NEUTRON_NETWORK settings can be used to enable optional
+# services provided by neutron. Options currenly available are load
+# balancer service, security groups, quotas, VPN service.
+
+OPENSTACK_NEUTRON_NETWORK = {
+    'enable_lb': True,
+    'enable_firewall': False,
+    'enable_quotas': True,
+    'enable_security_group': True,
+    'enable_vpn': False,
+    # The profile_support option is used to detect if an externa lrouter can be
+    # configured via the dashboard. When using specific plugins the
+    # profile_support can be turned on if needed.
+    'profile_support': None,
+    'enable_fip_topology_check': True,
+
+    #'profile_support': 'cisco',
 }
 
 # 'direction' should not be specified for all_tcp/udp/icmp.
 # It is specified in the form.
 SECURITY_GROUP_RULES = {
     'all_tcp': {
-        'name': _('All TCP'),
+        'name': 'ALL TCP',
         'ip_protocol': 'tcp',
         'from_port': '1',
         'to_port': '65535',
     },
     'all_udp': {
-        'name': _('All UDP'),
+        'name': 'ALL UDP',
         'ip_protocol': 'udp',
         'from_port': '1',
         'to_port': '65535',
     },
     'all_icmp': {
-        'name': _('All ICMP'),
+        'name': 'ALL ICMP',
         'ip_protocol': 'icmp',
         'from_port': '-1',
         'to_port': '-1',
@@ -778,144 +549,12 @@
     },
 }
 
-# Deprecation Notice:
-#
-# The setting FLAVOR_EXTRA_KEYS has been deprecated.
-# Please load extra spec metadata into the Glance Metadata Definition Catalog.
-#
-# The sample quota definitions can be found in:
-# <glance_source>/etc/metadefs/compute-quota.json
-#
-# The metadata definition catalog supports CLI and API:
-#  $glance --os-image-api-version 2 help md-namespace-import
-#  $glance-manage db_load_metadefs <directory_with_definition_files>
-#
-# See Metadata Definitions on: http://docs.openstack.org/developer/glance/
-
-# TODO: (david-lyle) remove when plugins support settings natively
-# Note: This is only used when the Sahara plugin is configured and enabled
-# for use in Horizon.
-# Indicate to the Sahara data processing service whether or not
-# automatic floating IP allocation is in effect.  If it is not
-# in effect, the user will be prompted to choose a floating IP
-# pool for use in their cluster.  False by default.  You would want
-# to set this to True if you were running Nova Networking with
-# auto_assign_floating_ip = True.
-#SAHARA_AUTO_IP_ALLOCATION_ENABLED = False
-
-# The hash algorithm to use for authentication tokens. This must
-# match the hash algorithm that the identity server and the
-# auth_token middleware are using. Allowed values are the
-# algorithms supported by Python's hashlib library.
-#OPENSTACK_TOKEN_HASH_ALGORITHM = 'md5'
-
-# AngularJS requires some settings to be made available to
-# the client side. Some settings are required by in-tree / built-in horizon
-# features. These settings must be added to REST_API_REQUIRED_SETTINGS in the
-# form of ['SETTING_1','SETTING_2'], etc.
-#
-# You may remove settings from this list for security purposes, but do so at
-# the risk of breaking a built-in horizon feature. These settings are required
-# for horizon to function properly. Only remove them if you know what you
-# are doing. These settings may in the future be moved to be defined within
-# the enabled panel configuration.
-# You should not add settings to this list for out of tree extensions.
-# See: https://wiki.openstack.org/wiki/Horizon/RESTAPI
-REST_API_REQUIRED_SETTINGS = ['OPENSTACK_HYPERVISOR_FEATURES',
-                              'LAUNCH_INSTANCE_DEFAULTS',
-                              'OPENSTACK_IMAGE_FORMATS',
-                              'OPENSTACK_KEYSTONE_DEFAULT_DOMAIN',
-                              'CREATE_IMAGE_DEFAULTS',
-                              'ENFORCE_PASSWORD_CHECK']
-
-# Additional settings can be made available to the client side for
-# extensibility by specifying them in REST_API_ADDITIONAL_SETTINGS
-# !! Please use extreme caution as the settings are transferred via HTTP/S
-# and are not encrypted on the browser. This is an experimental API and
-# may be deprecated in the future without notice.
-#REST_API_ADDITIONAL_SETTINGS = []
-
-# DISALLOW_IFRAME_EMBED can be used to prevent Horizon from being embedded
-# within an iframe. Legacy browsers are still vulnerable to a Cross-Frame
-# Scripting (XFS) vulnerability, so this option allows extra security hardening
-# where iframes are not used in deployment. Default setting is True.
-# For more information see:
-# http://tinyurl.com/anticlickjack
-#DISALLOW_IFRAME_EMBED = True
-
-# Help URL can be made available for the client. To provide a help URL, edit the
-# following attribute to the URL of your choice.
-#HORIZON_CONFIG["help_url"] = "http://openstack.mycompany.org"
-
-# Settings for OperationLogMiddleware
-# OPERATION_LOG_ENABLED is flag to use the function to log an operation on
-# Horizon.
-# mask_targets is arrangement for appointing a target to mask.
-# method_targets is arrangement of HTTP method to output log.
-# format is the log contents.
-#OPERATION_LOG_ENABLED = False
-#OPERATION_LOG_OPTIONS = {
-#    'mask_fields': ['password'],
-#    'target_methods': ['POST'],
-#    'ignored_urls': ['/js/', '/static/', '^/api/'],
-#    'format': ("[%(client_ip)s] [%(domain_name)s]"
-#        " [%(domain_id)s] [%(project_name)s]"
-#        " [%(project_id)s] [%(user_name)s] [%(user_id)s] [%(request_scheme)s]"
-#        " [%(referer_url)s] [%(request_url)s] [%(message)s] [%(method)s]"
-#        " [%(http_status)s] [%(param)s]"),
-#}
-
-# The default date range in the Overview panel meters - either <today> minus N
-# days (if the value is integer N), or from the beginning of the current month
-# until today (if set to None). This setting should be used to limit the amount
-# of data fetched by default when rendering the Overview panel.
-#OVERVIEW_DAYS_RANGE = 1
-
-# To allow operators to require users provide a search criteria first
-# before loading any data into the views, set the following dict
-# attributes to True in each one of the panels you want to enable this feature.
-# Follow the convention <dashboard>.<view>
-#FILTER_DATA_FIRST = {
-#    'admin.instances': False,
-#    'admin.images': False,
-#    'admin.networks': False,
-#    'admin.routers': False,
-#    'admin.volumes': False,
-#    'identity.users': False,
-#    'identity.projects': False,
-#    'identity.groups': False,
-#    'identity.roles': False
-#}
-
-# Dict used to restrict user private subnet cidr range.
-# An empty list means that user input will not be restricted
-# for a corresponding IP version. By default, there is
-# no restriction for IPv4 or IPv6. To restrict
-# user private subnet cidr range set ALLOWED_PRIVATE_SUBNET_CIDR
-# to something like
-#ALLOWED_PRIVATE_SUBNET_CIDR = {
-#    'ipv4': ['10.0.0.0/8', '192.168.0.0/16'],
-#    'ipv6': ['fc00::/7']
-#}
-ALLOWED_PRIVATE_SUBNET_CIDR = {'ipv4': [], 'ipv6': []}
-
-# Projects and users can have extra attributes as defined by keystone v3.
-# Horizon has the ability to display these extra attributes via this setting.
-# If you'd like to display extra data in the project or user tables, set the
-# corresponding dict key to the attribute name, followed by the display name.
-# For more information, see horizon's customization (http://docs.openstack.org/developer/horizon/topics/customizing.html#horizon-customization-module-overrides)
-#PROJECT_TABLE_EXTRA_INFO = {
-#   'phone_num': _('Phone Number'),
-#}
-#USER_TABLE_EXTRA_INFO = {
-#   'phone_num': _('Phone Number'),
-#}
-
-# Password will have an expiration date when using keystone v3 and enabling the
-# feature.
-# This setting allows you to set the number of days that the user will be alerted
-# prior to the password expiration.
-# Once the password expires keystone will deny the access and users must
-# contact an admin to change their password.
-#PASSWORD_EXPIRES_WARNING_THRESHOLD_DAYS = 0
-COMPRESS_OFFLINE=True
+
+
+
+
+
+USE_SSL = True
+CSRF_COOKIE_SECURE = True
+CSRF_COOKIE_SECURE = True
+SESSION_COOKIE_HTTPONLY = True

2018-09-07 22:30:31,755 [salt.state       :905 ][INFO    ][7029] Loading fresh modules for state activity
2018-09-07 22:30:31,831 [salt.state       :1941][INFO    ][7029] Completed state [/etc/openstack-dashboard/local_settings.py] at time 22:30:31.831852 duration_in_ms=608.426
2018-09-07 22:30:31,837 [salt.state       :1770][INFO    ][7029] Running state [/usr/share/openstack-dashboard/openstack_dashboard/conf/nova_policy.json] at time 22:30:31.837148
2018-09-07 22:30:31,838 [salt.state       :1803][INFO    ][7029] Executing state file.managed for [/usr/share/openstack-dashboard/openstack_dashboard/conf/nova_policy.json]
2018-09-07 22:30:31,897 [salt.fileclient  :1215][INFO    ][7029] Fetching file from saltenv 'base', ** done ** 'horizon/files/policy/queens/nova_policy.json'
2018-09-07 22:30:31,902 [salt.state       :290 ][INFO    ][7029] File changed:
--- 
+++ 
@@ -1,174 +1,500 @@
 {
-    "context_is_admin": "role:admin",
-    "admin_or_owner": "is_admin:True or project_id:%(project_id)s",
+    "context_is_admin":  "role:admin",
+    "admin_or_owner":  "is_admin:True or project_id:%(project_id)s",
+    "default": "rule:admin_or_owner",
+
+    "cells_scheduler_filter:TargetCellFilter": "is_admin:True",
+
+    "compute:create": "rule:admin_or_owner",
+    "compute:create:attach_network": "rule:admin_or_owner",
+    "compute:create:attach_volume": "rule:admin_or_owner",
+    "compute:create:forced_host": "is_admin:True",
+
+    "compute:get": "rule:admin_or_owner",
+    "compute:get_all": "rule:admin_or_owner",
+    "compute:get_all_tenants": "is_admin:True",
+
+    "compute:update": "rule:admin_or_owner",
+
+    "compute:get_instance_metadata": "rule:admin_or_owner",
+    "compute:get_all_instance_metadata": "rule:admin_or_owner",
+    "compute:get_all_instance_system_metadata": "rule:admin_or_owner",
+    "compute:update_instance_metadata": "rule:admin_or_owner",
+    "compute:delete_instance_metadata": "rule:admin_or_owner",
+
+    "compute:get_diagnostics": "rule:admin_or_owner",
+    "compute:get_instance_diagnostics": "rule:admin_or_owner",
+
+    "compute:start": "rule:admin_or_owner",
+    "compute:stop": "rule:admin_or_owner",
+
+    "compute:lock": "rule:admin_or_owner",
+    "compute:unlock": "rule:admin_or_owner",
+    "compute:unlock_override": "rule:admin_api",
+
+    "compute:get_vnc_console": "rule:admin_or_owner",
+    "compute:get_spice_console": "rule:admin_or_owner",
+    "compute:get_rdp_console": "rule:admin_or_owner",
+    "compute:get_serial_console": "rule:admin_or_owner",
+    "compute:get_mks_console": "rule:admin_or_owner",
+    "compute:get_console_output": "rule:admin_or_owner",
+
+    "compute:reset_network": "rule:admin_or_owner",
+    "compute:inject_network_info": "rule:admin_or_owner",
+    "compute:add_fixed_ip": "rule:admin_or_owner",
+    "compute:remove_fixed_ip": "rule:admin_or_owner",
+
+    "compute:attach_volume": "rule:admin_or_owner",
+    "compute:detach_volume": "rule:admin_or_owner",
+    "compute:swap_volume": "rule:admin_api",
+
+    "compute:attach_interface": "rule:admin_or_owner",
+    "compute:detach_interface": "rule:admin_or_owner",
+
+    "compute:set_admin_password": "rule:admin_or_owner",
+
+    "compute:rescue": "rule:admin_or_owner",
+    "compute:unrescue": "rule:admin_or_owner",
+
+    "compute:suspend": "rule:admin_or_owner",
+    "compute:resume": "rule:admin_or_owner",
+
+    "compute:pause": "rule:admin_or_owner",
+    "compute:unpause": "rule:admin_or_owner",
+
+    "compute:shelve": "rule:admin_or_owner",
+    "compute:shelve_offload": "rule:admin_or_owner",
+    "compute:unshelve": "rule:admin_or_owner",
+
+    "compute:snapshot": "rule:admin_or_owner",
+    "compute:snapshot_volume_backed": "rule:admin_or_owner",
+    "compute:backup": "rule:admin_or_owner",
+
+    "compute:resize": "rule:admin_or_owner",
+    "compute:confirm_resize": "rule:admin_or_owner",
+    "compute:revert_resize": "rule:admin_or_owner",
+
+    "compute:rebuild": "rule:admin_or_owner",
+    "compute:reboot": "rule:admin_or_owner",
+    "compute:delete": "rule:admin_or_owner",
+    "compute:soft_delete": "rule:admin_or_owner",
+    "compute:force_delete": "rule:admin_or_owner",
+
+    "compute:security_groups:add_to_instance": "rule:admin_or_owner",
+    "compute:security_groups:remove_from_instance": "rule:admin_or_owner",
+
+    "compute:restore": "rule:admin_or_owner",
+
+    "compute:volume_snapshot_create": "rule:admin_or_owner",
+    "compute:volume_snapshot_delete": "rule:admin_or_owner",
+
     "admin_api": "is_admin:True",
-    "os_compute_api:os-admin-actions:reset_state": "rule:admin_api",
-    "os_compute_api:os-admin-actions:inject_network_info": "rule:admin_api",
-    "os_compute_api:os-admin-actions:reset_network": "rule:admin_api",
-    "os_compute_api:os-admin-password": "rule:admin_or_owner",
-    "os_compute_api:os-agents": "rule:admin_api",
-    "os_compute_api:os-aggregates:set_metadata": "rule:admin_api",
-    "os_compute_api:os-aggregates:add_host": "rule:admin_api",
-    "os_compute_api:os-aggregates:create": "rule:admin_api",
-    "os_compute_api:os-aggregates:remove_host": "rule:admin_api",
-    "os_compute_api:os-aggregates:update": "rule:admin_api",
-    "os_compute_api:os-aggregates:index": "rule:admin_api",
-    "os_compute_api:os-aggregates:delete": "rule:admin_api",
-    "os_compute_api:os-aggregates:show": "rule:admin_api",
-    "os_compute_api:os-assisted-volume-snapshots:create": "rule:admin_api",
-    "os_compute_api:os-assisted-volume-snapshots:delete": "rule:admin_api",
-    "os_compute_api:os-attach-interfaces": "rule:admin_or_owner",
-    "os_compute_api:os-attach-interfaces:create": "rule:admin_or_owner",
-    "os_compute_api:os-attach-interfaces:delete": "rule:admin_or_owner",
-    "os_compute_api:os-availability-zone:list": "rule:admin_or_owner",
-    "os_compute_api:os-availability-zone:detail": "rule:admin_api",
-    "os_compute_api:os-baremetal-nodes": "rule:admin_api",
-    "os_compute_api:os-cells:update": "rule:admin_api",
-    "os_compute_api:os-cells:create": "rule:admin_api",
-    "os_compute_api:os-cells": "rule:admin_api",
-    "os_compute_api:os-cells:sync_instances": "rule:admin_api",
-    "os_compute_api:os-cells:delete": "rule:admin_api",
-    "cells_scheduler_filter:DifferentCellFilter": "is_admin:True",
-    "cells_scheduler_filter:TargetCellFilter": "is_admin:True",
-    "os_compute_api:os-config-drive": "rule:admin_or_owner",
-    "os_compute_api:os-console-auth-tokens": "rule:admin_api",
-    "os_compute_api:os-console-output": "rule:admin_or_owner",
-    "os_compute_api:os-consoles:create": "rule:admin_or_owner",
-    "os_compute_api:os-consoles:show": "rule:admin_or_owner",
-    "os_compute_api:os-consoles:delete": "rule:admin_or_owner",
-    "os_compute_api:os-consoles:index": "rule:admin_or_owner",
-    "os_compute_api:os-create-backup": "rule:admin_or_owner",
-    "os_compute_api:os-deferred-delete": "rule:admin_or_owner",
-    "os_compute_api:os-evacuate": "rule:admin_api",
-    "os_compute_api:os-extended-availability-zone": "rule:admin_or_owner",
-    "os_compute_api:os-extended-server-attributes": "rule:admin_api",
-    "os_compute_api:os-extended-status": "rule:admin_or_owner",
-    "os_compute_api:os-extended-volumes": "rule:admin_or_owner",
-    "os_compute_api:extensions": "rule:admin_or_owner",
-    "os_compute_api:os-fixed-ips": "rule:admin_api",
-    "os_compute_api:os-flavor-access:add_tenant_access": "rule:admin_api",
-    "os_compute_api:os-flavor-access:remove_tenant_access": "rule:admin_api",
-    "os_compute_api:os-flavor-access": "rule:admin_or_owner",
-    "os_compute_api:os-flavor-extra-specs:show": "rule:admin_or_owner",
-    "os_compute_api:os-flavor-extra-specs:create": "rule:admin_api",
-    "os_compute_api:os-flavor-extra-specs:update": "rule:admin_api",
-    "os_compute_api:os-flavor-extra-specs:delete": "rule:admin_api",
-    "os_compute_api:os-flavor-extra-specs:index": "rule:admin_or_owner",
-    "os_compute_api:os-flavor-manage": "rule:admin_api",
-    "os_compute_api:os-flavor-manage:create": "rule:os_compute_api:os-flavor-manage",
-    "os_compute_api:os-flavor-manage:update": "rule:admin_api",
-    "os_compute_api:os-flavor-manage:delete": "rule:os_compute_api:os-flavor-manage",
-    "os_compute_api:os-flavor-rxtx": "rule:admin_or_owner",
-    "os_compute_api:flavors": "rule:admin_or_owner",
-    "os_compute_api:os-floating-ip-dns": "rule:admin_or_owner",
-    "os_compute_api:os-floating-ip-dns:domain:update": "rule:admin_api",
-    "os_compute_api:os-floating-ip-dns:domain:delete": "rule:admin_api",
-    "os_compute_api:os-floating-ip-pools": "rule:admin_or_owner",
-    "os_compute_api:os-floating-ips": "rule:admin_or_owner",
-    "os_compute_api:os-floating-ips-bulk": "rule:admin_api",
-    "os_compute_api:os-fping:all_tenants": "rule:admin_api",
-    "os_compute_api:os-fping": "rule:admin_or_owner",
-    "os_compute_api:os-hide-server-addresses": "is_admin:False",
-    "os_compute_api:os-hosts": "rule:admin_api",
-    "os_compute_api:os-hypervisors": "rule:admin_api",
-    "os_compute_api:image-size": "rule:admin_or_owner",
-    "os_compute_api:os-instance-actions:events": "rule:admin_api",
-    "os_compute_api:os-instance-actions": "rule:admin_or_owner",
-    "os_compute_api:os-instance-usage-audit-log": "rule:admin_api",
-    "os_compute_api:ips:show": "rule:admin_or_owner",
-    "os_compute_api:ips:index": "rule:admin_or_owner",
-    "os_compute_api:os-keypairs:index": "rule:admin_api or user_id:%(user_id)s",
-    "os_compute_api:os-keypairs:create": "rule:admin_api or user_id:%(user_id)s",
-    "os_compute_api:os-keypairs:delete": "rule:admin_api or user_id:%(user_id)s",
-    "os_compute_api:os-keypairs:show": "rule:admin_api or user_id:%(user_id)s",
-    "os_compute_api:os-keypairs": "rule:admin_or_owner",
-    "os_compute_api:limits": "rule:admin_or_owner",
-    "os_compute_api:os-lock-server:lock": "rule:admin_or_owner",
-    "os_compute_api:os-lock-server:unlock": "rule:admin_or_owner",
-    "os_compute_api:os-lock-server:unlock:unlock_override": "rule:admin_api",
-    "os_compute_api:os-migrate-server:migrate": "rule:admin_api",
-    "os_compute_api:os-migrate-server:migrate_live": "rule:admin_api",
-    "os_compute_api:os-migrations:index": "rule:admin_api",
-    "os_compute_api:os-multinic": "rule:admin_or_owner",
-    "os_compute_api:os-networks": "rule:admin_api",
-    "os_compute_api:os-networks:view": "rule:admin_or_owner",
-    "os_compute_api:os-networks-associate": "rule:admin_api",
-    "os_compute_api:os-pause-server:pause": "rule:admin_or_owner",
-    "os_compute_api:os-pause-server:unpause": "rule:admin_or_owner",
-    "os_compute_api:os-quota-class-sets:show": "is_admin:True or quota_class:%(quota_class)s",
-    "os_compute_api:os-quota-class-sets:update": "rule:admin_api",
-    "os_compute_api:os-quota-sets:update": "rule:admin_api",
-    "os_compute_api:os-quota-sets:defaults": "@",
-    "os_compute_api:os-quota-sets:show": "rule:admin_or_owner",
-    "os_compute_api:os-quota-sets:delete": "rule:admin_api",
-    "os_compute_api:os-quota-sets:detail": "rule:admin_or_owner",
-    "os_compute_api:os-remote-consoles": "rule:admin_or_owner",
-    "os_compute_api:os-rescue": "rule:admin_or_owner",
-    "os_compute_api:os-security-group-default-rules": "rule:admin_api",
-    "os_compute_api:os-security-groups": "rule:admin_or_owner",
-    "os_compute_api:os-server-diagnostics": "rule:admin_api",
-    "os_compute_api:os-server-external-events:create": "rule:admin_api",
-    "os_compute_api:os-server-groups": "rule:admin_or_owner",
-    "os_compute_api:os-server-groups:create": "rule:os_compute_api:os-server-groups",
-    "os_compute_api:os-server-groups:delete": "rule:os_compute_api:os-server-groups",
-    "os_compute_api:os-server-groups:index": "rule:os_compute_api:os-server-groups",
-    "os_compute_api:os-server-groups:show": "rule:os_compute_api:os-server-groups",
-    "os_compute_api:server-metadata:index": "rule:admin_or_owner",
-    "os_compute_api:server-metadata:show": "rule:admin_or_owner",
-    "os_compute_api:server-metadata:create": "rule:admin_or_owner",
-    "os_compute_api:server-metadata:update_all": "rule:admin_or_owner",
-    "os_compute_api:server-metadata:update": "rule:admin_or_owner",
-    "os_compute_api:server-metadata:delete": "rule:admin_or_owner",
-    "os_compute_api:os-server-password": "rule:admin_or_owner",
-    "os_compute_api:os-server-tags:delete_all": "rule:admin_or_owner",
-    "os_compute_api:os-server-tags:index": "rule:admin_or_owner",
-    "os_compute_api:os-server-tags:update_all": "rule:admin_or_owner",
-    "os_compute_api:os-server-tags:delete": "rule:admin_or_owner",
-    "os_compute_api:os-server-tags:update": "rule:admin_or_owner",
-    "os_compute_api:os-server-tags:show": "rule:admin_or_owner",
-    "os_compute_api:os-server-usage": "rule:admin_or_owner",
+    "compute_extension:accounts": "rule:admin_api",
+    "compute_extension:admin_actions": "rule:admin_api",
+    "compute_extension:admin_actions:pause": "rule:admin_or_owner",
+    "compute_extension:admin_actions:unpause": "rule:admin_or_owner",
+    "compute_extension:admin_actions:suspend": "rule:admin_or_owner",
+    "compute_extension:admin_actions:resume": "rule:admin_or_owner",
+    "compute_extension:admin_actions:lock": "rule:admin_or_owner",
+    "compute_extension:admin_actions:unlock": "rule:admin_or_owner",
+    "compute_extension:admin_actions:resetNetwork": "rule:admin_api",
+    "compute_extension:admin_actions:injectNetworkInfo": "rule:admin_api",
+    "compute_extension:admin_actions:createBackup": "rule:admin_or_owner",
+    "compute_extension:admin_actions:migrateLive": "rule:admin_api",
+    "compute_extension:admin_actions:resetState": "rule:admin_api",
+    "compute_extension:admin_actions:migrate": "rule:admin_api",
+    "compute_extension:aggregates": "rule:admin_api",
+    "compute_extension:agents": "rule:admin_api",
+    "compute_extension:attach_interfaces": "rule:admin_or_owner",
+    "compute_extension:baremetal_nodes": "rule:admin_api",
+    "compute_extension:cells": "rule:admin_api",
+    "compute_extension:cells:create": "rule:admin_api",
+    "compute_extension:cells:delete": "rule:admin_api",
+    "compute_extension:cells:update": "rule:admin_api",
+    "compute_extension:cells:sync_instances": "rule:admin_api",
+    "compute_extension:certificates": "rule:admin_or_owner",
+    "compute_extension:cloudpipe": "rule:admin_api",
+    "compute_extension:cloudpipe_update": "rule:admin_api",
+    "compute_extension:config_drive": "rule:admin_or_owner",
+    "compute_extension:console_output": "rule:admin_or_owner",
+    "compute_extension:consoles": "rule:admin_or_owner",
+    "compute_extension:createserverext": "rule:admin_or_owner",
+    "compute_extension:deferred_delete": "rule:admin_or_owner",
+    "compute_extension:disk_config": "rule:admin_or_owner",
+    "compute_extension:evacuate": "rule:admin_api",
+    "compute_extension:extended_server_attributes": "rule:admin_api",
+    "compute_extension:extended_status": "rule:admin_or_owner",
+    "compute_extension:extended_availability_zone": "rule:admin_or_owner",
+    "compute_extension:extended_ips": "rule:admin_or_owner",
+    "compute_extension:extended_ips_mac": "rule:admin_or_owner",
+    "compute_extension:extended_vif_net": "rule:admin_or_owner",
+    "compute_extension:extended_volumes": "rule:admin_or_owner",
+    "compute_extension:fixed_ips": "rule:admin_api",
+    "compute_extension:flavor_access": "rule:admin_or_owner",
+    "compute_extension:flavor_access:addTenantAccess": "rule:admin_api",
+    "compute_extension:flavor_access:removeTenantAccess": "rule:admin_api",
+    "compute_extension:flavor_disabled": "rule:admin_or_owner",
+    "compute_extension:flavor_rxtx": "rule:admin_or_owner",
+    "compute_extension:flavor_swap": "rule:admin_or_owner",
+    "compute_extension:flavorextradata": "rule:admin_or_owner",
+    "compute_extension:flavorextraspecs:index": "rule:admin_or_owner",
+    "compute_extension:flavorextraspecs:show": "rule:admin_or_owner",
+    "compute_extension:flavorextraspecs:create": "rule:admin_api",
+    "compute_extension:flavorextraspecs:update": "rule:admin_api",
+    "compute_extension:flavorextraspecs:delete": "rule:admin_api",
+    "compute_extension:flavormanage": "rule:admin_api",
+    "compute_extension:floating_ip_dns": "rule:admin_or_owner",
+    "compute_extension:floating_ip_pools": "rule:admin_or_owner",
+    "compute_extension:floating_ips": "rule:admin_or_owner",
+    "compute_extension:floating_ips_bulk": "rule:admin_api",
+    "compute_extension:fping": "rule:admin_or_owner",
+    "compute_extension:fping:all_tenants": "rule:admin_api",
+    "compute_extension:hide_server_addresses": "is_admin:False",
+    "compute_extension:hosts": "rule:admin_api",
+    "compute_extension:hypervisors": "rule:admin_api",
+    "compute_extension:image_size": "rule:admin_or_owner",
+    "compute_extension:instance_actions": "rule:admin_or_owner",
+    "compute_extension:instance_actions:events": "rule:admin_api",
+    "compute_extension:instance_usage_audit_log": "rule:admin_api",
+    "compute_extension:keypairs": "rule:admin_or_owner",
+    "compute_extension:keypairs:index": "rule:admin_or_owner",
+    "compute_extension:keypairs:show": "rule:admin_or_owner",
+    "compute_extension:keypairs:create": "rule:admin_or_owner",
+    "compute_extension:keypairs:delete": "rule:admin_or_owner",
+    "compute_extension:multinic": "rule:admin_or_owner",
+    "compute_extension:networks": "rule:admin_api",
+    "compute_extension:networks:view": "rule:admin_or_owner",
+    "compute_extension:networks_associate": "rule:admin_api",
+    "compute_extension:os-tenant-networks": "rule:admin_or_owner",
+    "compute_extension:quotas:show": "rule:admin_or_owner",
+    "compute_extension:quotas:update": "rule:admin_api",
+    "compute_extension:quotas:delete": "rule:admin_api",
+    "compute_extension:quota_classes": "rule:admin_or_owner",
+    "compute_extension:rescue": "rule:admin_or_owner",
+    "compute_extension:security_group_default_rules": "rule:admin_api",
+    "compute_extension:security_groups": "rule:admin_or_owner",
+    "compute_extension:server_diagnostics": "rule:admin_api",
+    "compute_extension:server_groups": "rule:admin_or_owner",
+    "compute_extension:server_password": "rule:admin_or_owner",
+    "compute_extension:server_usage": "rule:admin_or_owner",
+    "compute_extension:services": "rule:admin_api",
+    "compute_extension:shelve": "rule:admin_or_owner",
+    "compute_extension:shelveOffload": "rule:admin_api",
+    "compute_extension:simple_tenant_usage:show": "rule:admin_or_owner",
+    "compute_extension:simple_tenant_usage:list": "rule:admin_api",
+    "compute_extension:unshelve": "rule:admin_or_owner",
+    "compute_extension:users": "rule:admin_api",
+    "compute_extension:virtual_interfaces": "rule:admin_or_owner",
+    "compute_extension:virtual_storage_arrays": "rule:admin_or_owner",
+    "compute_extension:volumes": "rule:admin_or_owner",
+    "compute_extension:volume_attachments:index": "rule:admin_or_owner",
+    "compute_extension:volume_attachments:show": "rule:admin_or_owner",
+    "compute_extension:volume_attachments:create": "rule:admin_or_owner",
+    "compute_extension:volume_attachments:update": "rule:admin_api",
+    "compute_extension:volume_attachments:delete": "rule:admin_or_owner",
+    "compute_extension:volumetypes": "rule:admin_or_owner",
+    "compute_extension:availability_zone:list": "rule:admin_or_owner",
+    "compute_extension:availability_zone:detail": "rule:admin_api",
+    "compute_extension:used_limits_for_admin": "rule:admin_api",
+    "compute_extension:migrations:index": "rule:admin_api",
+    "compute_extension:os-assisted-volume-snapshots:create": "rule:admin_api",
+    "compute_extension:os-assisted-volume-snapshots:delete": "rule:admin_api",
+    "compute_extension:console_auth_tokens": "rule:admin_api",
+    "compute_extension:os-server-external-events:create": "rule:admin_api",
+
+    "network:get_all": "rule:admin_or_owner",
+    "network:get": "rule:admin_or_owner",
+    "network:create": "rule:admin_or_owner",
+    "network:delete": "rule:admin_or_owner",
+    "network:associate": "rule:admin_or_owner",
+    "network:disassociate": "rule:admin_or_owner",
+    "network:get_vifs_by_instance": "rule:admin_or_owner",
+    "network:allocate_for_instance": "rule:admin_or_owner",
+    "network:deallocate_for_instance": "rule:admin_or_owner",
+    "network:validate_networks": "rule:admin_or_owner",
+    "network:get_instance_uuids_by_ip_filter": "rule:admin_or_owner",
+    "network:get_instance_id_by_floating_address": "rule:admin_or_owner",
+    "network:setup_networks_on_host": "rule:admin_or_owner",
+    "network:get_backdoor_port": "rule:admin_or_owner",
+
+    "network:get_floating_ip": "rule:admin_or_owner",
+    "network:get_floating_ip_pools": "rule:admin_or_owner",
+    "network:get_floating_ip_by_address": "rule:admin_or_owner",
+    "network:get_floating_ips_by_project": "rule:admin_or_owner",
+    "network:get_floating_ips_by_fixed_address": "rule:admin_or_owner",
+    "network:allocate_floating_ip": "rule:admin_or_owner",
+    "network:associate_floating_ip": "rule:admin_or_owner",
+    "network:disassociate_floating_ip": "rule:admin_or_owner",
+    "network:release_floating_ip": "rule:admin_or_owner",
+    "network:migrate_instance_start": "rule:admin_or_owner",
+    "network:migrate_instance_finish": "rule:admin_or_owner",
+
+    "network:get_fixed_ip": "rule:admin_or_owner",
+    "network:get_fixed_ip_by_address": "rule:admin_or_owner",
+    "network:add_fixed_ip_to_instance": "rule:admin_or_owner",
+    "network:remove_fixed_ip_from_instance": "rule:admin_or_owner",
+    "network:add_network_to_project": "rule:admin_or_owner",
+    "network:get_instance_nw_info": "rule:admin_or_owner",
+
+    "network:get_dns_domains": "rule:admin_or_owner",
+    "network:add_dns_entry": "rule:admin_or_owner",
+    "network:modify_dns_entry": "rule:admin_or_owner",
+    "network:delete_dns_entry": "rule:admin_or_owner",
+    "network:get_dns_entries_by_address": "rule:admin_or_owner",
+    "network:get_dns_entries_by_name": "rule:admin_or_owner",
+    "network:create_private_dns_domain": "rule:admin_or_owner",
+    "network:create_public_dns_domain": "rule:admin_or_owner",
+    "network:delete_dns_domain": "rule:admin_or_owner",
+    "network:attach_external_network": "rule:admin_api",
+    "network:get_vif_by_mac_address": "rule:admin_or_owner",
+
+    "os_compute_api:servers:detail:get_all_tenants": "is_admin:True",
+    "os_compute_api:servers:index:get_all_tenants": "is_admin:True",
+    "os_compute_api:servers:confirm_resize": "rule:admin_or_owner",
+    "os_compute_api:servers:create": "rule:admin_or_owner",
+    "os_compute_api:servers:create:attach_network": "rule:admin_or_owner",
+    "os_compute_api:servers:create:attach_volume": "rule:admin_or_owner",
+    "os_compute_api:servers:create:forced_host": "rule:admin_api",
+    "os_compute_api:servers:delete": "rule:admin_or_owner",
+    "os_compute_api:servers:update": "rule:admin_or_owner",
+    "os_compute_api:servers:detail": "rule:admin_or_owner",
     "os_compute_api:servers:index": "rule:admin_or_owner",
-    "os_compute_api:servers:detail": "rule:admin_or_owner",
-    "os_compute_api:servers:index:get_all_tenants": "rule:admin_api",
-    "os_compute_api:servers:detail:get_all_tenants": "rule:admin_api",
+    "os_compute_api:servers:reboot": "rule:admin_or_owner",
+    "os_compute_api:servers:rebuild": "rule:admin_or_owner",
+    "os_compute_api:servers:resize": "rule:admin_or_owner",
+    "os_compute_api:servers:revert_resize": "rule:admin_or_owner",
     "os_compute_api:servers:show": "rule:admin_or_owner",
     "os_compute_api:servers:show:host_status": "rule:admin_api",
-    "os_compute_api:servers:create": "rule:admin_or_owner",
-    "os_compute_api:servers:create:forced_host": "rule:admin_api",
-    "os_compute_api:servers:create:attach_volume": "rule:admin_or_owner",
-    "os_compute_api:servers:create:attach_network": "rule:admin_or_owner",
-    "network:attach_external_network": "is_admin:True",
-    "os_compute_api:servers:delete": "rule:admin_or_owner",
-    "os_compute_api:servers:update": "rule:admin_or_owner",
-    "os_compute_api:servers:confirm_resize": "rule:admin_or_owner",
-    "os_compute_api:servers:revert_resize": "rule:admin_or_owner",
-    "os_compute_api:servers:reboot": "rule:admin_or_owner",
-    "os_compute_api:servers:resize": "rule:admin_or_owner",
-    "os_compute_api:servers:rebuild": "rule:admin_or_owner",
     "os_compute_api:servers:create_image": "rule:admin_or_owner",
     "os_compute_api:servers:create_image:allow_volume_backed": "rule:admin_or_owner",
     "os_compute_api:servers:start": "rule:admin_or_owner",
     "os_compute_api:servers:stop": "rule:admin_or_owner",
     "os_compute_api:servers:trigger_crash_dump": "rule:admin_or_owner",
-    "os_compute_api:servers:migrations:show": "rule:admin_api",
     "os_compute_api:servers:migrations:force_complete": "rule:admin_api",
     "os_compute_api:servers:migrations:delete": "rule:admin_api",
+    "os_compute_api:servers:discoverable": "@",
     "os_compute_api:servers:migrations:index": "rule:admin_api",
+    "os_compute_api:servers:migrations:show": "rule:admin_api",
+    "os_compute_api:os-access-ips:discoverable": "@",
+    "os_compute_api:os-access-ips": "rule:admin_or_owner",
+    "os_compute_api:os-admin-actions": "rule:admin_api",
+    "os_compute_api:os-admin-actions:discoverable": "@",
+    "os_compute_api:os-admin-actions:reset_network": "rule:admin_api",
+    "os_compute_api:os-admin-actions:inject_network_info": "rule:admin_api",
+    "os_compute_api:os-admin-actions:reset_state": "rule:admin_api",
+    "os_compute_api:os-admin-password": "rule:admin_or_owner",
+    "os_compute_api:os-admin-password:discoverable": "@",
+    "os_compute_api:os-aggregates:discoverable": "@",
+    "os_compute_api:os-aggregates:index": "rule:admin_api",
+    "os_compute_api:os-aggregates:create": "rule:admin_api",
+    "os_compute_api:os-aggregates:show": "rule:admin_api",
+    "os_compute_api:os-aggregates:update": "rule:admin_api",
+    "os_compute_api:os-aggregates:delete": "rule:admin_api",
+    "os_compute_api:os-aggregates:add_host": "rule:admin_api",
+    "os_compute_api:os-aggregates:remove_host": "rule:admin_api",
+    "os_compute_api:os-aggregates:set_metadata": "rule:admin_api",
+    "os_compute_api:os-agents": "rule:admin_api",
+    "os_compute_api:os-agents:discoverable": "@",
+    "os_compute_api:os-attach-interfaces": "rule:admin_or_owner",
+    "os_compute_api:os-attach-interfaces:discoverable": "@",
+    "os_compute_api:os-baremetal-nodes": "rule:admin_api",
+    "os_compute_api:os-baremetal-nodes:discoverable": "@",
+    "os_compute_api:os-block-device-mapping-v1:discoverable": "@",
+    "os_compute_api:os-cells": "rule:admin_api",
+    "os_compute_api:os-cells:create": "rule:admin_api",
+    "os_compute_api:os-cells:delete": "rule:admin_api",
+    "os_compute_api:os-cells:update": "rule:admin_api",
+    "os_compute_api:os-cells:sync_instances": "rule:admin_api",
+    "os_compute_api:os-cells:discoverable": "@",
+    "os_compute_api:os-certificates:create": "rule:admin_or_owner",
+    "os_compute_api:os-certificates:show": "rule:admin_or_owner",
+    "os_compute_api:os-certificates:discoverable": "@",
+    "os_compute_api:os-cloudpipe": "rule:admin_api",
+    "os_compute_api:os-cloudpipe:discoverable": "@",
+    "os_compute_api:os-config-drive": "rule:admin_or_owner",
+    "os_compute_api:os-config-drive:discoverable": "@",
+    "os_compute_api:os-consoles:discoverable": "@",
+    "os_compute_api:os-consoles:create": "rule:admin_or_owner",
+    "os_compute_api:os-consoles:delete": "rule:admin_or_owner",
+    "os_compute_api:os-consoles:index": "rule:admin_or_owner",
+    "os_compute_api:os-consoles:show": "rule:admin_or_owner",
+    "os_compute_api:os-console-output:discoverable": "@",
+    "os_compute_api:os-console-output": "rule:admin_or_owner",
+    "os_compute_api:os-remote-consoles": "rule:admin_or_owner",
+    "os_compute_api:os-remote-consoles:discoverable": "@",
+    "os_compute_api:os-create-backup:discoverable": "@",
+    "os_compute_api:os-create-backup": "rule:admin_or_owner",
+    "os_compute_api:os-deferred-delete": "rule:admin_or_owner",
+    "os_compute_api:os-deferred-delete:discoverable": "@",
+    "os_compute_api:os-disk-config": "rule:admin_or_owner",
+    "os_compute_api:os-disk-config:discoverable": "@",
+    "os_compute_api:os-evacuate": "rule:admin_api",
+    "os_compute_api:os-evacuate:discoverable": "@",
+    "os_compute_api:os-extended-server-attributes": "rule:admin_api",
+    "os_compute_api:os-extended-server-attributes:discoverable": "@",
+    "os_compute_api:os-extended-status": "rule:admin_or_owner",
+    "os_compute_api:os-extended-status:discoverable": "@",
+    "os_compute_api:os-extended-availability-zone": "rule:admin_or_owner",
+    "os_compute_api:os-extended-availability-zone:discoverable": "@",
+    "os_compute_api:extensions": "rule:admin_or_owner",
+    "os_compute_api:extensions:discoverable": "@",
+    "os_compute_api:extension_info:discoverable": "@",
+    "os_compute_api:os-extended-volumes": "rule:admin_or_owner",
+    "os_compute_api:os-extended-volumes:discoverable": "@",
+    "os_compute_api:os-fixed-ips": "rule:admin_api",
+    "os_compute_api:os-fixed-ips:discoverable": "@",
+    "os_compute_api:os-flavor-access": "rule:admin_or_owner",
+    "os_compute_api:os-flavor-access:discoverable": "@",
+    "os_compute_api:os-flavor-access:remove_tenant_access": "rule:admin_api",
+    "os_compute_api:os-flavor-access:add_tenant_access": "rule:admin_api",
+    "os_compute_api:os-flavor-rxtx": "rule:admin_or_owner",
+    "os_compute_api:os-flavor-rxtx:discoverable": "@",
+    "os_compute_api:flavors": "rule:admin_or_owner",
+    "os_compute_api:flavors:discoverable": "@",
+    "os_compute_api:os-flavor-extra-specs:discoverable": "@",
+    "os_compute_api:os-flavor-extra-specs:index": "rule:admin_or_owner",
+    "os_compute_api:os-flavor-extra-specs:show": "rule:admin_or_owner",
+    "os_compute_api:os-flavor-extra-specs:create": "rule:admin_api",
+    "os_compute_api:os-flavor-extra-specs:update": "rule:admin_api",
+    "os_compute_api:os-flavor-extra-specs:delete": "rule:admin_api",
+    "os_compute_api:os-flavor-manage:discoverable": "@",
+    "os_compute_api:os-flavor-manage": "rule:admin_api",
+    "os_compute_api:os-floating-ip-dns": "rule:admin_or_owner",
+    "os_compute_api:os-floating-ip-dns:discoverable": "@",
+    "os_compute_api:os-floating-ip-dns:domain:update": "rule:admin_api",
+    "os_compute_api:os-floating-ip-dns:domain:delete": "rule:admin_api",
+    "os_compute_api:os-floating-ip-pools": "rule:admin_or_owner",
+    "os_compute_api:os-floating-ip-pools:discoverable": "@",
+    "os_compute_api:os-floating-ips": "rule:admin_or_owner",
+    "os_compute_api:os-floating-ips:discoverable": "@",
+    "os_compute_api:os-floating-ips-bulk": "rule:admin_api",
+    "os_compute_api:os-floating-ips-bulk:discoverable": "@",
+    "os_compute_api:os-fping": "rule:admin_or_owner",
+    "os_compute_api:os-fping:discoverable": "@",
+    "os_compute_api:os-fping:all_tenants": "rule:admin_api",
+    "os_compute_api:os-hide-server-addresses": "is_admin:False",
+    "os_compute_api:os-hide-server-addresses:discoverable": "@",
+    "os_compute_api:os-hosts": "rule:admin_api",
+    "os_compute_api:os-hosts:discoverable": "@",
+    "os_compute_api:os-hypervisors": "rule:admin_api",
+    "os_compute_api:os-hypervisors:discoverable": "@",
+    "os_compute_api:images:discoverable": "@",
+    "os_compute_api:image-size": "rule:admin_or_owner",
+    "os_compute_api:image-size:discoverable": "@",
+    "os_compute_api:os-instance-actions": "rule:admin_or_owner",
+    "os_compute_api:os-instance-actions:discoverable": "@",
+    "os_compute_api:os-instance-actions:events": "rule:admin_api",
+    "os_compute_api:os-instance-usage-audit-log": "rule:admin_api",
+    "os_compute_api:os-instance-usage-audit-log:discoverable": "@",
+    "os_compute_api:ips:discoverable": "@",
+    "os_compute_api:ips:index": "rule:admin_or_owner",
+    "os_compute_api:ips:show": "rule:admin_or_owner",
+    "os_compute_api:os-keypairs:discoverable": "@",
+    "os_compute_api:os-keypairs": "rule:admin_or_owner",
+    "os_compute_api:os-keypairs:index": "rule:admin_api or user_id:%(user_id)s",
+    "os_compute_api:os-keypairs:show": "rule:admin_api or user_id:%(user_id)s",
+    "os_compute_api:os-keypairs:create": "rule:admin_api or user_id:%(user_id)s",
+    "os_compute_api:os-keypairs:delete": "rule:admin_api or user_id:%(user_id)s",
+    "os_compute_api:limits:discoverable": "@",
+    "os_compute_api:limits": "rule:admin_or_owner",
+    "os_compute_api:os-lock-server:discoverable": "@",
+    "os_compute_api:os-lock-server:lock": "rule:admin_or_owner",
+    "os_compute_api:os-lock-server:unlock": "rule:admin_or_owner",
+    "os_compute_api:os-lock-server:unlock:unlock_override": "rule:admin_api",
+    "os_compute_api:os-migrate-server:discoverable": "@",
+    "os_compute_api:os-migrate-server:migrate": "rule:admin_api",
+    "os_compute_api:os-migrate-server:migrate_live": "rule:admin_api",
+    "os_compute_api:os-multinic": "rule:admin_or_owner",
+    "os_compute_api:os-multinic:discoverable": "@",
+    "os_compute_api:os-networks": "rule:admin_api",
+    "os_compute_api:os-networks:view": "rule:admin_or_owner",
+    "os_compute_api:os-networks:discoverable": "@",
+    "os_compute_api:os-networks-associate": "rule:admin_api",
+    "os_compute_api:os-networks-associate:discoverable": "@",
+    "os_compute_api:os-pause-server:discoverable": "@",
+    "os_compute_api:os-pause-server:pause": "rule:admin_or_owner",
+    "os_compute_api:os-pause-server:unpause": "rule:admin_or_owner",
+    "os_compute_api:os-pci:pci_servers": "rule:admin_or_owner",
+    "os_compute_api:os-pci:discoverable": "@",
+    "os_compute_api:os-pci:index": "rule:admin_api",
+    "os_compute_api:os-pci:detail": "rule:admin_api",
+    "os_compute_api:os-pci:show": "rule:admin_api",
+    "os_compute_api:os-personality:discoverable": "@",
+    "os_compute_api:os-preserve-ephemeral-rebuild:discoverable": "@",
+    "os_compute_api:os-quota-sets:discoverable": "@",
+    "os_compute_api:os-quota-sets:show": "rule:admin_or_owner",
+    "os_compute_api:os-quota-sets:defaults": "@",
+    "os_compute_api:os-quota-sets:update": "rule:admin_api",
+    "os_compute_api:os-quota-sets:delete": "rule:admin_api",
+    "os_compute_api:os-quota-sets:detail": "rule:admin_api",
+    "os_compute_api:os-quota-class-sets:update": "rule:admin_api",
+    "os_compute_api:os-quota-class-sets:show": "is_admin:True or quota_class:%(quota_class)s",
+    "os_compute_api:os-quota-class-sets:discoverable": "@",
+    "os_compute_api:os-rescue": "rule:admin_or_owner",
+    "os_compute_api:os-rescue:discoverable": "@",
+    "os_compute_api:os-scheduler-hints:discoverable": "@",
+    "os_compute_api:os-security-group-default-rules:discoverable": "@",
+    "os_compute_api:os-security-group-default-rules": "rule:admin_api",
+    "os_compute_api:os-security-groups": "rule:admin_or_owner",
+    "os_compute_api:os-security-groups:discoverable": "@",
+    "os_compute_api:os-server-diagnostics": "rule:admin_api",
+    "os_compute_api:os-server-diagnostics:discoverable": "@",
+    "os_compute_api:os-server-password": "rule:admin_or_owner",
+    "os_compute_api:os-server-password:discoverable": "@",
+    "os_compute_api:os-server-usage": "rule:admin_or_owner",
+    "os_compute_api:os-server-usage:discoverable": "@",
+    "os_compute_api:os-server-groups": "rule:admin_or_owner",
+    "os_compute_api:os-server-groups:discoverable": "@",
+    "os_compute_api:os-server-tags:index": "@",
+    "os_compute_api:os-server-tags:show": "@",
+    "os_compute_api:os-server-tags:update": "@",
+    "os_compute_api:os-server-tags:update_all": "@",
+    "os_compute_api:os-server-tags:delete": "@",
+    "os_compute_api:os-server-tags:delete_all": "@",
     "os_compute_api:os-services": "rule:admin_api",
+    "os_compute_api:os-services:discoverable": "@",
+    "os_compute_api:server-metadata:discoverable": "@",
+    "os_compute_api:server-metadata:index": "rule:admin_or_owner",
+    "os_compute_api:server-metadata:show": "rule:admin_or_owner",
+    "os_compute_api:server-metadata:delete": "rule:admin_or_owner",
+    "os_compute_api:server-metadata:create": "rule:admin_or_owner",
+    "os_compute_api:server-metadata:update": "rule:admin_or_owner",
+    "os_compute_api:server-metadata:update_all": "rule:admin_or_owner",
     "os_compute_api:os-shelve:shelve": "rule:admin_or_owner",
-    "os_compute_api:os-shelve:unshelve": "rule:admin_or_owner",
+    "os_compute_api:os-shelve:shelve:discoverable": "@",
     "os_compute_api:os-shelve:shelve_offload": "rule:admin_api",
+    "os_compute_api:os-simple-tenant-usage:discoverable": "@",
     "os_compute_api:os-simple-tenant-usage:show": "rule:admin_or_owner",
     "os_compute_api:os-simple-tenant-usage:list": "rule:admin_api",
+    "os_compute_api:os-suspend-server:discoverable": "@",
+    "os_compute_api:os-suspend-server:suspend": "rule:admin_or_owner",
     "os_compute_api:os-suspend-server:resume": "rule:admin_or_owner",
-    "os_compute_api:os-suspend-server:suspend": "rule:admin_or_owner",
     "os_compute_api:os-tenant-networks": "rule:admin_or_owner",
+    "os_compute_api:os-tenant-networks:discoverable": "@",
+    "os_compute_api:os-shelve:unshelve": "rule:admin_or_owner",
+    "os_compute_api:os-user-data:discoverable": "@",
+    "os_compute_api:os-virtual-interfaces": "rule:admin_or_owner",
+    "os_compute_api:os-virtual-interfaces:discoverable": "@",
+    "os_compute_api:os-volumes": "rule:admin_or_owner",
+    "os_compute_api:os-volumes:discoverable": "@",
+    "os_compute_api:os-volumes-attachments:index": "rule:admin_or_owner",
+    "os_compute_api:os-volumes-attachments:show": "rule:admin_or_owner",
+    "os_compute_api:os-volumes-attachments:create": "rule:admin_or_owner",
+    "os_compute_api:os-volumes-attachments:update": "rule:admin_api",
+    "os_compute_api:os-volumes-attachments:delete": "rule:admin_or_owner",
+    "os_compute_api:os-volumes-attachments:discoverable": "@",
+    "os_compute_api:os-availability-zone:list": "rule:admin_or_owner",
+    "os_compute_api:os-availability-zone:discoverable": "@",
+    "os_compute_api:os-availability-zone:detail": "rule:admin_api",
     "os_compute_api:os-used-limits": "rule:admin_api",
-    "os_compute_api:os-virtual-interfaces": "rule:admin_or_owner",
-    "os_compute_api:os-volumes": "rule:admin_or_owner",
-    "os_compute_api:os-volumes-attachments:index": "rule:admin_or_owner",
-    "os_compute_api:os-volumes-attachments:create": "rule:admin_or_owner",
-    "os_compute_api:os-volumes-attachments:show": "rule:admin_or_owner",
-    "os_compute_api:os-volumes-attachments:update": "rule:admin_api",
-    "os_compute_api:os-volumes-attachments:delete": "rule:admin_or_owner"
+    "os_compute_api:os-used-limits:discoverable": "@",
+    "os_compute_api:os-migrations:index": "rule:admin_api",
+    "os_compute_api:os-migrations:discoverable": "@",
+    "os_compute_api:os-assisted-volume-snapshots:create": "rule:admin_api",
+    "os_compute_api:os-assisted-volume-snapshots:delete": "rule:admin_api",
+    "os_compute_api:os-assisted-volume-snapshots:discoverable": "@",
+    "os_compute_api:os-console-auth-tokens": "rule:admin_api",
+    "os_compute_api:os-console-auth-tokens:discoverable": "@",
+    "os_compute_api:os-server-external-events:create": "rule:admin_api",
+    "os_compute_api:os-server-external-events:discoverable": "@"
 }

2018-09-07 22:30:31,917 [salt.state       :1941][INFO    ][7029] Completed state [/usr/share/openstack-dashboard/openstack_dashboard/conf/nova_policy.json] at time 22:30:31.917776 duration_in_ms=80.628
2018-09-07 22:30:31,918 [salt.state       :1770][INFO    ][7029] Running state [/usr/share/openstack-dashboard/openstack_dashboard/conf/neutron_policy.json] at time 22:30:31.918308
2018-09-07 22:30:31,918 [salt.state       :1803][INFO    ][7029] Executing state file.managed for [/usr/share/openstack-dashboard/openstack_dashboard/conf/neutron_policy.json]
2018-09-07 22:30:31,956 [salt.fileclient  :1215][INFO    ][7029] Fetching file from saltenv 'base', ** done ** 'horizon/files/policy/queens/neutron_policy.json'
2018-09-07 22:30:31,958 [salt.state       :290 ][INFO    ][7029] File changed:
--- 
+++ 
@@ -7,8 +7,9 @@
     "admin_owner_or_network_owner": "rule:owner or rule:admin_or_network_owner",
     "admin_only": "rule:context_is_admin",
     "regular_user": "",
-    "admin_or_data_plane_int": "rule:context_is_admin or role:data_plane_integrator",
     "shared": "field:networks:shared=True",
+    "shared_firewalls": "field:firewalls:shared=True",
+    "shared_firewall_policies": "field:firewall_policies:shared=True",
     "shared_subnetpools": "field:subnetpools:shared=True",
     "shared_address_scopes": "field:address_scopes:shared=True",
     "external": "field:networks:router:external=True",
@@ -16,11 +17,9 @@
 
     "create_subnet": "rule:admin_or_network_owner",
     "create_subnet:segment_id": "rule:admin_only",
-    "create_subnet:service_types": "rule:admin_only",
     "get_subnet": "rule:admin_or_owner or rule:shared",
     "get_subnet:segment_id": "rule:admin_only",
     "update_subnet": "rule:admin_or_network_owner",
-    "update_subnet:service_types": "rule:admin_only",
     "delete_subnet": "rule:admin_or_network_owner",
 
     "create_subnetpool": "",
@@ -94,7 +93,6 @@
     "update_port:binding:profile": "rule:admin_only",
     "update_port:mac_learning_enabled": "rule:context_is_advsvc or rule:admin_or_network_owner",
     "update_port:allowed_address_pairs": "rule:admin_or_network_owner",
-    "update_port:data_plane_status": "rule:admin_or_data_plane_int",
     "delete_port": "rule:context_is_advsvc or rule:admin_owner_or_network_owner",
 
     "get_router:ha": "rule:admin_only",
@@ -104,9 +102,6 @@
     "create_router:ha": "rule:admin_only",
     "get_router": "rule:admin_or_owner",
     "get_router:distributed": "rule:admin_only",
-    "update_router": "rule:admin_or_owner",
-    "update_router:external_gateway_info": "rule:admin_or_owner",
-    "update_router:external_gateway_info:network_id": "rule:admin_or_owner",
     "update_router:external_gateway_info:enable_snat": "rule:admin_only",
     "update_router:distributed": "rule:admin_only",
     "update_router:ha": "rule:admin_only",
@@ -117,6 +112,28 @@
 
     "create_router:external_gateway_info:external_fixed_ips": "rule:admin_only",
     "update_router:external_gateway_info:external_fixed_ips": "rule:admin_only",
+
+    "create_firewall": "",
+    "get_firewall": "rule:admin_or_owner",
+    "create_firewall:shared": "rule:admin_only",
+    "get_firewall:shared": "rule:admin_only",
+    "update_firewall": "rule:admin_or_owner",
+    "update_firewall:shared": "rule:admin_only",
+    "delete_firewall": "rule:admin_or_owner",
+
+    "create_firewall_policy": "",
+    "get_firewall_policy": "rule:admin_or_owner or rule:shared_firewall_policies",
+    "create_firewall_policy:shared": "rule:admin_or_owner",
+    "update_firewall_policy": "rule:admin_or_owner",
+    "delete_firewall_policy": "rule:admin_or_owner",
+
+    "insert_rule": "rule:admin_or_owner",
+    "remove_rule": "rule:admin_or_owner",
+
+    "create_firewall_rule": "",
+    "get_firewall_rule": "rule:admin_or_owner or rule:shared_firewalls",
+    "update_firewall_rule": "rule:admin_or_owner",
+    "delete_firewall_rule": "rule:admin_or_owner",
 
     "create_qos_queue": "rule:admin_only",
     "get_qos_queue": "rule:admin_only",
@@ -189,10 +206,6 @@
     "delete_policy_dscp_marking_rule": "rule:admin_only",
     "update_policy_dscp_marking_rule": "rule:admin_only",
     "get_rule_type": "rule:regular_user",
-    "get_policy_minimum_bandwidth_rule": "rule:regular_user",
-    "create_policy_minimum_bandwidth_rule": "rule:admin_only",
-    "delete_policy_minimum_bandwidth_rule": "rule:admin_only",
-    "update_policy_minimum_bandwidth_rule": "rule:admin_only",
 
     "restrict_wildcard": "(not field:rbac_policy:target_tenant=*) or rule:admin_only",
     "create_rbac_policy": "",
@@ -205,29 +218,5 @@
     "create_flavor_service_profile": "rule:admin_only",
     "delete_flavor_service_profile": "rule:admin_only",
     "get_flavor_service_profile": "rule:regular_user",
-    "get_auto_allocated_topology": "rule:admin_or_owner",
-
-    "create_trunk": "rule:regular_user",
-    "get_trunk": "rule:admin_or_owner",
-    "delete_trunk": "rule:admin_or_owner",
-    "get_subports": "",
-    "add_subports": "rule:admin_or_owner",
-    "remove_subports": "rule:admin_or_owner",
-
-    "get_security_groups": "rule:admin_or_owner",
-    "get_security_group": "rule:admin_or_owner",
-    "create_security_group": "rule:admin_or_owner",
-    "update_security_group": "rule:admin_or_owner",
-    "delete_security_group": "rule:admin_or_owner",
-    "get_security_group_rules": "rule:admin_or_owner",
-    "get_security_group_rule": "rule:admin_or_owner",
-    "create_security_group_rule": "rule:admin_or_owner",
-    "delete_security_group_rule": "rule:admin_or_owner",
-
-    "get_loggable_resources": "rule:admin_only",
-    "create_log": "rule:admin_only",
-    "update_log": "rule:admin_only",
-    "delete_log": "rule:admin_only",
-    "get_logs": "rule:admin_only",
-    "get_log": "rule:admin_only"
+    "get_auto_allocated_topology": "rule:admin_or_owner"
 }

2018-09-07 22:30:31,959 [salt.state       :1941][INFO    ][7029] Completed state [/usr/share/openstack-dashboard/openstack_dashboard/conf/neutron_policy.json] at time 22:30:31.959094 duration_in_ms=40.786
2018-09-07 22:30:31,966 [salt.state       :1770][INFO    ][7029] Running state [/usr/share/openstack-dashboard/openstack_dashboard/conf/glance_policy.json] at time 22:30:31.966294
2018-09-07 22:30:31,966 [salt.state       :1803][INFO    ][7029] Executing state file.managed for [/usr/share/openstack-dashboard/openstack_dashboard/conf/glance_policy.json]
2018-09-07 22:30:31,987 [salt.fileclient  :1215][INFO    ][7029] Fetching file from saltenv 'base', ** done ** 'horizon/files/policy/queens/glance_policy.json'
2018-09-07 22:30:31,990 [salt.state       :290 ][INFO    ][7029] File changed:
--- 
+++ 
@@ -8,7 +8,6 @@
     "get_images": "",
     "modify_image": "",
     "publicize_image": "role:admin",
-    "communitize_image": "",
     "copy_from": "",
 
     "download_image": "",
@@ -26,11 +25,10 @@
 
     "manage_image_cache": "role:admin",
 
-    "get_task": "",
-    "get_tasks": "",
-    "add_task": "",
-    "modify_task": "",
-    "tasks_api_access": "role:admin",
+    "get_task": "role:admin",
+    "get_tasks": "role:admin",
+    "add_task": "role:admin",
+    "modify_task": "role:admin",
 
     "deactivate": "",
     "reactivate": "",

2018-09-07 22:30:31,990 [salt.state       :1941][INFO    ][7029] Completed state [/usr/share/openstack-dashboard/openstack_dashboard/conf/glance_policy.json] at time 22:30:31.990340 duration_in_ms=24.046
2018-09-07 22:30:31,991 [salt.state       :1770][INFO    ][7029] Running state [/usr/share/openstack-dashboard/openstack_dashboard/conf/ceilometer_policy.json] at time 22:30:31.990970
2018-09-07 22:30:31,995 [salt.state       :1803][INFO    ][7029] Executing state file.managed for [/usr/share/openstack-dashboard/openstack_dashboard/conf/ceilometer_policy.json]
2018-09-07 22:30:32,014 [salt.fileclient  :1215][INFO    ][7029] Fetching file from saltenv 'base', ** done ** 'horizon/files/policy/queens/ceilometer_policy.json'
2018-09-07 22:30:32,016 [salt.state       :290 ][INFO    ][7029] File changed:
New file
2018-09-07 22:30:32,016 [salt.state       :1941][INFO    ][7029] Completed state [/usr/share/openstack-dashboard/openstack_dashboard/conf/ceilometer_policy.json] at time 22:30:32.016531 duration_in_ms=25.561
2018-09-07 22:30:32,017 [salt.state       :1770][INFO    ][7029] Running state [/usr/share/openstack-dashboard/openstack_dashboard/conf/cinder_policy.json] at time 22:30:32.017049
2018-09-07 22:30:32,017 [salt.state       :1803][INFO    ][7029] Executing state file.managed for [/usr/share/openstack-dashboard/openstack_dashboard/conf/cinder_policy.json]
2018-09-07 22:30:32,035 [salt.fileclient  :1215][INFO    ][7029] Fetching file from saltenv 'base', ** done ** 'horizon/files/policy/queens/cinder_policy.json'
2018-09-07 22:30:32,037 [salt.state       :290 ][INFO    ][7029] File changed:
--- 
+++ 
@@ -1,136 +1,113 @@
 {
     "context_is_admin": "role:admin",
-    "admin_or_owner": "is_admin:True or (role:admin and is_admin_project:True) or  project_id:%(project_id)s",
-    "admin_api": "is_admin:True or (role:admin and is_admin_project:True)",
-    "volume:attachment_create": "",
-    "volume:attachment_update": "rule:admin_or_owner",
-    "volume:attachment_delete": "rule:admin_or_owner",
-    "message:get_all": "rule:admin_or_owner",
-    "message:get": "rule:admin_or_owner",
-    "message:delete": "rule:admin_or_owner",
-    "clusters:get_all": "rule:admin_api",
-    "clusters:get": "rule:admin_api",
-    "clusters:update": "rule:admin_api",
-    "workers:cleanup": "rule:admin_api",
+    "admin_or_owner":  "is_admin:True or project_id:%(project_id)s",
+    "default": "rule:admin_or_owner",
+
+    "admin_api": "is_admin:True",
+
+    "volume:create": "",
+    "volume:delete": "rule:admin_or_owner",
+    "volume:get": "rule:admin_or_owner",
+    "volume:get_all": "rule:admin_or_owner",
+    "volume:get_volume_metadata": "rule:admin_or_owner",
+    "volume:delete_volume_metadata": "rule:admin_or_owner",
+    "volume:update_volume_metadata": "rule:admin_or_owner",
+    "volume:get_volume_admin_metadata": "rule:admin_api",
+    "volume:update_volume_admin_metadata": "rule:admin_api",
+    "volume:get_snapshot": "rule:admin_or_owner",
+    "volume:get_all_snapshots": "rule:admin_or_owner",
+    "volume:create_snapshot": "rule:admin_or_owner",
+    "volume:delete_snapshot": "rule:admin_or_owner",
+    "volume:update_snapshot": "rule:admin_or_owner",
     "volume:get_snapshot_metadata": "rule:admin_or_owner",
+    "volume:delete_snapshot_metadata": "rule:admin_or_owner",
     "volume:update_snapshot_metadata": "rule:admin_or_owner",
-    "volume:delete_snapshot_metadata": "rule:admin_or_owner",
-    "volume:get_all_snapshots": "rule:admin_or_owner",
-    "volume_extension:extended_snapshot_attributes": "rule:admin_or_owner",
-    "volume:create_snapshot": "rule:admin_or_owner",
-    "volume:get_snapshot": "rule:admin_or_owner",
-    "volume:update_snapshot": "rule:admin_or_owner",
-    "volume:delete_snapshot": "rule:admin_or_owner",
-    "volume_extension:snapshot_admin_actions:reset_status": "rule:admin_api",
-    "snapshot_extension:snapshot_actions:update_snapshot_status": "",
-    "volume_extension:snapshot_admin_actions:force_delete": "rule:admin_api",
-    "snapshot_extension:list_manageable": "rule:admin_api",
-    "snapshot_extension:snapshot_manage": "rule:admin_api",
-    "snapshot_extension:snapshot_unmanage": "rule:admin_api",
-    "backup:get_all": "rule:admin_or_owner",
-    "backup:backup_project_attribute": "rule:admin_api",
-    "backup:create": "",
-    "backup:get": "rule:admin_or_owner",
-    "backup:update": "rule:admin_or_owner",
-    "backup:delete": "rule:admin_or_owner",
-    "backup:restore": "rule:admin_or_owner",
-    "backup:backup-import": "rule:admin_api",
-    "backup:export-import": "rule:admin_api",
-    "volume_extension:backup_admin_actions:reset_status": "rule:admin_api",
-    "volume_extension:backup_admin_actions:force_delete": "rule:admin_api",
-    "group:get_all": "rule:admin_or_owner",
-    "group:create": "",
-    "group:get": "rule:admin_or_owner",
-    "group:update": "rule:admin_or_owner",
-    "group:group_types_manage": "rule:admin_api",
-    "group:access_group_types_specs": "rule:admin_api",
-    "group:group_types_specs": "rule:admin_api",
-    "group:get_all_group_snapshots": "rule:admin_or_owner",
-    "group:create_group_snapshot": "",
-    "group:get_group_snapshot": "rule:admin_or_owner",
-    "group:delete_group_snapshot": "rule:admin_or_owner",
-    "group:update_group_snapshot": "rule:admin_or_owner",
-    "group:reset_group_snapshot_status": "rule:admin_or_owner",
-    "group:delete": "rule:admin_or_owner",
-    "group:reset_status": "rule:admin_api",
-    "group:enable_replication": "rule:admin_or_owner",
-    "group:disable_replication": "rule:admin_or_owner",
-    "group:failover_replication": "rule:admin_or_owner",
-    "group:list_replication_targets": "rule:admin_or_owner",
-    "volume_extension:qos_specs_manage:get_all": "rule:admin_api",
-    "volume_extension:qos_specs_manage:get": "rule:admin_api",
-    "volume_extension:qos_specs_manage:create": "rule:admin_api",
-    "volume_extension:qos_specs_manage:update": "rule:admin_api",
-    "volume_extension:qos_specs_manage:delete": "rule:admin_api",
-    "volume_extension:quota_classes": "rule:admin_api",
-    "volume_extension:quotas:show": "rule:admin_or_owner",
-    "volume_extension:quotas:update": "rule:admin_api",
-    "volume_extension:quotas:delete": "rule:admin_api",
-    "volume_extension:quota_classes:validate_setup_for_nested_quota_use": "rule:admin_api",
-    "volume_extension:capabilities": "rule:admin_api",
-    "volume_extension:services:index": "rule:admin_api",
-    "volume_extension:services:update": "rule:admin_api",
-    "volume:freeze_host": "rule:admin_api",
-    "volume:thaw_host": "rule:admin_api",
-    "volume:failover_host": "rule:admin_api",
-    "scheduler_extension:scheduler_stats:get_pools": "rule:admin_api",
-    "volume_extension:hosts": "rule:admin_api",
-    "limits_extension:used_limits": "rule:admin_or_owner",
-    "volume_extension:list_manageable": "rule:admin_api",
-    "volume_extension:volume_manage": "rule:admin_api",
-    "volume_extension:volume_unmanage": "rule:admin_api",
+    "volume:extend": "rule:admin_or_owner",
+    "volume:update_readonly_flag": "rule:admin_or_owner",
+    "volume:retype": "rule:admin_or_owner",
+    "volume:update": "rule:admin_or_owner",
+
     "volume_extension:types_manage": "rule:admin_api",
-    "volume_extension:volume_type_encryption": "rule:admin_api",
+    "volume_extension:types_extra_specs": "rule:admin_api",
+    "volume_extension:access_types_qos_specs_id": "rule:admin_api",
     "volume_extension:access_types_extra_specs": "rule:admin_api",
-    "volume_extension:access_types_qos_specs_id": "rule:admin_api",
     "volume_extension:volume_type_access": "rule:admin_or_owner",
     "volume_extension:volume_type_access:addProjectAccess": "rule:admin_api",
     "volume_extension:volume_type_access:removeProjectAccess": "rule:admin_api",
-    "volume:extend": "rule:admin_or_owner",
-    "volume:extend_attached_volume": "rule:admin_or_owner",
-    "volume:revert_to_snapshot": "rule:admin_or_owner",
+    "volume_extension:volume_type_encryption": "rule:admin_api",
+    "volume_extension:volume_encryption_metadata": "rule:admin_or_owner",
+    "volume_extension:extended_snapshot_attributes": "rule:admin_or_owner",
+    "volume_extension:volume_image_metadata": "rule:admin_or_owner",
+
+    "volume_extension:quotas:show": "",
+    "volume_extension:quotas:update": "rule:admin_api",
+    "volume_extension:quotas:delete": "rule:admin_api",
+    "volume_extension:quota_classes": "rule:admin_api",
+    "volume_extension:quota_classes:validate_setup_for_nested_quota_use": "rule:admin_api",
+
     "volume_extension:volume_admin_actions:reset_status": "rule:admin_api",
-    "volume:retype": "rule:admin_or_owner",
-    "volume:update_readonly_flag": "rule:admin_or_owner",
+    "volume_extension:snapshot_admin_actions:reset_status": "rule:admin_api",
+    "volume_extension:backup_admin_actions:reset_status": "rule:admin_api",
     "volume_extension:volume_admin_actions:force_delete": "rule:admin_api",
+    "volume_extension:volume_admin_actions:force_detach": "rule:admin_api",
+    "volume_extension:snapshot_admin_actions:force_delete": "rule:admin_api",
+    "volume_extension:backup_admin_actions:force_delete": "rule:admin_api",
+    "volume_extension:volume_admin_actions:migrate_volume": "rule:admin_api",
+    "volume_extension:volume_admin_actions:migrate_volume_completion": "rule:admin_api",
+
     "volume_extension:volume_actions:upload_public": "rule:admin_api",
     "volume_extension:volume_actions:upload_image": "rule:admin_or_owner",
-    "volume_extension:volume_admin_actions:force_detach": "rule:admin_api",
-    "volume_extension:volume_admin_actions:migrate_volume": "rule:admin_api",
-    "volume_extension:volume_admin_actions:migrate_volume_completion": "rule:admin_api",
-    "volume_extension:volume_actions:initialize_connection": "rule:admin_or_owner",
-    "volume_extension:volume_actions:terminate_connection": "rule:admin_or_owner",
-    "volume_extension:volume_actions:roll_detaching": "rule:admin_or_owner",
-    "volume_extension:volume_actions:reserve": "rule:admin_or_owner",
-    "volume_extension:volume_actions:unreserve": "rule:admin_or_owner",
-    "volume_extension:volume_actions:begin_detaching": "rule:admin_or_owner",
-    "volume_extension:volume_actions:attach": "rule:admin_or_owner",
-    "volume_extension:volume_actions:detach": "rule:admin_or_owner",
-    "volume:get_all_transfers": "rule:admin_or_owner",
-    "volume:create_transfer": "rule:admin_or_owner",
-    "volume:get_transfer": "rule:admin_or_owner",
-    "volume:accept_transfer": "",
-    "volume:delete_transfer": "rule:admin_or_owner",
-    "volume:get_volume_metadata": "rule:admin_or_owner",
-    "volume:create_volume_metadata": "rule:admin_or_owner",
-    "volume:update_volume_metadata": "rule:admin_or_owner",
-    "volume:delete_volume_metadata": "rule:admin_or_owner",
-    "volume_extension:volume_image_metadata": "rule:admin_or_owner",
-    "volume:update_volume_admin_metadata": "rule:admin_api",
-    "volume_extension:types_extra_specs:index": "rule:admin_api",
-    "volume_extension:types_extra_specs:create": "rule:admin_api",
-    "volume_extension:types_extra_specs:show": "rule:admin_api",
-    "volume_extension:types_extra_specs:update": "rule:admin_api",
-    "volume_extension:types_extra_specs:delete": "rule:admin_api",
-    "volume:create": "",
-    "volume:create_from_image": "",
-    "volume:get": "rule:admin_or_owner",
-    "volume:get_all": "rule:admin_or_owner",
-    "volume:update": "rule:admin_or_owner",
-    "volume:delete": "rule:admin_or_owner",
-    "volume:force_delete": "rule:admin_api",
+
     "volume_extension:volume_host_attribute": "rule:admin_api",
     "volume_extension:volume_tenant_attribute": "rule:admin_or_owner",
     "volume_extension:volume_mig_status_attribute": "rule:admin_api",
-    "volume_extension:volume_encryption_metadata": "rule:admin_or_owner"
+    "volume_extension:hosts": "rule:admin_api",
+    "volume_extension:services:index": "rule:admin_api",
+    "volume_extension:services:update" : "rule:admin_api",
+
+    "volume_extension:volume_manage": "rule:admin_api",
+    "volume_extension:volume_unmanage": "rule:admin_api",
+
+    "volume_extension:capabilities": "rule:admin_api",
+
+    "volume:create_transfer": "rule:admin_or_owner",
+    "volume:accept_transfer": "",
+    "volume:delete_transfer": "rule:admin_or_owner",
+    "volume:get_transfer": "rule:admin_or_owner",
+    "volume:get_all_transfers": "rule:admin_or_owner",
+
+    "volume_extension:replication:promote": "rule:admin_api",
+    "volume_extension:replication:reenable": "rule:admin_api",
+
+    "volume:failover_host": "rule:admin_api",
+    "volume:freeze_host": "rule:admin_api",
+    "volume:thaw_host": "rule:admin_api",
+
+    "backup:create" : "",
+    "backup:delete": "rule:admin_or_owner",
+    "backup:get": "rule:admin_or_owner",
+    "backup:get_all": "rule:admin_or_owner",
+    "backup:restore": "rule:admin_or_owner",
+    "backup:backup-import": "rule:admin_api",
+    "backup:backup-export": "rule:admin_api",
+
+    "snapshot_extension:snapshot_actions:update_snapshot_status": "",
+    "snapshot_extension:snapshot_manage": "rule:admin_api",
+    "snapshot_extension:snapshot_unmanage": "rule:admin_api",
+
+    "consistencygroup:create" : "group:nobody",
+    "consistencygroup:delete": "group:nobody",
+    "consistencygroup:update": "group:nobody",
+    "consistencygroup:get": "group:nobody",
+    "consistencygroup:get_all": "group:nobody",
+
+    "consistencygroup:create_cgsnapshot" : "group:nobody",
+    "consistencygroup:delete_cgsnapshot": "group:nobody",
+    "consistencygroup:get_cgsnapshot": "group:nobody",
+    "consistencygroup:get_all_cgsnapshots": "group:nobody",
+
+    "scheduler_extension:scheduler_stats:get_pools" : "rule:admin_api",
+    "message:delete": "rule:admin_or_owner",
+    "message:get": "rule:admin_or_owner",
+    "message:get_all": "rule:admin_or_owner"
 }

2018-09-07 22:30:32,038 [salt.state       :1941][INFO    ][7029] Completed state [/usr/share/openstack-dashboard/openstack_dashboard/conf/cinder_policy.json] at time 22:30:32.038530 duration_in_ms=21.48
2018-09-07 22:30:32,039 [salt.state       :1770][INFO    ][7029] Running state [/usr/share/openstack-dashboard/openstack_dashboard/conf/heat_policy.json] at time 22:30:32.039334
2018-09-07 22:30:32,039 [salt.state       :1803][INFO    ][7029] Executing state file.managed for [/usr/share/openstack-dashboard/openstack_dashboard/conf/heat_policy.json]
2018-09-07 22:30:32,055 [salt.fileclient  :1215][INFO    ][7029] Fetching file from saltenv 'base', ** done ** 'horizon/files/policy/queens/heat_policy.json'
2018-09-07 22:30:32,057 [salt.state       :290 ][INFO    ][7029] File changed:
New file
2018-09-07 22:30:32,057 [salt.state       :1941][INFO    ][7029] Completed state [/usr/share/openstack-dashboard/openstack_dashboard/conf/heat_policy.json] at time 22:30:32.057192 duration_in_ms=17.858
2018-09-07 22:30:32,057 [salt.state       :1770][INFO    ][7029] Running state [/usr/share/openstack-dashboard/openstack_dashboard/conf/keystone_policy.json] at time 22:30:32.057716
2018-09-07 22:30:32,057 [salt.state       :1803][INFO    ][7029] Executing state file.managed for [/usr/share/openstack-dashboard/openstack_dashboard/conf/keystone_policy.json]
2018-09-07 22:30:32,073 [salt.fileclient  :1215][INFO    ][7029] Fetching file from saltenv 'base', ** done ** 'horizon/files/policy/queens/keystone_policy.json'
2018-09-07 22:30:32,076 [salt.state       :290 ][INFO    ][7029] File changed:
--- 
+++ 
@@ -2,50 +2,137 @@
     "admin_required": "role:admin or is_admin:1",
     "service_role": "role:service",
     "service_or_admin": "rule:admin_required or rule:service_role",
-    "owner": "user_id:%(user_id)s",
+    "owner" : "user_id:%(user_id)s",
     "admin_or_owner": "rule:admin_required or rule:owner",
     "token_subject": "user_id:%(target.token.user_id)s",
     "admin_or_token_subject": "rule:admin_required or rule:token_subject",
     "service_admin_or_token_subject": "rule:service_or_admin or rule:token_subject",
-    "identity:authorize_request_token": "rule:admin_required",
-    "identity:get_access_token": "rule:admin_required",
-    "identity:get_access_token_role": "rule:admin_required",
-    "identity:list_access_tokens": "rule:admin_required",
-    "identity:list_access_token_roles": "rule:admin_required",
-    "identity:delete_access_token": "rule:admin_required",
-    "identity:get_auth_catalog": "",
-    "identity:get_auth_projects": "",
-    "identity:get_auth_domains": "",
-    "identity:get_consumer": "rule:admin_required",
-    "identity:list_consumers": "rule:admin_required",
-    "identity:create_consumer": "rule:admin_required",
-    "identity:update_consumer": "rule:admin_required",
-    "identity:delete_consumer": "rule:admin_required",
+
+    "default": "rule:admin_required",
+
+    "identity:get_region": "",
+    "identity:list_regions": "",
+    "identity:create_region": "rule:admin_required",
+    "identity:update_region": "rule:admin_required",
+    "identity:delete_region": "rule:admin_required",
+
+    "identity:get_service": "rule:admin_required",
+    "identity:list_services": "rule:admin_required",
+    "identity:create_service": "rule:admin_required",
+    "identity:update_service": "rule:admin_required",
+    "identity:delete_service": "rule:admin_required",
+
+    "identity:get_endpoint": "rule:admin_required",
+    "identity:list_endpoints": "rule:admin_required",
+    "identity:create_endpoint": "rule:admin_required",
+    "identity:update_endpoint": "rule:admin_required",
+    "identity:delete_endpoint": "rule:admin_required",
+
+    "identity:get_domain": "rule:admin_required",
+    "identity:list_domains": "rule:admin_required",
+    "identity:create_domain": "rule:admin_required",
+    "identity:update_domain": "rule:admin_required",
+    "identity:delete_domain": "rule:admin_required",
+
+    "identity:get_project": "rule:admin_required or project_id:%(target.project.id)s",
+    "identity:list_projects": "rule:admin_required",
+    "identity:list_user_projects": "rule:admin_or_owner",
+    "identity:create_project": "rule:admin_required",
+    "identity:update_project": "rule:admin_required",
+    "identity:delete_project": "rule:admin_required",
+
+    "identity:get_user": "rule:admin_required",
+    "identity:list_users": "rule:admin_required",
+    "identity:create_user": "rule:admin_required",
+    "identity:update_user": "rule:admin_required",
+    "identity:delete_user": "rule:admin_required",
+    "identity:change_password": "rule:admin_or_owner",
+
+    "identity:get_group": "rule:admin_required",
+    "identity:list_groups": "rule:admin_required",
+    "identity:list_groups_for_user": "rule:admin_or_owner",
+    "identity:create_group": "rule:admin_required",
+    "identity:update_group": "rule:admin_required",
+    "identity:delete_group": "rule:admin_required",
+    "identity:list_users_in_group": "rule:admin_required",
+    "identity:remove_user_from_group": "rule:admin_required",
+    "identity:check_user_in_group": "rule:admin_required",
+    "identity:add_user_to_group": "rule:admin_required",
+
     "identity:get_credential": "rule:admin_required",
     "identity:list_credentials": "rule:admin_required",
     "identity:create_credential": "rule:admin_required",
     "identity:update_credential": "rule:admin_required",
     "identity:delete_credential": "rule:admin_required",
-    "identity:get_domain": "rule:admin_required or token.project.domain.id:%(target.domain.id)s",
-    "identity:list_domains": "rule:admin_required",
-    "identity:create_domain": "rule:admin_required",
-    "identity:update_domain": "rule:admin_required",
-    "identity:delete_domain": "rule:admin_required",
-    "identity:create_domain_config": "rule:admin_required",
-    "identity:get_domain_config": "rule:admin_required",
-    "identity:get_security_compliance_domain_config": "",
-    "identity:update_domain_config": "rule:admin_required",
-    "identity:delete_domain_config": "rule:admin_required",
-    "identity:get_domain_config_default": "rule:admin_required",
+
     "identity:ec2_get_credential": "rule:admin_required or (rule:owner and user_id:%(target.credential.user_id)s)",
     "identity:ec2_list_credentials": "rule:admin_or_owner",
     "identity:ec2_create_credential": "rule:admin_or_owner",
     "identity:ec2_delete_credential": "rule:admin_required or (rule:owner and user_id:%(target.credential.user_id)s)",
-    "identity:get_endpoint": "rule:admin_required",
-    "identity:list_endpoints": "rule:admin_required",
-    "identity:create_endpoint": "rule:admin_required",
-    "identity:update_endpoint": "rule:admin_required",
-    "identity:delete_endpoint": "rule:admin_required",
+
+    "identity:get_role": "rule:admin_required",
+    "identity:list_roles": "rule:admin_required",
+    "identity:create_role": "rule:admin_required",
+    "identity:update_role": "rule:admin_required",
+    "identity:delete_role": "rule:admin_required",
+    "identity:get_domain_role": "rule:admin_required",
+    "identity:list_domain_roles": "rule:admin_required",
+    "identity:create_domain_role": "rule:admin_required",
+    "identity:update_domain_role": "rule:admin_required",
+    "identity:delete_domain_role": "rule:admin_required",
+
+    "identity:get_implied_role": "rule:admin_required ",
+    "identity:list_implied_roles": "rule:admin_required",
+    "identity:create_implied_role": "rule:admin_required",
+    "identity:delete_implied_role": "rule:admin_required",
+    "identity:list_role_inference_rules": "rule:admin_required",
+    "identity:check_implied_role": "rule:admin_required",
+
+    "identity:check_grant": "rule:admin_required",
+    "identity:list_grants": "rule:admin_required",
+    "identity:create_grant": "rule:admin_required",
+    "identity:revoke_grant": "rule:admin_required",
+
+    "identity:list_role_assignments": "rule:admin_required",
+    "identity:list_role_assignments_for_tree": "rule:admin_required",
+
+    "identity:get_policy": "rule:admin_required",
+    "identity:list_policies": "rule:admin_required",
+    "identity:create_policy": "rule:admin_required",
+    "identity:update_policy": "rule:admin_required",
+    "identity:delete_policy": "rule:admin_required",
+
+    "identity:check_token": "rule:admin_or_token_subject",
+    "identity:validate_token": "rule:service_admin_or_token_subject",
+    "identity:validate_token_head": "rule:service_or_admin",
+    "identity:revocation_list": "rule:service_or_admin",
+    "identity:revoke_token": "rule:admin_or_token_subject",
+
+    "identity:create_trust": "user_id:%(trust.trustor_user_id)s",
+    "identity:list_trusts": "",
+    "identity:list_roles_for_trust": "",
+    "identity:get_role_for_trust": "",
+    "identity:delete_trust": "",
+
+    "identity:create_consumer": "rule:admin_required",
+    "identity:get_consumer": "rule:admin_required",
+    "identity:list_consumers": "rule:admin_required",
+    "identity:delete_consumer": "rule:admin_required",
+    "identity:update_consumer": "rule:admin_required",
+
+    "identity:authorize_request_token": "rule:admin_required",
+    "identity:list_access_token_roles": "rule:admin_required",
+    "identity:get_access_token_role": "rule:admin_required",
+    "identity:list_access_tokens": "rule:admin_required",
+    "identity:get_access_token": "rule:admin_required",
+    "identity:delete_access_token": "rule:admin_required",
+
+    "identity:list_projects_for_endpoint": "rule:admin_required",
+    "identity:add_endpoint_to_project": "rule:admin_required",
+    "identity:check_endpoint_in_project": "rule:admin_required",
+    "identity:list_endpoints_for_project": "rule:admin_required",
+    "identity:remove_endpoint_from_project": "rule:admin_required",
+
     "identity:create_endpoint_group": "rule:admin_required",
     "identity:list_endpoint_groups": "rule:admin_required",
     "identity:get_endpoint_group": "rule:admin_required",
@@ -57,41 +144,40 @@
     "identity:list_endpoint_groups_for_project": "rule:admin_required",
     "identity:add_endpoint_group_to_project": "rule:admin_required",
     "identity:remove_endpoint_group_from_project": "rule:admin_required",
-    "identity:check_grant": "rule:admin_required",
-    "identity:list_grants": "rule:admin_required",
-    "identity:create_grant": "rule:admin_required",
-    "identity:revoke_grant": "rule:admin_required",
-    "identity:get_group": "rule:admin_required",
-    "identity:list_groups": "rule:admin_required",
-    "identity:list_groups_for_user": "rule:admin_or_owner",
-    "identity:create_group": "rule:admin_required",
-    "identity:update_group": "rule:admin_required",
-    "identity:delete_group": "rule:admin_required",
-    "identity:list_users_in_group": "rule:admin_required",
-    "identity:remove_user_from_group": "rule:admin_required",
-    "identity:check_user_in_group": "rule:admin_required",
-    "identity:add_user_to_group": "rule:admin_required",
+
     "identity:create_identity_provider": "rule:admin_required",
     "identity:list_identity_providers": "rule:admin_required",
-    "identity:get_identity_provider": "rule:admin_required",
+    "identity:get_identity_providers": "rule:admin_required",
     "identity:update_identity_provider": "rule:admin_required",
     "identity:delete_identity_provider": "rule:admin_required",
-    "identity:get_implied_role": "rule:admin_required",
-    "identity:list_implied_roles": "rule:admin_required",
-    "identity:create_implied_role": "rule:admin_required",
-    "identity:delete_implied_role": "rule:admin_required",
-    "identity:list_role_inference_rules": "rule:admin_required",
-    "identity:check_implied_role": "rule:admin_required",
+
+    "identity:create_protocol": "rule:admin_required",
+    "identity:update_protocol": "rule:admin_required",
+    "identity:get_protocol": "rule:admin_required",
+    "identity:list_protocols": "rule:admin_required",
+    "identity:delete_protocol": "rule:admin_required",
+
     "identity:create_mapping": "rule:admin_required",
     "identity:get_mapping": "rule:admin_required",
     "identity:list_mappings": "rule:admin_required",
     "identity:delete_mapping": "rule:admin_required",
     "identity:update_mapping": "rule:admin_required",
-    "identity:get_policy": "rule:admin_required",
-    "identity:list_policies": "rule:admin_required",
-    "identity:create_policy": "rule:admin_required",
-    "identity:update_policy": "rule:admin_required",
-    "identity:delete_policy": "rule:admin_required",
+
+    "identity:create_service_provider": "rule:admin_required",
+    "identity:list_service_providers": "rule:admin_required",
+    "identity:get_service_provider": "rule:admin_required",
+    "identity:update_service_provider": "rule:admin_required",
+    "identity:delete_service_provider": "rule:admin_required",
+
+    "identity:get_auth_catalog": "",
+    "identity:get_auth_projects": "",
+    "identity:get_auth_domains": "",
+
+    "identity:list_projects_for_groups": "",
+    "identity:list_domains_for_groups": "",
+
+    "identity:list_revoke_events": "",
+
     "identity:create_policy_association_for_endpoint": "rule:admin_required",
     "identity:check_policy_association_for_endpoint": "rule:admin_required",
     "identity:delete_policy_association_for_endpoint": "rule:admin_required",
@@ -103,72 +189,10 @@
     "identity:delete_policy_association_for_region_and_service": "rule:admin_required",
     "identity:get_policy_for_endpoint": "rule:admin_required",
     "identity:list_endpoints_for_policy": "rule:admin_required",
-    "identity:get_project": "rule:admin_required or project_id:%(target.project.id)s",
-    "identity:list_projects": "rule:admin_required",
-    "identity:list_user_projects": "rule:admin_or_owner",
-    "identity:create_project": "rule:admin_required",
-    "identity:update_project": "rule:admin_required",
-    "identity:delete_project": "rule:admin_required",
-    "identity:list_project_tags": "rule:admin_required or project_id:%(target.project.id)s",
-    "identity:get_project_tag": "rule:admin_required or project_id:%(target.project.id)s",
-    "identity:update_project_tags": "rule:admin_required",
-    "identity:create_project_tag": "rule:admin_required",
-    "identity:delete_project_tags": "rule:admin_required",
-    "identity:delete_project_tag": "rule:admin_required",
-    "identity:list_projects_for_endpoint": "rule:admin_required",
-    "identity:add_endpoint_to_project": "rule:admin_required",
-    "identity:check_endpoint_in_project": "rule:admin_required",
-    "identity:list_endpoints_for_project": "rule:admin_required",
-    "identity:remove_endpoint_from_project": "rule:admin_required",
-    "identity:create_protocol": "rule:admin_required",
-    "identity:update_protocol": "rule:admin_required",
-    "identity:get_protocol": "rule:admin_required",
-    "identity:list_protocols": "rule:admin_required",
-    "identity:delete_protocol": "rule:admin_required",
-    "identity:get_region": "",
-    "identity:list_regions": "",
-    "identity:create_region": "rule:admin_required",
-    "identity:update_region": "rule:admin_required",
-    "identity:delete_region": "rule:admin_required",
-    "identity:list_revoke_events": "rule:service_or_admin",
-    "identity:get_role": "rule:admin_required",
-    "identity:list_roles": "rule:admin_required",
-    "identity:create_role": "rule:admin_required",
-    "identity:update_role": "rule:admin_required",
-    "identity:delete_role": "rule:admin_required",
-    "identity:get_domain_role": "rule:admin_required",
-    "identity:list_domain_roles": "rule:admin_required",
-    "identity:create_domain_role": "rule:admin_required",
-    "identity:update_domain_role": "rule:admin_required",
-    "identity:delete_domain_role": "rule:admin_required",
-    "identity:list_role_assignments": "rule:admin_required",
-    "identity:list_role_assignments_for_tree": "rule:admin_required",
-    "identity:get_service": "rule:admin_required",
-    "identity:list_services": "rule:admin_required",
-    "identity:create_service": "rule:admin_required",
-    "identity:update_service": "rule:admin_required",
-    "identity:delete_service": "rule:admin_required",
-    "identity:create_service_provider": "rule:admin_required",
-    "identity:list_service_providers": "rule:admin_required",
-    "identity:get_service_provider": "rule:admin_required",
-    "identity:update_service_provider": "rule:admin_required",
-    "identity:delete_service_provider": "rule:admin_required",
-    "identity:revocation_list": "rule:service_or_admin",
-    "identity:check_token": "rule:admin_or_token_subject",
-    "identity:validate_token": "rule:service_admin_or_token_subject",
-    "identity:validate_token_head": "rule:service_or_admin",
-    "identity:revoke_token": "rule:admin_or_token_subject",
-    "identity:create_trust": "user_id:%(trust.trustor_user_id)s",
-    "identity:list_trusts": "",
-    "identity:list_roles_for_trust": "",
-    "identity:get_role_for_trust": "",
-    "identity:delete_trust": "",
-    "identity:get_trust": "",
-    "identity:get_user": "rule:admin_or_owner",
-    "identity:list_users": "rule:admin_required",
-    "identity:list_projects_for_user": "",
-    "identity:list_domains_for_user": "",
-    "identity:create_user": "rule:admin_required",
-    "identity:update_user": "rule:admin_required",
-    "identity:delete_user": "rule:admin_required"
+
+    "identity:create_domain_config": "rule:admin_required",
+    "identity:get_domain_config": "rule:admin_required",
+    "identity:update_domain_config": "rule:admin_required",
+    "identity:delete_domain_config": "rule:admin_required",
+    "identity:get_domain_config_default": "rule:admin_required"
 }

2018-09-07 22:30:32,077 [salt.state       :1941][INFO    ][7029] Completed state [/usr/share/openstack-dashboard/openstack_dashboard/conf/keystone_policy.json] at time 22:30:32.077024 duration_in_ms=19.308
2018-09-07 22:30:32,077 [salt.state       :1770][INFO    ][7029] Running state [/etc/apache2/conf-available/openstack-dashboard.conf] at time 22:30:32.077560
2018-09-07 22:30:32,077 [salt.state       :1803][INFO    ][7029] Executing state file.managed for [/etc/apache2/conf-available/openstack-dashboard.conf]
2018-09-07 22:30:32,100 [salt.fileclient  :1215][INFO    ][7029] Fetching file from saltenv 'base', ** done ** 'horizon/files/openstack-dashboard.conf.Debian'
2018-09-07 22:30:32,204 [salt.state       :290 ][INFO    ][7029] File changed:
New file
2018-09-07 22:30:32,205 [salt.state       :1941][INFO    ][7029] Completed state [/etc/apache2/conf-available/openstack-dashboard.conf] at time 22:30:32.205111 duration_in_ms=127.55
2018-09-07 22:30:32,210 [salt.state       :1770][INFO    ][7029] Running state [wsgi] at time 22:30:32.210893
2018-09-07 22:30:32,211 [salt.state       :1803][INFO    ][7029] Executing state apache_module.enabled for [wsgi]
2018-09-07 22:30:32,214 [salt.loaded.int.module.cmdmod:395 ][INFO    ][7029] Executing command ['a2enmod', 'wsgi'] in directory '/root'
2018-09-07 22:30:32,319 [salt.state       :290 ][INFO    ][7029] {'new': 'wsgi', 'old': None}
2018-09-07 22:30:32,320 [salt.state       :1941][INFO    ][7029] Completed state [wsgi] at time 22:30:32.320218 duration_in_ms=109.325
2018-09-07 22:30:32,328 [salt.state       :1770][INFO    ][7029] Running state [openstack-dashboard] at time 22:30:32.328482
2018-09-07 22:30:32,329 [salt.state       :1803][INFO    ][7029] Executing state apache_conf.enabled for [openstack-dashboard]
2018-09-07 22:30:32,330 [salt.loaded.int.module.cmdmod:395 ][INFO    ][7029] Executing command ['a2enconf', 'openstack-dashboard'] in directory '/root'
2018-09-07 22:30:32,405 [salt.state       :290 ][INFO    ][7029] {'new': 'openstack-dashboard', 'old': None}
2018-09-07 22:30:32,406 [salt.state       :1941][INFO    ][7029] Completed state [openstack-dashboard] at time 22:30:32.406565 duration_in_ms=78.083
2018-09-07 22:30:33,178 [salt.state       :1770][INFO    ][7029] Running state [/var/log/horizon] at time 22:30:33.178339
2018-09-07 22:30:33,179 [salt.state       :1803][INFO    ][7029] Executing state file.directory for [/var/log/horizon]
2018-09-07 22:30:33,183 [salt.state       :290 ][INFO    ][7029] {'/var/log/horizon': 'New Dir'}
2018-09-07 22:30:33,183 [salt.state       :1941][INFO    ][7029] Completed state [/var/log/horizon] at time 22:30:33.183531 duration_in_ms=5.193
2018-09-07 22:30:33,184 [salt.state       :1770][INFO    ][7029] Running state [/var/log/horizon/horizon.log] at time 22:30:33.184202
2018-09-07 22:30:33,184 [salt.state       :1803][INFO    ][7029] Executing state file.managed for [/var/log/horizon/horizon.log]
2018-09-07 22:30:33,185 [salt.loaded.int.states.file:2150][WARNING ][7029] State for file: /var/log/horizon/horizon.log - Neither 'source' nor 'contents' nor 'contents_pillar' nor 'contents_grains' was defined, yet 'replace' was set to 'True'. As there is no source to replace the file with, 'replace' has been set to 'False' to avoid reading the file unnecessarily.
2018-09-07 22:30:33,186 [salt.state       :290 ][INFO    ][7029] {'new': 'file /var/log/horizon/horizon.log created', 'group': 'adm', 'mode': '0640', 'user': 'horizon'}
2018-09-07 22:30:33,187 [salt.state       :1941][INFO    ][7029] Completed state [/var/log/horizon/horizon.log] at time 22:30:33.186961 duration_in_ms=2.759
2018-09-07 22:30:33,188 [salt.state       :1770][INFO    ][7029] Running state [apache2] at time 22:30:33.188185
2018-09-07 22:30:33,188 [salt.state       :1803][INFO    ][7029] Executing state service.running for [apache2]
2018-09-07 22:30:33,191 [salt.loaded.int.module.cmdmod:395 ][INFO    ][7029] Executing command ['systemctl', 'is-active', 'apache2.service'] in directory '/root'
2018-09-07 22:30:33,223 [salt.loaded.int.module.cmdmod:395 ][INFO    ][7029] Executing command ['systemctl', 'is-enabled', 'apache2.service'] in directory '/root'
2018-09-07 22:30:33,260 [salt.loaded.int.module.cmdmod:395 ][INFO    ][7029] Executing command ['systemd-run', '--scope', 'systemctl', 'start', 'apache2.service'] in directory '/root'
2018-09-07 22:30:34,488 [salt.loaded.int.module.cmdmod:395 ][INFO    ][7029] Executing command ['systemctl', 'is-active', 'apache2.service'] in directory '/root'
2018-09-07 22:30:34,514 [salt.loaded.int.module.cmdmod:395 ][INFO    ][7029] Executing command ['systemctl', 'is-enabled', 'apache2.service'] in directory '/root'
2018-09-07 22:30:34,556 [salt.loaded.int.module.cmdmod:395 ][INFO    ][7029] Executing command ['systemctl', 'is-enabled', 'apache2.service'] in directory '/root'
2018-09-07 22:30:34,588 [salt.state       :290 ][INFO    ][7029] {'apache2': True}
2018-09-07 22:30:34,589 [salt.state       :1941][INFO    ][7029] Completed state [apache2] at time 22:30:34.589461 duration_in_ms=1401.275
2018-09-07 22:30:34,595 [salt.minion      :1708][INFO    ][7029] Returning information for job: 20180907222752218802
2018-09-07 22:30:35,399 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command state.sls with jid 20180907223035387859
2018-09-07 22:30:35,432 [salt.minion      :1431][INFO    ][12654] Starting a new job with PID 12654
2018-09-07 22:30:40,508 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907223040495151
2018-09-07 22:30:40,532 [salt.minion      :1431][INFO    ][12659] Starting a new job with PID 12659
2018-09-07 22:30:40,553 [salt.minion      :1708][INFO    ][12659] Returning information for job: 20180907223040495151
2018-09-07 22:30:43,450 [salt.state       :905 ][INFO    ][12654] Loading fresh modules for state activity
2018-09-07 22:30:43,528 [salt.fileclient  :1215][INFO    ][12654] Fetching file from saltenv 'base', ** done ** 'nginx/init.sls'
2018-09-07 22:30:43,575 [salt.fileclient  :1215][INFO    ][12654] Fetching file from saltenv 'base', ** done ** 'nginx/server.sls'
2018-09-07 22:30:43,692 [salt.fileclient  :1215][INFO    ][12654] Fetching file from saltenv 'base', ** done ** 'nginx/server/users.sls'
2018-09-07 22:30:43,751 [salt.fileclient  :1215][INFO    ][12654] Fetching file from saltenv 'base', ** done ** 'nginx/server/sites.sls'
2018-09-07 22:30:43,886 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12654] Executing command 'cat /etc/ssl/certs/100.64.200.101-with-chain.crt' in directory '/root'
2018-09-07 22:30:43,916 [salt.loaded.int.module.cmdmod:722 ][ERROR   ][12654] Command 'cat /etc/ssl/certs/100.64.200.101-with-chain.crt' failed with return code: 1
2018-09-07 22:30:43,917 [salt.loaded.int.module.cmdmod:724 ][ERROR   ][12654] stdout: cat: /etc/ssl/certs/100.64.200.101-with-chain.crt: No such file or directory
2018-09-07 22:30:43,918 [salt.loaded.int.module.cmdmod:728 ][ERROR   ][12654] retcode: 1
2018-09-07 22:30:43,920 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12654] Executing command 'cat /etc/ssl/certs/100.64.200.101.crt /etc/ssl/certs/ca-salt_master_ca.crt' in directory '/root'
2018-09-07 22:30:44,058 [salt.state       :1770][INFO    ][12654] Running state [cat /etc/ssl/certs/100.64.200.101.crt /etc/ssl/certs/ca-salt_master_ca.crt > /etc/ssl/certs/100.64.200.101-with-chain.crt] at time 22:30:44.058759
2018-09-07 22:30:44,059 [salt.state       :1803][INFO    ][12654] Executing state cmd.run for [cat /etc/ssl/certs/100.64.200.101.crt /etc/ssl/certs/ca-salt_master_ca.crt > /etc/ssl/certs/100.64.200.101-with-chain.crt]
2018-09-07 22:30:44,060 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12654] Executing command '/bin/true' in directory '/root'
2018-09-07 22:30:44,092 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12654] Executing command 'cat /etc/ssl/certs/100.64.200.101.crt /etc/ssl/certs/ca-salt_master_ca.crt > /etc/ssl/certs/100.64.200.101-with-chain.crt' in directory '/root'
2018-09-07 22:30:44,119 [salt.state       :290 ][INFO    ][12654] {'pid': 12682, 'retcode': 0, 'stderr': '', 'stdout': ''}
2018-09-07 22:30:44,120 [salt.state       :1941][INFO    ][12654] Completed state [cat /etc/ssl/certs/100.64.200.101.crt /etc/ssl/certs/ca-salt_master_ca.crt > /etc/ssl/certs/100.64.200.101-with-chain.crt] at time 22:30:44.120490 duration_in_ms=61.734
2018-09-07 22:30:46,401 [salt.state       :1770][INFO    ][12654] Running state [nginx] at time 22:30:46.401830
2018-09-07 22:30:46,402 [salt.state       :1803][INFO    ][12654] Executing state pkg.installed for [nginx]
2018-09-07 22:30:46,403 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12654] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-07 22:30:47,045 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12654] Executing command ['apt-cache', '-q', 'policy', 'nginx'] in directory '/root'
2018-09-07 22:30:47,201 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12654] Executing command ['apt-get', '-q', 'update'] in directory '/root'
2018-09-07 22:30:49,759 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12654] Executing command ['dpkg', '--get-selections', '*'] in directory '/root'
2018-09-07 22:30:49,808 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12654] Executing command ['systemd-run', '--scope', 'apt-get', '-q', '-y', '-o', 'DPkg::Options::=--force-confold', '-o', 'DPkg::Options::=--force-confdef', 'install', 'nginx'] in directory '/root'
2018-09-07 22:30:50,627 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907223050613338
2018-09-07 22:30:50,658 [salt.minion      :1431][INFO    ][13050] Starting a new job with PID 13050
2018-09-07 22:30:50,680 [salt.minion      :1708][INFO    ][13050] Returning information for job: 20180907223050613338
2018-09-07 22:30:56,614 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12654] Executing command ['dpkg-query', '--showformat', '${Status} ${Package} ${Version} ${Architecture}', '-W'] in directory '/root'
2018-09-07 22:30:56,680 [salt.state       :290 ][INFO    ][12654] Made the following changes:
'libgd3' changed from 'absent' to '2.1.1-4ubuntu0.16.04.10'
'nginx-core' changed from 'absent' to '1.10.3-0ubuntu0.16.04.2'
'libxpm4' changed from 'absent' to '1:3.5.11-1ubuntu0.16.04.1'
'nginx' changed from 'absent' to '1.10.3-0ubuntu0.16.04.2'
'nginx-common' changed from 'absent' to '1.10.3-0ubuntu0.16.04.2'
'libfontconfig' changed from 'absent' to '1'
'fonts-dejavu-core' changed from 'absent' to '2.35-1'
'fontconfig-config' changed from 'absent' to '2.11.94-0ubuntu1.1'
'libvpx3' changed from 'absent' to '1.5.0-2ubuntu1'
'libfontconfig1' changed from 'absent' to '2.11.94-0ubuntu1.1'

2018-09-07 22:30:56,735 [salt.state       :905 ][INFO    ][12654] Loading fresh modules for state activity
2018-09-07 22:30:57,013 [salt.state       :1941][INFO    ][12654] Completed state [nginx] at time 22:30:57.013000 duration_in_ms=10611.171
2018-09-07 22:30:57,022 [salt.state       :1770][INFO    ][12654] Running state [apache2-utils] at time 22:30:57.022172
2018-09-07 22:30:57,022 [salt.state       :1803][INFO    ][12654] Executing state pkg.installed for [apache2-utils]
2018-09-07 22:30:57,996 [salt.state       :290 ][INFO    ][12654] All specified packages are already installed
2018-09-07 22:30:57,996 [salt.state       :1941][INFO    ][12654] Completed state [apache2-utils] at time 22:30:57.996843 duration_in_ms=974.671
2018-09-07 22:30:57,997 [salt.state       :1770][INFO    ][12654] Running state [openssl] at time 22:30:57.997574
2018-09-07 22:30:57,997 [salt.state       :1803][INFO    ][12654] Executing state pkg.installed for [openssl]
2018-09-07 22:30:58,010 [salt.state       :290 ][INFO    ][12654] All specified packages are already installed
2018-09-07 22:30:58,010 [salt.state       :1941][INFO    ][12654] Completed state [openssl] at time 22:30:58.010508 duration_in_ms=12.934
2018-09-07 22:30:58,014 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/sites-available/nginx_proxy_openstack_api_keystone_private.conf] at time 22:30:58.014483
2018-09-07 22:30:58,014 [salt.state       :1803][INFO    ][12654] Executing state file.managed for [/etc/nginx/sites-available/nginx_proxy_openstack_api_keystone_private.conf]
2018-09-07 22:30:58,051 [salt.fileclient  :1215][INFO    ][12654] Fetching file from saltenv 'base', ** done ** 'nginx/files/proxy.conf'
2018-09-07 22:30:58,141 [salt.fileclient  :1215][INFO    ][12654] Fetching file from saltenv 'base', ** done ** 'nginx/files/_limit.conf'
2018-09-07 22:30:58,184 [salt.fileclient  :1215][INFO    ][12654] Fetching file from saltenv 'base', ** done ** 'nginx/files/headers/_strict_transport_security.conf'
2018-09-07 22:30:58,216 [salt.fileclient  :1215][INFO    ][12654] Fetching file from saltenv 'base', ** done ** 'nginx/files/_name.conf'
2018-09-07 22:30:58,242 [salt.fileclient  :1215][INFO    ][12654] Fetching file from saltenv 'base', ** done ** 'nginx/files/_ssl.conf'
2018-09-07 22:30:58,351 [salt.fileclient  :1215][INFO    ][12654] Fetching file from saltenv 'base', ** done ** 'nginx/files/_ssl_secure.conf'
2018-09-07 22:30:58,374 [salt.fileclient  :1215][INFO    ][12654] Fetching file from saltenv 'base', ** done ** 'nginx/files/_auth.conf'
2018-09-07 22:30:58,401 [salt.fileclient  :1215][INFO    ][12654] Fetching file from saltenv 'base', ** done ** 'nginx/files/_access_policy.conf'
2018-09-07 22:30:58,413 [salt.state       :290 ][INFO    ][12654] File changed:
New file
2018-09-07 22:30:58,413 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/sites-available/nginx_proxy_openstack_api_keystone_private.conf] at time 22:30:58.413295 duration_in_ms=398.811
2018-09-07 22:30:58,413 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/sites-enabled/nginx_proxy_openstack_api_keystone_private.conf] at time 22:30:58.413646
2018-09-07 22:30:58,413 [salt.state       :1803][INFO    ][12654] Executing state file.symlink for [/etc/nginx/sites-enabled/nginx_proxy_openstack_api_keystone_private.conf]
2018-09-07 22:30:58,418 [salt.state       :290 ][INFO    ][12654] {'new': '/etc/nginx/sites-enabled/nginx_proxy_openstack_api_keystone_private.conf'}
2018-09-07 22:30:58,418 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/sites-enabled/nginx_proxy_openstack_api_keystone_private.conf] at time 22:30:58.418498 duration_in_ms=4.851
2018-09-07 22:30:58,418 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/sites-available/nginx_proxy_openstack_api_heat_cloudwatch.conf] at time 22:30:58.418761
2018-09-07 22:30:58,419 [salt.state       :1803][INFO    ][12654] Executing state file.absent for [/etc/nginx/sites-available/nginx_proxy_openstack_api_heat_cloudwatch.conf]
2018-09-07 22:30:58,419 [salt.state       :290 ][INFO    ][12654] File /etc/nginx/sites-available/nginx_proxy_openstack_api_heat_cloudwatch.conf is not present
2018-09-07 22:30:58,420 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/sites-available/nginx_proxy_openstack_api_heat_cloudwatch.conf] at time 22:30:58.419990 duration_in_ms=1.229
2018-09-07 22:30:58,420 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/sites-enabled/nginx_proxy_openstack_api_heat_cloudwatch.conf] at time 22:30:58.420238
2018-09-07 22:30:58,420 [salt.state       :1803][INFO    ][12654] Executing state file.absent for [/etc/nginx/sites-enabled/nginx_proxy_openstack_api_heat_cloudwatch.conf]
2018-09-07 22:30:58,421 [salt.state       :290 ][INFO    ][12654] File /etc/nginx/sites-enabled/nginx_proxy_openstack_api_heat_cloudwatch.conf is not present
2018-09-07 22:30:58,421 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/sites-enabled/nginx_proxy_openstack_api_heat_cloudwatch.conf] at time 22:30:58.421739 duration_in_ms=1.501
2018-09-07 22:30:58,422 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/sites-available/nginx_proxy_openstack_api_aodh.conf] at time 22:30:58.422610
2018-09-07 22:30:58,422 [salt.state       :1803][INFO    ][12654] Executing state file.managed for [/etc/nginx/sites-available/nginx_proxy_openstack_api_aodh.conf]
2018-09-07 22:30:58,726 [salt.state       :290 ][INFO    ][12654] File changed:
New file
2018-09-07 22:30:58,726 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/sites-available/nginx_proxy_openstack_api_aodh.conf] at time 22:30:58.726657 duration_in_ms=304.046
2018-09-07 22:30:58,727 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/sites-enabled/nginx_proxy_openstack_api_aodh.conf] at time 22:30:58.727361
2018-09-07 22:30:58,727 [salt.state       :1803][INFO    ][12654] Executing state file.symlink for [/etc/nginx/sites-enabled/nginx_proxy_openstack_api_aodh.conf]
2018-09-07 22:30:58,730 [salt.state       :290 ][INFO    ][12654] {'new': '/etc/nginx/sites-enabled/nginx_proxy_openstack_api_aodh.conf'}
2018-09-07 22:30:58,730 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/sites-enabled/nginx_proxy_openstack_api_aodh.conf] at time 22:30:58.730697 duration_in_ms=3.336
2018-09-07 22:30:58,732 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/sites-available/nginx_proxy_openstack_api_neutron.conf] at time 22:30:58.731947
2018-09-07 22:30:58,732 [salt.state       :1803][INFO    ][12654] Executing state file.managed for [/etc/nginx/sites-available/nginx_proxy_openstack_api_neutron.conf]
2018-09-07 22:30:59,029 [salt.state       :290 ][INFO    ][12654] File changed:
New file
2018-09-07 22:30:59,030 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/sites-available/nginx_proxy_openstack_api_neutron.conf] at time 22:30:59.030197 duration_in_ms=298.25
2018-09-07 22:30:59,030 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/sites-enabled/nginx_proxy_openstack_api_neutron.conf] at time 22:30:59.030467
2018-09-07 22:30:59,030 [salt.state       :1803][INFO    ][12654] Executing state file.symlink for [/etc/nginx/sites-enabled/nginx_proxy_openstack_api_neutron.conf]
2018-09-07 22:30:59,032 [salt.state       :290 ][INFO    ][12654] {'new': '/etc/nginx/sites-enabled/nginx_proxy_openstack_api_neutron.conf'}
2018-09-07 22:30:59,033 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/sites-enabled/nginx_proxy_openstack_api_neutron.conf] at time 22:30:59.033151 duration_in_ms=2.684
2018-09-07 22:30:59,034 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/sites-available/nginx_proxy_openstack_web.conf] at time 22:30:59.034860
2018-09-07 22:30:59,035 [salt.state       :1803][INFO    ][12654] Executing state file.managed for [/etc/nginx/sites-available/nginx_proxy_openstack_web.conf]
2018-09-07 22:30:59,335 [salt.state       :290 ][INFO    ][12654] File changed:
New file
2018-09-07 22:30:59,335 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/sites-available/nginx_proxy_openstack_web.conf] at time 22:30:59.335773 duration_in_ms=300.912
2018-09-07 22:30:59,336 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/sites-enabled/nginx_proxy_openstack_web.conf] at time 22:30:59.336099
2018-09-07 22:30:59,336 [salt.state       :1803][INFO    ][12654] Executing state file.symlink for [/etc/nginx/sites-enabled/nginx_proxy_openstack_web.conf]
2018-09-07 22:30:59,339 [salt.state       :290 ][INFO    ][12654] {'new': '/etc/nginx/sites-enabled/nginx_proxy_openstack_web.conf'}
2018-09-07 22:30:59,339 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/sites-enabled/nginx_proxy_openstack_web.conf] at time 22:30:59.339637 duration_in_ms=3.537
2018-09-07 22:30:59,340 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/sites-available/nginx_proxy_openstack_api_glance.conf] at time 22:30:59.340364
2018-09-07 22:30:59,340 [salt.state       :1803][INFO    ][12654] Executing state file.managed for [/etc/nginx/sites-available/nginx_proxy_openstack_api_glance.conf]
2018-09-07 22:30:59,628 [salt.state       :290 ][INFO    ][12654] File changed:
New file
2018-09-07 22:30:59,629 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/sites-available/nginx_proxy_openstack_api_glance.conf] at time 22:30:59.629122 duration_in_ms=288.757
2018-09-07 22:30:59,629 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/sites-enabled/nginx_proxy_openstack_api_glance.conf] at time 22:30:59.629433
2018-09-07 22:30:59,630 [salt.state       :1803][INFO    ][12654] Executing state file.symlink for [/etc/nginx/sites-enabled/nginx_proxy_openstack_api_glance.conf]
2018-09-07 22:30:59,632 [salt.state       :290 ][INFO    ][12654] {'new': '/etc/nginx/sites-enabled/nginx_proxy_openstack_api_glance.conf'}
2018-09-07 22:30:59,632 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/sites-enabled/nginx_proxy_openstack_api_glance.conf] at time 22:30:59.632409 duration_in_ms=2.976
2018-09-07 22:30:59,633 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/sites-available/nginx_proxy_novnc.conf] at time 22:30:59.633313
2018-09-07 22:30:59,633 [salt.state       :1803][INFO    ][12654] Executing state file.managed for [/etc/nginx/sites-available/nginx_proxy_novnc.conf]
2018-09-07 22:30:59,918 [salt.state       :290 ][INFO    ][12654] File changed:
New file
2018-09-07 22:30:59,919 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/sites-available/nginx_proxy_novnc.conf] at time 22:30:59.918598 duration_in_ms=285.283
2018-09-07 22:30:59,919 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/sites-enabled/nginx_proxy_novnc.conf] at time 22:30:59.919259
2018-09-07 22:30:59,919 [salt.state       :1803][INFO    ][12654] Executing state file.symlink for [/etc/nginx/sites-enabled/nginx_proxy_novnc.conf]
2018-09-07 22:30:59,922 [salt.state       :290 ][INFO    ][12654] {'new': '/etc/nginx/sites-enabled/nginx_proxy_novnc.conf'}
2018-09-07 22:30:59,923 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/sites-enabled/nginx_proxy_novnc.conf] at time 22:30:59.923062 duration_in_ms=3.803
2018-09-07 22:30:59,924 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/sites-available/nginx_proxy_openstack_api_keystone.conf] at time 22:30:59.923992
2018-09-07 22:30:59,924 [salt.state       :1803][INFO    ][12654] Executing state file.managed for [/etc/nginx/sites-available/nginx_proxy_openstack_api_keystone.conf]
2018-09-07 22:31:00,211 [salt.state       :290 ][INFO    ][12654] File changed:
New file
2018-09-07 22:31:00,211 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/sites-available/nginx_proxy_openstack_api_keystone.conf] at time 22:31:00.211787 duration_in_ms=287.794
2018-09-07 22:31:00,212 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/sites-enabled/nginx_proxy_openstack_api_keystone.conf] at time 22:31:00.212146
2018-09-07 22:31:00,212 [salt.state       :1803][INFO    ][12654] Executing state file.symlink for [/etc/nginx/sites-enabled/nginx_proxy_openstack_api_keystone.conf]
2018-09-07 22:31:00,215 [salt.state       :290 ][INFO    ][12654] {'new': '/etc/nginx/sites-enabled/nginx_proxy_openstack_api_keystone.conf'}
2018-09-07 22:31:00,215 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/sites-enabled/nginx_proxy_openstack_api_keystone.conf] at time 22:31:00.215734 duration_in_ms=3.588
2018-09-07 22:31:00,216 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/sites-available/nginx_proxy_openstack_api_cinder.conf] at time 22:31:00.216322
2018-09-07 22:31:00,216 [salt.state       :1803][INFO    ][12654] Executing state file.managed for [/etc/nginx/sites-available/nginx_proxy_openstack_api_cinder.conf]
2018-09-07 22:31:00,518 [salt.state       :290 ][INFO    ][12654] File changed:
New file
2018-09-07 22:31:00,519 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/sites-available/nginx_proxy_openstack_api_cinder.conf] at time 22:31:00.519178 duration_in_ms=302.855
2018-09-07 22:31:00,519 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/sites-enabled/nginx_proxy_openstack_api_cinder.conf] at time 22:31:00.519507
2018-09-07 22:31:00,519 [salt.state       :1803][INFO    ][12654] Executing state file.symlink for [/etc/nginx/sites-enabled/nginx_proxy_openstack_api_cinder.conf]
2018-09-07 22:31:00,521 [salt.state       :290 ][INFO    ][12654] {'new': '/etc/nginx/sites-enabled/nginx_proxy_openstack_api_cinder.conf'}
2018-09-07 22:31:00,521 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/sites-enabled/nginx_proxy_openstack_api_cinder.conf] at time 22:31:00.521764 duration_in_ms=2.256
2018-09-07 22:31:00,522 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/sites-available/nginx_proxy_openstack_api_heat_cfn.conf] at time 22:31:00.522426
2018-09-07 22:31:00,523 [salt.state       :1803][INFO    ][12654] Executing state file.managed for [/etc/nginx/sites-available/nginx_proxy_openstack_api_heat_cfn.conf]
2018-09-07 22:31:00,807 [salt.state       :290 ][INFO    ][12654] File changed:
New file
2018-09-07 22:31:00,807 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/sites-available/nginx_proxy_openstack_api_heat_cfn.conf] at time 22:31:00.807871 duration_in_ms=285.444
2018-09-07 22:31:00,808 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/sites-enabled/nginx_proxy_openstack_api_heat_cfn.conf] at time 22:31:00.808862
2018-09-07 22:31:00,809 [salt.state       :1803][INFO    ][12654] Executing state file.symlink for [/etc/nginx/sites-enabled/nginx_proxy_openstack_api_heat_cfn.conf]
2018-09-07 22:31:00,811 [salt.state       :290 ][INFO    ][12654] {'new': '/etc/nginx/sites-enabled/nginx_proxy_openstack_api_heat_cfn.conf'}
2018-09-07 22:31:00,812 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/sites-enabled/nginx_proxy_openstack_api_heat_cfn.conf] at time 22:31:00.812017 duration_in_ms=3.154
2018-09-07 22:31:00,812 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/sites-available/nginx_redirect_openstack_web_redirect.conf] at time 22:31:00.812769
2018-09-07 22:31:00,813 [salt.state       :1803][INFO    ][12654] Executing state file.managed for [/etc/nginx/sites-available/nginx_redirect_openstack_web_redirect.conf]
2018-09-07 22:31:00,836 [salt.fileclient  :1215][INFO    ][12654] Fetching file from saltenv 'base', ** done ** 'nginx/files/redirect.conf'
2018-09-07 22:31:00,841 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907223100827299
2018-09-07 22:31:00,860 [salt.state       :290 ][INFO    ][12654] File changed:
New file
2018-09-07 22:31:00,860 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/sites-available/nginx_redirect_openstack_web_redirect.conf] at time 22:31:00.860432 duration_in_ms=47.663
2018-09-07 22:31:00,861 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/sites-enabled/nginx_redirect_openstack_web_redirect.conf] at time 22:31:00.861672
2018-09-07 22:31:00,861 [salt.state       :1803][INFO    ][12654] Executing state file.symlink for [/etc/nginx/sites-enabled/nginx_redirect_openstack_web_redirect.conf]
2018-09-07 22:31:00,864 [salt.state       :290 ][INFO    ][12654] {'new': '/etc/nginx/sites-enabled/nginx_redirect_openstack_web_redirect.conf'}
2018-09-07 22:31:00,864 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/sites-enabled/nginx_redirect_openstack_web_redirect.conf] at time 22:31:00.864352 duration_in_ms=2.68
2018-09-07 22:31:00,865 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/sites-available/nginx_static_reclass_doc.conf] at time 22:31:00.865312
2018-09-07 22:31:00,866 [salt.state       :1803][INFO    ][12654] Executing state file.managed for [/etc/nginx/sites-available/nginx_static_reclass_doc.conf]
2018-09-07 22:31:00,869 [salt.minion      :1431][INFO    ][13721] Starting a new job with PID 13721
2018-09-07 22:31:00,885 [salt.fileclient  :1215][INFO    ][12654] Fetching file from saltenv 'base', ** done ** 'nginx/files/static.conf'
2018-09-07 22:31:00,893 [salt.minion      :1708][INFO    ][13721] Returning information for job: 20180907223100827299
2018-09-07 22:31:00,956 [salt.fileclient  :1215][INFO    ][12654] Fetching file from saltenv 'base', ** done ** 'nginx/files/_log.conf'
2018-09-07 22:31:01,130 [salt.state       :290 ][INFO    ][12654] File changed:
New file
2018-09-07 22:31:01,130 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/sites-available/nginx_static_reclass_doc.conf] at time 22:31:01.130227 duration_in_ms=264.914
2018-09-07 22:31:01,130 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/sites-enabled/nginx_static_reclass_doc.conf] at time 22:31:01.130823
2018-09-07 22:31:01,131 [salt.state       :1803][INFO    ][12654] Executing state file.symlink for [/etc/nginx/sites-enabled/nginx_static_reclass_doc.conf]
2018-09-07 22:31:01,134 [salt.state       :290 ][INFO    ][12654] {'new': '/etc/nginx/sites-enabled/nginx_static_reclass_doc.conf'}
2018-09-07 22:31:01,134 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/sites-enabled/nginx_static_reclass_doc.conf] at time 22:31:01.134447 duration_in_ms=3.624
2018-09-07 22:31:01,135 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/sites-available/nginx_proxy_openstack_api_heat.conf] at time 22:31:01.135047
2018-09-07 22:31:01,135 [salt.state       :1803][INFO    ][12654] Executing state file.managed for [/etc/nginx/sites-available/nginx_proxy_openstack_api_heat.conf]
2018-09-07 22:31:01,443 [salt.state       :290 ][INFO    ][12654] File changed:
New file
2018-09-07 22:31:01,443 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/sites-available/nginx_proxy_openstack_api_heat.conf] at time 22:31:01.443910 duration_in_ms=308.862
2018-09-07 22:31:01,444 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/sites-enabled/nginx_proxy_openstack_api_heat.conf] at time 22:31:01.444176
2018-09-07 22:31:01,444 [salt.state       :1803][INFO    ][12654] Executing state file.symlink for [/etc/nginx/sites-enabled/nginx_proxy_openstack_api_heat.conf]
2018-09-07 22:31:01,446 [salt.state       :290 ][INFO    ][12654] {'new': '/etc/nginx/sites-enabled/nginx_proxy_openstack_api_heat.conf'}
2018-09-07 22:31:01,446 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/sites-enabled/nginx_proxy_openstack_api_heat.conf] at time 22:31:01.446198 duration_in_ms=2.023
2018-09-07 22:31:01,446 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/sites-available/nginx_stats_stats.conf] at time 22:31:01.446792
2018-09-07 22:31:01,447 [salt.state       :1803][INFO    ][12654] Executing state file.managed for [/etc/nginx/sites-available/nginx_stats_stats.conf]
2018-09-07 22:31:01,467 [salt.fileclient  :1215][INFO    ][12654] Fetching file from saltenv 'base', ** done ** 'nginx/files/stats.conf'
2018-09-07 22:31:01,481 [salt.state       :290 ][INFO    ][12654] File changed:
New file
2018-09-07 22:31:01,482 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/sites-available/nginx_stats_stats.conf] at time 22:31:01.481995 duration_in_ms=35.202
2018-09-07 22:31:01,482 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/sites-enabled/nginx_stats_stats.conf] at time 22:31:01.482245
2018-09-07 22:31:01,483 [salt.state       :1803][INFO    ][12654] Executing state file.symlink for [/etc/nginx/sites-enabled/nginx_stats_stats.conf]
2018-09-07 22:31:01,486 [salt.state       :290 ][INFO    ][12654] {'new': '/etc/nginx/sites-enabled/nginx_stats_stats.conf'}
2018-09-07 22:31:01,486 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/sites-enabled/nginx_stats_stats.conf] at time 22:31:01.486643 duration_in_ms=4.397
2018-09-07 22:31:01,487 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/sites-available/nginx_proxy_openstack_api_nova.conf] at time 22:31:01.487207
2018-09-07 22:31:01,487 [salt.state       :1803][INFO    ][12654] Executing state file.managed for [/etc/nginx/sites-available/nginx_proxy_openstack_api_nova.conf]
2018-09-07 22:31:01,804 [salt.state       :290 ][INFO    ][12654] File changed:
New file
2018-09-07 22:31:01,804 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/sites-available/nginx_proxy_openstack_api_nova.conf] at time 22:31:01.804853 duration_in_ms=317.645
2018-09-07 22:31:01,805 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/sites-enabled/nginx_proxy_openstack_api_nova.conf] at time 22:31:01.805147
2018-09-07 22:31:01,806 [salt.state       :1803][INFO    ][12654] Executing state file.symlink for [/etc/nginx/sites-enabled/nginx_proxy_openstack_api_nova.conf]
2018-09-07 22:31:01,809 [salt.state       :290 ][INFO    ][12654] {'new': '/etc/nginx/sites-enabled/nginx_proxy_openstack_api_nova.conf'}
2018-09-07 22:31:01,809 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/sites-enabled/nginx_proxy_openstack_api_nova.conf] at time 22:31:01.809843 duration_in_ms=4.696
2018-09-07 22:31:01,810 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/sites-available/nginx_proxy_openstack_api_ceilometer.conf] at time 22:31:01.810490
2018-09-07 22:31:01,811 [salt.state       :1803][INFO    ][12654] Executing state file.managed for [/etc/nginx/sites-available/nginx_proxy_openstack_api_ceilometer.conf]
2018-09-07 22:31:02,120 [salt.state       :290 ][INFO    ][12654] File changed:
New file
2018-09-07 22:31:02,120 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/sites-available/nginx_proxy_openstack_api_ceilometer.conf] at time 22:31:02.120524 duration_in_ms=310.034
2018-09-07 22:31:02,120 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/sites-enabled/nginx_proxy_openstack_api_ceilometer.conf] at time 22:31:02.120823
2018-09-07 22:31:02,121 [salt.state       :1803][INFO    ][12654] Executing state file.symlink for [/etc/nginx/sites-enabled/nginx_proxy_openstack_api_ceilometer.conf]
2018-09-07 22:31:02,124 [salt.state       :290 ][INFO    ][12654] {'new': '/etc/nginx/sites-enabled/nginx_proxy_openstack_api_ceilometer.conf'}
2018-09-07 22:31:02,125 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/sites-enabled/nginx_proxy_openstack_api_ceilometer.conf] at time 22:31:02.125204 duration_in_ms=4.381
2018-09-07 22:31:02,126 [salt.state       :1770][INFO    ][12654] Running state [/usr/sbin/policy-rc.d] at time 22:31:02.126152
2018-09-07 22:31:02,126 [salt.state       :1803][INFO    ][12654] Executing state file.managed for [/usr/sbin/policy-rc.d]
2018-09-07 22:31:02,128 [salt.state       :290 ][INFO    ][12654] File changed:
New file
2018-09-07 22:31:02,128 [salt.state       :1941][INFO    ][12654] Completed state [/usr/sbin/policy-rc.d] at time 22:31:02.128325 duration_in_ms=2.173
2018-09-07 22:31:02,129 [salt.state       :1770][INFO    ][12654] Running state [/usr/sbin/policy-rc.d] at time 22:31:02.129166
2018-09-07 22:31:02,129 [salt.state       :1803][INFO    ][12654] Executing state file.absent for [/usr/sbin/policy-rc.d]
2018-09-07 22:31:02,129 [salt.state       :290 ][INFO    ][12654] {'removed': '/usr/sbin/policy-rc.d'}
2018-09-07 22:31:02,130 [salt.state       :1941][INFO    ][12654] Completed state [/usr/sbin/policy-rc.d] at time 22:31:02.130022 duration_in_ms=0.856
2018-09-07 22:31:02,130 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/conf.d/default.conf] at time 22:31:02.130907
2018-09-07 22:31:02,131 [salt.state       :1803][INFO    ][12654] Executing state file.absent for [/etc/nginx/conf.d/default.conf]
2018-09-07 22:31:02,131 [salt.state       :290 ][INFO    ][12654] File /etc/nginx/conf.d/default.conf is not present
2018-09-07 22:31:02,131 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/conf.d/default.conf] at time 22:31:02.131706 duration_in_ms=0.799
2018-09-07 22:31:02,132 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/sites-enabled/default] at time 22:31:02.132270
2018-09-07 22:31:02,132 [salt.state       :1803][INFO    ][12654] Executing state file.absent for [/etc/nginx/sites-enabled/default]
2018-09-07 22:31:02,132 [salt.state       :290 ][INFO    ][12654] {'removed': '/etc/nginx/sites-enabled/default'}
2018-09-07 22:31:02,133 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/sites-enabled/default] at time 22:31:02.133062 duration_in_ms=0.793
2018-09-07 22:31:02,135 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/sites-available/default] at time 22:31:02.135429
2018-09-07 22:31:02,135 [salt.state       :1803][INFO    ][12654] Executing state file.absent for [/etc/nginx/sites-available/default]
2018-09-07 22:31:02,136 [salt.state       :290 ][INFO    ][12654] {'removed': '/etc/nginx/sites-available/default'}
2018-09-07 22:31:02,136 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/sites-available/default] at time 22:31:02.136252 duration_in_ms=0.823
2018-09-07 22:31:02,137 [salt.state       :1770][INFO    ][12654] Running state [/etc/nginx/nginx.conf] at time 22:31:02.137185
2018-09-07 22:31:02,137 [salt.state       :1803][INFO    ][12654] Executing state file.managed for [/etc/nginx/nginx.conf]
2018-09-07 22:31:02,163 [salt.fileclient  :1215][INFO    ][12654] Fetching file from saltenv 'base', ** done ** 'nginx/files/nginx.conf'
2018-09-07 22:31:02,214 [salt.state       :290 ][INFO    ][12654] File changed:
--- 
+++ 
@@ -1,85 +1,102 @@
 user www-data;
 worker_processes auto;
+worker_rlimit_nofile 20000;
 pid /run/nginx.pid;
 
+
 events {
-	worker_connections 768;
-	# multi_accept on;
+        worker_connections 1024;
+        # multi_accept on;
 }
 
 http {
 
-	##
-	# Basic Settings
-	##
+        ##
+        # Basic Settings
+        ##
 
-	sendfile on;
-	tcp_nopush on;
-	tcp_nodelay on;
-	keepalive_timeout 65;
-	types_hash_max_size 2048;
-	# server_tokens off;
+        sendfile on;
+        tcp_nopush on;
+        tcp_nodelay on;
+        keepalive_timeout 65;
+        types_hash_max_size 2048;
+        server_tokens off;
 
-	# server_names_hash_bucket_size 64;
-	# server_name_in_redirect off;
+        server_names_hash_bucket_size 128;
+        # server_name_in_redirect off;
 
-	include /etc/nginx/mime.types;
-	default_type application/octet-stream;
+        variables_hash_bucket_size 128;
 
-	##
-	# SSL Settings
-	##
+        include /etc/nginx/mime.types;
+        default_type application/octet-stream;
 
-	ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE
-	ssl_prefer_server_ciphers on;
+        ##
+        # Logging Settings
+        ##
 
-	##
-	# Logging Settings
-	##
+        access_log /var/log/nginx/access.log;
+        error_log /var/log/nginx/error.log;
 
-	access_log /var/log/nginx/access.log;
-	error_log /var/log/nginx/error.log;
+        ##
+        # Gzip Settings
+        ##
 
-	##
-	# Gzip Settings
-	##
+        gzip on;
+        gzip_disable "msie6";
 
-	gzip on;
-	gzip_disable "msie6";
+        # gzip_vary on;
+        # gzip_proxied any;
+        # gzip_comp_level 6;
+        # gzip_buffers 16 8k;
+        # gzip_http_version 1.1;
+        # gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript;
 
-	# gzip_vary on;
-	# gzip_proxied any;
-	# gzip_comp_level 6;
-	# gzip_buffers 16 8k;
-	# gzip_http_version 1.1;
-	# gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;
+        ##
+        # nginx-naxsi config
+        ##
+        # Uncomment it if you installed nginx-naxsi
+        ##
 
-	##
-	# Virtual Host Configs
-	##
+        #include /etc/nginx/naxsi_core.rules;
 
-	include /etc/nginx/conf.d/*.conf;
-	include /etc/nginx/sites-enabled/*;
+        ##
+        # nginx-passenger config
+        ##
+        # Uncomment it if you installed nginx-passenger
+        ##
+
+        #passenger_root /usr;
+        #passenger_ruby /usr/bin/ruby;
+
+
+
+        ##
+        # Virtual Host Configs
+        ##
+
+        include /etc/nginx/conf.d/*.conf;
+        include /etc/nginx/sites-enabled/*.conf;
 }
 
 
+
 #mail {
-#	# See sample authentication script at:
-#	# http://wiki.nginx.org/ImapAuthenticateWithApachePhpScript
-# 
-#	# auth_http localhost/auth.php;
-#	# pop3_capabilities "TOP" "USER";
-#	# imap_capabilities "IMAP4rev1" "UIDPLUS";
-# 
-#	server {
-#		listen     localhost:110;
-#		protocol   pop3;
-#		proxy      on;
-#	}
-# 
-#	server {
-#		listen     localhost:143;
-#		protocol   imap;
-#		proxy      on;
-#	}
+#       # See sample authentication script at:
+#       # http://wiki.nginx.org/ImapAuthenticateWithApachePhpScript
+#
+#       # auth_http localhost/auth.php;
+#       # pop3_capabilities "TOP" "USER";
+#       # imap_capabilities "IMAP4rev1" "UIDPLUS";
+#
+#       server {
+#               listen     localhost:110;
+#               protocol   pop3;
+#               proxy      on;
+#       }
+#
+#       server {
+#               listen     localhost:143;
+#               protocol   imap;
+#               proxy      on;
+#       }
 #}

2018-09-07 22:31:02,214 [salt.state       :1941][INFO    ][12654] Completed state [/etc/nginx/nginx.conf] at time 22:31:02.214605 duration_in_ms=77.42
2018-09-07 22:31:02,215 [salt.state       :1770][INFO    ][12654] Running state [/etc/ssl/private] at time 22:31:02.215192
2018-09-07 22:31:02,215 [salt.state       :1803][INFO    ][12654] Executing state file.directory for [/etc/ssl/private]
2018-09-07 22:31:02,216 [salt.state       :290 ][INFO    ][12654] Directory /etc/ssl/private is in the correct state
Directory /etc/ssl/private updated
2018-09-07 22:31:02,216 [salt.state       :1941][INFO    ][12654] Completed state [/etc/ssl/private] at time 22:31:02.216910 duration_in_ms=1.718
2018-09-07 22:31:02,235 [salt.state       :1770][INFO    ][12654] Running state [openssl dhparam -out /etc/ssl/dhparams.pem 2048] at time 22:31:02.235142
2018-09-07 22:31:02,236 [salt.state       :1803][INFO    ][12654] Executing state cmd.run for [openssl dhparam -out /etc/ssl/dhparams.pem 2048]
2018-09-07 22:31:02,237 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12654] Executing command 'openssl dhparam -out /etc/ssl/dhparams.pem 2048' in directory '/root'
2018-09-07 22:31:11,064 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907223111054335
2018-09-07 22:31:11,086 [salt.minion      :1431][INFO    ][13744] Starting a new job with PID 13744
2018-09-07 22:31:11,106 [salt.minion      :1708][INFO    ][13744] Returning information for job: 20180907223111054335
2018-09-07 22:31:21,288 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907223121274928
2018-09-07 22:31:21,318 [salt.minion      :1431][INFO    ][13753] Starting a new job with PID 13753
2018-09-07 22:31:21,342 [salt.minion      :1708][INFO    ][13753] Returning information for job: 20180907223121274928
2018-09-07 22:31:31,432 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907223131415640
2018-09-07 22:31:31,458 [salt.minion      :1431][INFO    ][13762] Starting a new job with PID 13762
2018-09-07 22:31:31,479 [salt.minion      :1708][INFO    ][13762] Returning information for job: 20180907223131415640
2018-09-07 22:31:41,450 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907223141434246
2018-09-07 22:31:41,476 [salt.minion      :1431][INFO    ][13771] Starting a new job with PID 13771
2018-09-07 22:31:41,495 [salt.minion      :1708][INFO    ][13771] Returning information for job: 20180907223141434246
2018-09-07 22:31:51,662 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907223151649582
2018-09-07 22:31:51,685 [salt.minion      :1431][INFO    ][13784] Starting a new job with PID 13784
2018-09-07 22:31:51,705 [salt.minion      :1708][INFO    ][13784] Returning information for job: 20180907223151649582
2018-09-07 22:32:01,879 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907223201864039
2018-09-07 22:32:01,903 [salt.minion      :1431][INFO    ][13793] Starting a new job with PID 13793
2018-09-07 22:32:01,926 [salt.minion      :1708][INFO    ][13793] Returning information for job: 20180907223201864039
2018-09-07 22:32:12,111 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907223212090367
2018-09-07 22:32:12,142 [salt.minion      :1431][INFO    ][13802] Starting a new job with PID 13802
2018-09-07 22:32:12,163 [salt.minion      :1708][INFO    ][13802] Returning information for job: 20180907223212090367
2018-09-07 22:32:22,139 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907223222122569
2018-09-07 22:32:22,167 [salt.minion      :1431][INFO    ][13811] Starting a new job with PID 13811
2018-09-07 22:32:22,187 [salt.minion      :1708][INFO    ][13811] Returning information for job: 20180907223222122569
2018-09-07 22:32:32,367 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command saltutil.find_job with jid 20180907223232349410
2018-09-07 22:32:32,397 [salt.minion      :1431][INFO    ][13820] Starting a new job with PID 13820
2018-09-07 22:32:32,417 [salt.minion      :1708][INFO    ][13820] Returning information for job: 20180907223232349410
2018-09-07 22:32:38,999 [salt.state       :290 ][INFO    ][12654] {'pid': 13740, 'retcode': 0, 'stderr': "Generating DH parameters, 2048 bit long safe prime, generator 2\nThis is going to take a long time\n.........................................................................................................................+..................................................................+......................................................................................+.......................................................................................................................................................................................+..................................................+....................................................................................+...........................+..................................................................................................................................................................................................................................................................+.........+................................................................................+..........................................................................................................................................................+............................................................................................................................................................................................................................+.................................................................+.................................................................................................................................................+...................+............+............+.............................................................................................................................................+..............................................................+..........................................................+......................................................................................................................................................................................................................................................................................................................................................................................+.........+......................................................+..........................................................................+............................................+................................................................................................................................................................+.....................+.......................................................................................................................................................................................................+......................................................................................+.......+......................................................................................................................................................................................................................................................................................................................................................+.....+......................................+...........................................................................+..............................................+......................................................+............................................................+.........................................................................+......................................................................................+.............................................................................................+.............................................................................................+.........................................+.............................................................................................+...............................................+......................................................................................................................................................................................................................................................................................+...........................................................................+....................+.........................................................................................................................................................................................................................+.......................................................................................................................................................................................................................................................................+........................................................................................................................+...................................................................................................+.....................................................................................................................................................................................................................................................................................+..........................+...........................+...................................................................+....+.....................................+........+...................................................+.........................................................................................................................................................................................................................................................................................................................................................+............................................+.+...........................................................................................................+.+........................................................................................+.....................................................+...............................................................+.........................................................+....................................+....................+................................................................................................................................................+..+..................................................................................+....................................................+.......................+.......................+....................................................................................................+........................................+............+...............................................................................................................................................................................................................................................+.....................................................................................................................................+...+........+.+..............................................................................................................................................+...........................................+................................................................................+.............................................................................................................................................................+.........................................+.......................................................................................................................................................................................................................................................................................................................................+...............................................................................................+........................................................++*++*\nunable to write 'random state'", 'stdout': ''}
2018-09-07 22:32:39,001 [salt.state       :1941][INFO    ][12654] Completed state [openssl dhparam -out /etc/ssl/dhparams.pem 2048] at time 22:32:39.001748 duration_in_ms=96766.605
2018-09-07 22:32:39,008 [salt.state       :1770][INFO    ][12654] Running state [nginx] at time 22:32:39.008488
2018-09-07 22:32:39,009 [salt.state       :1803][INFO    ][12654] Executing state service.running for [nginx]
2018-09-07 22:32:39,010 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12654] Executing command ['systemctl', 'status', 'nginx.service', '-n', '0'] in directory '/root'
2018-09-07 22:32:39,037 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12654] Executing command ['systemctl', 'is-active', 'nginx.service'] in directory '/root'
2018-09-07 22:32:39,065 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12654] Executing command ['systemctl', 'is-enabled', 'nginx.service'] in directory '/root'
2018-09-07 22:32:39,089 [salt.state       :290 ][INFO    ][12654] The service nginx is already running
2018-09-07 22:32:39,090 [salt.state       :1941][INFO    ][12654] Completed state [nginx] at time 22:32:39.090641 duration_in_ms=82.153
2018-09-07 22:32:39,091 [salt.state       :1770][INFO    ][12654] Running state [nginx] at time 22:32:39.091935
2018-09-07 22:32:39,093 [salt.state       :1803][INFO    ][12654] Executing state service.mod_watch for [nginx]
2018-09-07 22:32:39,094 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12654] Executing command ['systemctl', 'is-active', 'nginx.service'] in directory '/root'
2018-09-07 22:32:39,121 [salt.loaded.int.module.cmdmod:395 ][INFO    ][12654] Executing command ['systemd-run', '--scope', 'systemctl', 'restart', 'nginx.service'] in directory '/root'
2018-09-07 22:32:39,312 [salt.state       :290 ][INFO    ][12654] {'nginx': True}
2018-09-07 22:32:39,313 [salt.state       :1941][INFO    ][12654] Completed state [nginx] at time 22:32:39.313174 duration_in_ms=221.24
2018-09-07 22:32:39,320 [salt.minion      :1708][INFO    ][12654] Returning information for job: 20180907223035387859
2018-09-07 22:32:40,089 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command pillar.get with jid 20180907223240079155
2018-09-07 22:32:40,112 [salt.minion      :1431][INFO    ][13892] Starting a new job with PID 13892
2018-09-07 22:32:40,121 [salt.minion      :1708][INFO    ][13892] Returning information for job: 20180907223240079155
2018-09-07 22:32:40,847 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command cp.push with jid 20180907223240833342
2018-09-07 22:32:40,874 [salt.minion      :1431][INFO    ][13897] Starting a new job with PID 13897
2018-09-07 22:32:40,905 [salt.minion      :1708][INFO    ][13897] Returning information for job: 20180907223240833342
2018-09-07 22:34:54,559 [salt.minion      :1307][INFO    ][1571] User sudo_ubuntu Executing command cp.push_dir with jid 20180907223454548943
2018-09-07 22:34:54,588 [salt.minion      :1431][INFO    ][13960] Starting a new job with PID 13960
