diff --git a/ansible-role-requirements.yml b/ansible-role-requirements.yml
index df1d0d65c1..17c8dfa4da 100644
--- a/ansible-role-requirements.yml
+++ b/ansible-role-requirements.yml
@@ -1,196 +1,196 @@
 - name: apt_package_pinning
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-apt_package_pinning
-  version: master
+  version: 364fc9fcd8ff652546c13d9c20ac808bc0e35f66
 - name: pip_install
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-pip_install
-  version: master
+  version: 289531e46bcbf65d53da6e1a2b9834fe4741a4ec
 - name: galera_client
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-galera_client
-  version: master
+  version: c093c13e01826da545bf9a0259e0be441bc1b5e1
 - name: galera_server
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-galera_server
-  version: master
+  version: 61609d8f9f99826cd4a519ebde81efdf7d697e76
 - name: ceph_client
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-ceph_client
-  version: master
+  version: 573ea17a107fc364ce4326409c3e643d5e5972dd
 - name: haproxy_server
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-haproxy_server
-  version: master
+  version: 32415ab81c61083ac5a83b65274703e4a5470e5e
 - name: keepalived
   scm: git
   src: https://github.com/evrardjp/ansible-keepalived
-  version: master
+  version: 2.6.1
 - name: lxc_container_create
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-lxc_container_create
-  version: master
+  version: 22c4d0911aba28e169f806e1fddf87a952ac1207
 - name: lxc_hosts
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-lxc_hosts
-  version: master
+  version: 84ae0818f5e6f556830ec0e990a57fbaddaefd9d
 - name: memcached_server
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-memcached_server
-  version: master
+  version: 58e17aa13ebe7b0aa5da7c00afc75d6716d2720d
 - name: openstack-ansible-security
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-security
-  version: master
+  version: 6f524798fcd51fdfdf668a43de9930ff7b41b24c
 - name: openstack_hosts
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-openstack_hosts
-  version: master
+  version: 4da878d8bd275559c93554bba2789fe1482b6d50
 - name: os_keystone
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_keystone
-  version: master
+  version: cee7a02143a1826479e6444c6fb5f1c2b6074ab7
 - name: openstack_openrc
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-openstack_openrc
-  version: master
+  version: 42c25da7cba779ea4fd51cd1939a5eb50832c10e
 - name: os_aodh
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_aodh
-  version: master
+  version: 9dcacb8fd6feef02e485f99c83535707ae67876b
 - name: os_barbican
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_barbican
-  version: master
+  version: bb3f39cb2f3c31c6980aa65c8953ff6293b992c0
 - name: os_ceilometer
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_ceilometer
-  version: master
+  version: 178ad8245fa019f0610c628c58c377997b011e8a
 - name: os_cinder
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_cinder
-  version: master
+  version: 0458e948c2f7065af7b5962170c9e2e1101dee22
 - name: os_glance
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_glance
-  version: master
+  version: bababac1057c4d32a84fc552c273439f84d1dd80
 - name: os_gnocchi
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_gnocchi
-  version: master
+  version: 39d0d7c2d8b5caa871dec2fb7c14583d6588f716
 - name: os_heat
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_heat
-  version: master
+  version: 07d59ddb757b2d2557fba52ac537803e646e65b4
 - name: os_horizon
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_horizon
-  version: master
+  version: aaa29f616d8bd7890cce949a1f5d4d08bd82d927
 - name: os_ironic
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_ironic
-  version: master
+  version: 314d6c5658b7a0c141c1ad1243b2763af48a925f
 - name: os_magnum
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_magnum
-  version: master
+  version: 8329c257dff25686827bd1cc904506d76ad1d12f
 - name: os_trove
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_trove
-  version: master
+  version: b948402c76d6188caa7be376098354cdb850d638
 - name: os_neutron
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_neutron
-  version: master
+  version: f4b17afd216fc8e9bde9d4d0f29abd24fcfd248c
 - name: os_nova
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_nova
-  version: master
+  version: 511963b7921ec7c2db24e8ee1d71a940b0aafae4
 - name: os_rally
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_rally
-  version: master
+  version: 96153c5b3285d11d00611a03135c9d8f267e0f52
 - name: os_sahara
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_sahara
-  version: master
+  version: 012d3f3530f878e5143d58380f94d1f514baad04
 - name: os_swift
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_swift
-  version: master
+  version: 6a1669fb3dbbfd9727b042be9fac405b225f572c
 - name: os_tempest
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_tempest
-  version: master
+  version: 9d2bfb09d1ebbc9102329b0d42de33aa321e57b1
 - name: plugins
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-plugins
-  version: master
+  version: 5e1828ce6e3f7120b61113bc57e6a2e74dec90bf
 - name: rabbitmq_server
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-rabbitmq_server
-  version: master
+  version: b64d6bd1688d5e2e10c02e5d60eb4644803667af
 - name: repo_build
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-repo_build
-  version: master
+  version: fe3ae20f74a912925d5c78040984957a6d55f9de
 - name: repo_server
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-repo_server
-  version: master
+  version: 7ea0820e0941282cd5c5cc263e939ffbee54ba52
 - name: rsyslog_client
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-rsyslog_client
-  version: master
+  version: 5a150eee9b808e0c837c6b264f4aac6a21083cf4
 - name: rsyslog_server
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-rsyslog_server
-  version: master
+  version: a1fbb19ddddcc3344fc49f32026955d0e9018fb6
 - name: sshd
   scm: git
   src: https://github.com/willshersystems/ansible-sshd
-  version: master
+  version: 0.4.5
 - name: bird
   scm: git
   src: https://github.com/logan2211/ansible-bird
-  version: master
+  version: '1.2'
 - name: etcd
   scm: git
   src: https://github.com/logan2211/ansible-etcd
-  version: master
+  version: '1.2'
 - name: unbound
   scm: git
   src: https://github.com/logan2211/ansible-unbound
-  version: master
+  version: '1.1'
 - name: resolvconf
   scm: git
   src: https://github.com/logan2211/ansible-resolvconf
-  version: master
+  version: '1.2'
 - name: os_designate
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_designate
-  version: master
+  version: b7098a6bdea73c869f45a86e0cc78d21b032161e
 - name: ceph.ceph-common
   scm: git
   src: https://github.com/ceph/ansible-ceph-common
-  version: master
+  version: v2.1.9
 - name: ceph.ceph-docker-common
   scm: git
   src: https://github.com/ceph/ansible-ceph-docker-common
-  version: master
+  version: ca86fd0ef6d24aa2c750a625acdcb8012c374aa0
 - name: ceph-mon
   scm: git
   src: https://github.com/ceph/ansible-ceph-mon
-  version: master
+  version: v2.1.9
 - name: ceph-osd
   scm: git
   src: https://github.com/ceph/ansible-ceph-osd
-  version: master
+  version: v2.1.9
 - name: os_octavia
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_octavia
-  version: master
+  version: a7eb80f9a3836c063ed4c0f2a088beb956d8085e
 - name: os_molteniron
   scm: git
   src: https://git.openstack.org/openstack/openstack-ansible-os_molteniron
-  version: master
+  version: a80e50d65ad91ee6b69125fd884139b52ae703a6
diff --git a/playbooks/defaults/repo_packages/gnocchi.yml b/playbooks/defaults/repo_packages/gnocchi.yml
index 08432bcfb8..ed1a10ae83 100644
--- a/playbooks/defaults/repo_packages/gnocchi.yml
+++ b/playbooks/defaults/repo_packages/gnocchi.yml
@@ -33,5 +33,5 @@
 ## This service has a different stable branch strategy to the rest of OpenStack.
 ## The SHA is recorded here to make the SHA updating easier.
 gnocchi_git_repo: https://git.openstack.org/openstack/gnocchi
-gnocchi_git_install_branch: 5beff0edcc14612921978ee7dd5829e37192dd5e # HEAD of "master" as of 04.04.2017
+gnocchi_git_install_branch: 5beff0edcc14612921978ee7dd5829e37192dd5e # HEAD of "master" as of 10.04.2017
 gnocchi_git_project_group: gnocchi_all
diff --git a/playbooks/defaults/repo_packages/nova_consoles.yml b/playbooks/defaults/repo_packages/nova_consoles.yml
index 3001c7d65b..afd7686068 100644
--- a/playbooks/defaults/repo_packages/nova_consoles.yml
+++ b/playbooks/defaults/repo_packages/nova_consoles.yml
@@ -27,11 +27,11 @@
 
 ## NOVNC from source
 novncproxy_git_repo: https://github.com/kanaka/novnc
-novncproxy_git_install_branch: f4ae0a1402ec2e77a653f25d0b73f426680b8fcf # HEAD of "master" as of 04.04.2017
+novncproxy_git_install_branch: dd44a8ead8e614dbeaa4014900b6e74ee9f70f62 # HEAD of "master" as of 10.04.2017
 novncproxy_git_project_group: nova_console
 
 ## spice-html5 from source
 spicehtml5_git_repo: https://github.com/SPICE/spice-html5
-spicehtml5_git_install_branch: 54cc41299bea8cd681ed0262735e0fd821cd774a # HEAD of "master" as of 04.04.2017
+spicehtml5_git_install_branch: 54cc41299bea8cd681ed0262735e0fd821cd774a # HEAD of "master" as of 10.04.2017
 spicehtml5_git_project_group: nova_console
 
diff --git a/playbooks/defaults/repo_packages/openstack_services.yml b/playbooks/defaults/repo_packages/openstack_services.yml
index e9a2f49d9a..0fc1b1b07e 100644
--- a/playbooks/defaults/repo_packages/openstack_services.yml
+++ b/playbooks/defaults/repo_packages/openstack_services.yml
@@ -31,179 +31,179 @@
 
 ## Global Requirements
 requirements_git_repo: https://git.openstack.org/openstack/requirements
-requirements_git_install_branch: 322f7271d43b66689b374efdb1b9a0501bb40dab # HEAD of "master" as of 04.04.2017
+requirements_git_install_branch: eab9da90971e213b2ef07e1683c5de816275c71f # HEAD of "master" as of 10.04.2017
 
 
 ## Aodh service
 aodh_git_repo: https://git.openstack.org/openstack/aodh
-aodh_git_install_branch: ecc660ba05c555634e72bc1b040833e311a08777 # HEAD of "master" as of 04.04.2017
+aodh_git_install_branch: 77d2e07818e7b5d2fdd4bf5dde6cd5f9527892b0 # HEAD of "master" as of 10.04.2017
 aodh_git_project_group: aodh_all
 
 
 ## Barbican service
 barbican_git_repo: https://git.openstack.org/openstack/barbican
-barbican_git_install_branch: 7d8074fddb4915e9a7264a2955576d626ca3f6ce # HEAD of "master" as of 04.04.2017
+barbican_git_install_branch: 2948a004d633e66251c7c0b65fdd3f09c4d654ac # HEAD of "master" as of 10.04.2017
 barbican_git_project_group: barbican_all
 
 
 ## Ceilometer service
 ceilometer_git_repo: https://git.openstack.org/openstack/ceilometer
-ceilometer_git_install_branch: 4c995d35cb157a407776987af27468f2e28ede09 # HEAD of "master" as of 04.04.2017
+ceilometer_git_install_branch: 84e871fda8af4526e336475088b4f87940c0357a # HEAD of "master" as of 10.04.2017
 ceilometer_git_project_group: ceilometer_all
 
 
 ## Cinder service
 cinder_git_repo: https://git.openstack.org/openstack/cinder
-cinder_git_install_branch: 641864b6629123353bec33b30b8bfddaadd5e3f5 # HEAD of "master" as of 04.04.2017
+cinder_git_install_branch: 3ed5f157a8486d2fa1fdd698b9b295c7a2e9f675 # HEAD of "master" as of 10.04.2017
 cinder_git_project_group: cinder_all
 
 
 ## Designate service
 designate_git_repo: https://git.openstack.org/openstack/designate
-designate_git_install_branch: 8f4adefbedd5a3c4214cafc01d3f6a4a102e99bf # HEAD of "master" as of 04.04.2017
+designate_git_install_branch: 8f4adefbedd5a3c4214cafc01d3f6a4a102e99bf # HEAD of "master" as of 10.04.2017
 designate_git_project_group: designate_all
 
 
 ## Horizon Designate dashboard plugin
 designate_dashboard_git_repo: https://git.openstack.org/openstack/designate-dashboard
-designate_dashboard_git_install_branch: 8113ea0addaebe8eab2cbd0672d4d844443cf840 # HEAD of "master" as of 04.04.2017
+designate_dashboard_git_install_branch: 8113ea0addaebe8eab2cbd0672d4d844443cf840 # HEAD of "master" as of 10.04.2017
 designate_dashboard_git_project_group: horizon_all
 
 
 ## Dragonflow service
 dragonflow_git_repo: https://git.openstack.org/openstack/dragonflow
-dragonflow_git_install_branch: 51abd4ffd893e083ea4e25492b85a57b0152f09a # HEAD of "master" as of 04.04.2017
+dragonflow_git_install_branch: 5f8286c8663ff0d8d5453520bac01861f7972fde # HEAD of "master" as of 10.04.2017
 dragonflow_git_project_group: neutron_all
 
 
 ## Glance service
 glance_git_repo: https://git.openstack.org/openstack/glance
-glance_git_install_branch: 7678c6343fc5bd5c6274fe1c952799589bbdc405 # HEAD of "master" as of 04.04.2017
+glance_git_install_branch: 1637a114828344d19ac06e4f4959ecac38faafa6 # HEAD of "master" as of 10.04.2017
 glance_git_project_group: glance_all
 
 
 ## Heat service
 heat_git_repo: https://git.openstack.org/openstack/heat
-heat_git_install_branch: b9120e205ec5ce49f6c0b8833081456072a2437c # HEAD of "master" as of 04.04.2017
+heat_git_install_branch: e7999a9c5d7c889d2216f8d1f79d209712bb90a8 # HEAD of "master" as of 10.04.2017
 heat_git_project_group: heat_all
 
 
 ## Horizon service
 horizon_git_repo: https://git.openstack.org/openstack/horizon
-horizon_git_install_branch: e5b0b6ee116a4f2f85f8899f3c7122effd35f482 # HEAD of "master" as of 04.04.2017
+horizon_git_install_branch: f4e14953d20e3cbd2486cd8115510a8bec9e08fc # HEAD of "master" as of 10.04.2017
 horizon_git_project_group: horizon_all
 
 ## Horizon Ironic dashboard plugin
 ironic_dashboard_git_repo: https://git.openstack.org/openstack/ironic-ui
-ironic_dashboard_git_install_branch: ea73fa49d2437f5f5189b55f7d365a1b5df3cc44 # HEAD of "master" as of 04.04.2017
+ironic_dashboard_git_install_branch: 2ac7c5235c3574f5abd6f96545fa1681957d7739 # HEAD of "master" as of 10.04.2017
 ironic_dashboard_git_project_group: horizon_all
 
 ## Horizon Magnum dashboard plugin
 magnum_dashboard_git_repo: https://git.openstack.org/openstack/magnum-ui
-magnum_dashboard_git_install_branch: d28b05f894599c4cffb3f72c2b87cf1a2da06417 # HEAD of "master" as of 04.04.2017
+magnum_dashboard_git_install_branch: f0b28f1b36d3ba4d4aadec309bfb6ba90bcd23cb # HEAD of "master" as of 10.04.2017
 magnum_dashboard_git_project_group: horizon_all
 
 ## Horizon LBaaS dashboard plugin
 neutron_lbaas_dashboard_git_repo: https://git.openstack.org/openstack/neutron-lbaas-dashboard
-neutron_lbaas_dashboard_git_install_branch: 44ae87494f8eee78833f26b5ec733b1a1e5e1b67 # HEAD of "master" as of 04.04.2017
+neutron_lbaas_dashboard_git_install_branch: 16d1218cb5ca3c27bdd1c5163f5e8ceb0d8e6a0f # HEAD of "master" as of 10.04.2017
 neutron_lbaas_dashboard_git_project_group: horizon_all
 
 ## Horizon Sahara dashboard plugin
 sahara_dashboard_git_repo: https://git.openstack.org/openstack/sahara-dashboard
-sahara_dashboard_git_install_branch: b7c754483d8f968c47f149b320c276fa9a3b58c2 # HEAD of "master" as of 04.04.2017
+sahara_dashboard_git_install_branch: b7c754483d8f968c47f149b320c276fa9a3b58c2 # HEAD of "master" as of 10.04.2017
 sahara_dashboard_git_project_group: horizon_all
 
 
 ## Keystone service
 keystone_git_repo: https://git.openstack.org/openstack/keystone
-keystone_git_install_branch: 1de8b9d776411a8db2e48653155d0875bd49efcf # HEAD of "master" as of 04.04.2017
+keystone_git_install_branch: 2dbd5d99bbf71ad5c4a81f54e8d4ce0de258ab00 # HEAD of "master" as of 10.04.2017
 keystone_git_project_group: keystone_all
 
 
 ## Neutron service
 neutron_git_repo: https://git.openstack.org/openstack/neutron
-neutron_git_install_branch: cb60d32003d095ff9cf963b50b39bae07641c83a # HEAD of "master" as of 04.04.2017
+neutron_git_install_branch: b4ac177451275f1045d212df512d314f17a306f4 # HEAD of "master" as of 10.04.2017
 neutron_git_project_group: neutron_all
 
 neutron_lbaas_git_repo: https://git.openstack.org/openstack/neutron-lbaas
-neutron_lbaas_git_install_branch: b5ccacc81e841ad9c047c54066f9fe285ce5f7f2 # HEAD of "master" as of 04.04.2017
+neutron_lbaas_git_install_branch: 8a4708044c6ca23bda728eddf7f14302463928fa # HEAD of "master" as of 10.04.2017
 neutron_lbaas_git_project_group: neutron_all
 
 neutron_vpnaas_git_repo: https://git.openstack.org/openstack/neutron-vpnaas
-neutron_vpnaas_git_install_branch: b9fc93518a07b3c1ae797126542ed3002ac8bc3f # HEAD of "master" as of 04.04.2017
+neutron_vpnaas_git_install_branch: 5ceef75a4b9aa48dd5bf07ac4e30c85029770c82 # HEAD of "master" as of 10.04.2017
 neutron_vpnaas_git_project_group: neutron_all
 
 neutron_fwaas_git_repo: https://git.openstack.org/openstack/neutron-fwaas
-neutron_fwaas_git_install_branch: fc363c3ee0e00558c2efdb283aab3ef8aaf15a1f # HEAD of "master" as of 04.04.2017
+neutron_fwaas_git_install_branch: 462511d09a18c48bdc89fd6dfb0d03bddb407a4a # HEAD of "master" as of 10.04.2017
 neutron_fwaas_git_project_group: neutron_all
 
 neutron_dynamic_routing_git_repo: https://git.openstack.org/openstack/neutron-dynamic-routing
-neutron_dynamic_routing_git_install_branch: d59cc092d2ef7b0b8838773807f968e0aa8f2841 # HEAD of "master" as of 04.04.2017
+neutron_dynamic_routing_git_install_branch: abeee2df89ade38843e3f8226fe25f6d7791b0f8 # HEAD of "master" as of 10.04.2017
 neutron_dynamic_routing_git_project_group: neutron_all
 
 
 ## Nova service
 nova_git_repo: https://git.openstack.org/openstack/nova
-nova_git_install_branch: 48f9c365befdb6ab583bfa2773e0969b32d69ca7 # HEAD of "master" as of 04.04.2017
+nova_git_install_branch: de0a8440c86e180f39e2eed421e1a413844e4dac # HEAD of "master" as of 06.04.2017
 nova_git_project_group: nova_all
 
 
 ## PowerVM Virt Driver
 nova_powervm_git_repo: https://git.openstack.org/openstack/nova-powervm
-nova_powervm_git_install_branch: 5fae3168ecf80260f2900b30472607634e8f0b84 # HEAD of "master" as of 04.04.2017
+nova_powervm_git_install_branch: 19d4bf633a2d843567bcbdd081d568b7bf99ae80 # HEAD of "master" as of 10.04.2017
 nova_powervm_git_project_group: nova_compute
 
 
 ## LXD Virt Driver
 nova_lxd_git_repo: https://git.openstack.org/openstack/nova-lxd
-nova_lxd_git_install_branch: c3f55e797ec4cbb34b9238c352b6bf70f975c1b0 # HEAD of "master" as of 04.04.2017
+nova_lxd_git_install_branch: 02ce341738a3cc2c4af3c386879b830737d09999 # HEAD of "master" as of 10.04.2017
 nova_lxd_git_project_group: nova_compute
 
 
 ## Sahara service
 sahara_git_repo: https://git.openstack.org/openstack/sahara
-sahara_git_install_branch: edde55febc7ec2284e1f1475964da07d1ac127ab # HEAD of "master" as of 04.04.2017
+sahara_git_install_branch: 8a51d42d03acc8bcfab60bcb461a5afaf2176cc9 # HEAD of "master" as of 10.04.2017
 sahara_git_project_group: sahara_all
 
 
 ## Swift service
 swift_git_repo: https://git.openstack.org/openstack/swift
-swift_git_install_branch: bc9a7075d3accf3160043e8366745a1dd895b08d # HEAD of "master" as of 04.04.2017
+swift_git_install_branch: b3e69acb43dfdd7b86dfc369ae4df156859e8fd4 # HEAD of "master" as of 10.04.2017
 swift_git_project_group: swift_all
 
 
 ## Swift3 middleware
 swift3_git_repo: https://git.openstack.org/openstack/swift3
-swift3_git_install_branch: 5f9516b58c4a5628778c33205c761cecc603ea69 # HEAD of "master" as of 04.04.2017
+swift3_git_install_branch: 5f9516b58c4a5628778c33205c761cecc603ea69 # HEAD of "master" as of 10.04.2017
 swift3_git_project_group: swift_all
 
 
 ## Ironic service
 ironic_git_repo: https://git.openstack.org/openstack/ironic
-ironic_git_install_branch: 7ad3f9de8b7308b99a56fffba08b6914890138ab # HEAD of "master" as of 04.04.2017
+ironic_git_install_branch: 94dec8049160e91396e7326a06fbf97c28ddb6a0 # HEAD of "master" as of 10.04.2017
 ironic_git_project_group: ironic_all
 
 ## Magnum service
 magnum_git_repo: https://git.openstack.org/openstack/magnum
-magnum_git_install_branch: 0c7637432782cc4179f8fb6c40c8a18a11824b66 # HEAD of "master" as of 04.04.2017
+magnum_git_install_branch: 1f2f002c52b2fbe96886c184a682cadd4b0dd1c6 # HEAD of "master" as of 10.04.2017
 magnum_git_project_group: magnum_all
 
 ## Trove service
 trove_git_repo: https://git.openstack.org/openstack/trove
-trove_git_install_branch: 03091f1c58908f48ad3baee8e34ccff66eb293ba # HEAD of "master" as of 04.04.2017
+trove_git_install_branch: 3d145a537ce4aed4f23cc67dcd417a629dd6effe # HEAD of "master" as of 10.04.2017
 trove_git_project_group: trove_all
 
 ## Horizon Trove dashboard plugin
 trove_dashboard_git_repo: https://git.openstack.org/openstack/trove-dashboard
-trove_dashboard_git_install_branch: a485b5d79f2fcdc8d37cf61f5043c3d3a4a60313 # HEAD of "master" as of 04.04.2017
+trove_dashboard_git_install_branch: 071394c2fd6ca3bd9cb455e053d697c4f2b9a632 # HEAD of "master" as of 10.04.2017
 trove_dashboard_git_project_group: horizon_all
 
 ## Octavia service
 octavia_git_repo: https://git.openstack.org/openstack/octavia
-octavia_git_install_branch: 53ada8f74a96ec33f04f3ebf623711b0d7b02cb0 # HEAD of "master" as of 04.04.2017
+octavia_git_install_branch: 5579f445f233fe632ea8f4a1bae8b9870066d87f # HEAD of "master" as of 10.04.2017
 octavia_git_project_group: octavia_all
 
 ## Molteniron service
 molteniron_git_repo: https://git.openstack.org/openstack/molteniron
-molteniron_git_install_branch: 7402de62eb4497e53d633e0dff9a1150b7acf175 # HEAD of "master" as of 04.04.2017
+molteniron_git_install_branch: 7402de62eb4497e53d633e0dff9a1150b7acf175 # HEAD of "master" as of 10.04.2017
 molteniron_git_project_group: molteniron_all
diff --git a/playbooks/defaults/repo_packages/openstack_testing.yml b/playbooks/defaults/repo_packages/openstack_testing.yml
index e121688153..d4310d29ab 100644
--- a/playbooks/defaults/repo_packages/openstack_testing.yml
+++ b/playbooks/defaults/repo_packages/openstack_testing.yml
@@ -27,13 +27,13 @@
 
 ## Tempest service
 tempest_git_repo: https://git.openstack.org/openstack/tempest
-tempest_git_install_branch: 82e5b2d8374ff57ef7e45cc596f447fe264d8426 # HEAD of "master" as of 04.04.2017
+tempest_git_install_branch: c85642f6e2c355669c42572c2b08706ee9f98bbf # HEAD of "master" as of 10.04.2017
 tempest_git_project_group: utility_all
 tempest_git_install_fragments: "venvwithindex=True&ignorerequirements=True"
 
 
 ## Rally service
 rally_git_repo: https://git.openstack.org/openstack/rally
-rally_git_install_branch: 7fb348c31b8908f3f95fb6ffb014698ad13850ec # HEAD of "master" as of 04.04.2017
+rally_git_install_branch: 70db29579274ac48a088a0aa85c1eba1497071d8 # HEAD of "master" as of 10.04.2017
 rally_git_project_group: utility_all
 rally_git_install_fragments: "venvwithindex=True&ignorerequirements=True"
diff --git a/releasenotes/notes/Add-CentOS-support-05f2d1302b7ee2e7.yaml b/releasenotes/notes/Add-CentOS-support-05f2d1302b7ee2e7.yaml
new file mode 100644
index 0000000000..c597fd928b
--- /dev/null
+++ b/releasenotes/notes/Add-CentOS-support-05f2d1302b7ee2e7.yaml
@@ -0,0 +1,4 @@
+---
+features:
+  - CentOS7/RHEL support has been added to the ceph_client role.
+  - Only Ceph repos are supported for now.
diff --git a/releasenotes/notes/aodh-init-config-overrides-f152b8fd098efb0d.yaml b/releasenotes/notes/aodh-init-config-overrides-f152b8fd098efb0d.yaml
new file mode 100644
index 0000000000..dde04128e3
--- /dev/null
+++ b/releasenotes/notes/aodh-init-config-overrides-f152b8fd098efb0d.yaml
@@ -0,0 +1,10 @@
+---
+features:
+  - New variables have been added to allow a deployer to customize
+    a aodh systemd unit file to their liking.
+  - The task dropping the aodh systemd unit files now uses the
+    ``config_template`` action plugin allowing deployers access to
+    customize the unit files as they see fit without having to
+    load extra options into the defaults and polute the generic
+    systemd unit file with jinja2 variables and conditionals.
+
diff --git a/releasenotes/notes/cap-workers-fc70b4f8586ba1a5.yaml b/releasenotes/notes/cap-workers-fc70b4f8586ba1a5.yaml
new file mode 100644
index 0000000000..6fc35e2da5
--- /dev/null
+++ b/releasenotes/notes/cap-workers-fc70b4f8586ba1a5.yaml
@@ -0,0 +1,6 @@
+---
+features:
+  - The number of worker threads for neutron will now be capped at 16 unless
+    a specific value is specified. Previously, the calculated number of workers
+    could get too high on systems with a large number of processors.  This was
+    particularly evident on POWER systems.
diff --git a/releasenotes/notes/capping_aodh_wsgi_processes-6db6da9ba36c8851.yaml b/releasenotes/notes/capping_aodh_wsgi_processes-6db6da9ba36c8851.yaml
new file mode 100644
index 0000000000..e9b3f8af31
--- /dev/null
+++ b/releasenotes/notes/capping_aodh_wsgi_processes-6db6da9ba36c8851.yaml
@@ -0,0 +1,6 @@
+---
+features:
+  - Capping the default value for the variable ``aodh_wsgi_processes``
+    to 16 when the user doesn't configure this variable. Default value
+    is twice the number of vCPUs available on the machine with a capping
+    value of 16.
diff --git a/releasenotes/notes/capping_cinder_osapi_volume_workers-db32afcf7615b05b.yaml b/releasenotes/notes/capping_cinder_osapi_volume_workers-db32afcf7615b05b.yaml
new file mode 100644
index 0000000000..0f33f8e5e6
--- /dev/null
+++ b/releasenotes/notes/capping_cinder_osapi_volume_workers-db32afcf7615b05b.yaml
@@ -0,0 +1,5 @@
+---
+features:
+  - Capping the default value for the variable ``cinder_osapi_volume_workers``
+    to 16 when the user doesn't configure this variable. Default value is half
+    the number of vCPUs available on the machine with a capping value of 16.
diff --git a/releasenotes/notes/capping_glance_workers-54afc20c20baa14e.yaml b/releasenotes/notes/capping_glance_workers-54afc20c20baa14e.yaml
new file mode 100644
index 0000000000..deb5354a2b
--- /dev/null
+++ b/releasenotes/notes/capping_glance_workers-54afc20c20baa14e.yaml
@@ -0,0 +1,6 @@
+---
+features:
+  - Capping the default value for the variables ``glance_api_workers`` and
+    ``glance_registry_workers`` to 16 when the user doesn't configure
+    these variables. Default value is half the number of vCPUs available
+    on the machine with a capping value of 16.
diff --git a/releasenotes/notes/capping_gnocchi_wsgi_processes-eb67a87e86097a7f.yaml b/releasenotes/notes/capping_gnocchi_wsgi_processes-eb67a87e86097a7f.yaml
new file mode 100644
index 0000000000..5c57a7249b
--- /dev/null
+++ b/releasenotes/notes/capping_gnocchi_wsgi_processes-eb67a87e86097a7f.yaml
@@ -0,0 +1,6 @@
+---
+features:
+  - Capping the default value for the variable ``gnocchi_wsgi_processes``
+    to 16 when the user doesn't configure this variable. Default value
+    is twice the number of vCPUs available on the machine with a capping
+    value of 16.
diff --git a/releasenotes/notes/capping_heat_workers-13791c456e59277d.yaml b/releasenotes/notes/capping_heat_workers-13791c456e59277d.yaml
new file mode 100644
index 0000000000..eae7447ee6
--- /dev/null
+++ b/releasenotes/notes/capping_heat_workers-13791c456e59277d.yaml
@@ -0,0 +1,6 @@
+---
+features:
+  - Capping the default value for the variables
+    ``heat_api_workers`` and ``heat_engine_workers`` to 16 when the user
+    doesn't configure these variables. Default value is half the number of
+    vCPUs available on the machine with a capping value of 16.
diff --git a/releasenotes/notes/capping_horizon_workers-29ecc4893bcc3a4b.yaml b/releasenotes/notes/capping_horizon_workers-29ecc4893bcc3a4b.yaml
new file mode 100644
index 0000000000..1718fdcb87
--- /dev/null
+++ b/releasenotes/notes/capping_horizon_workers-29ecc4893bcc3a4b.yaml
@@ -0,0 +1,6 @@
+---
+features:
+  - Capping the default value for the variables
+    ``horizon_wsgi_processes`` and ``horizon_wsgi_threads`` to 16 when the
+    user doesn't configure these variables. Default value is half the number
+    of vCPUs available on the machine with a capping value of 16.
diff --git a/releasenotes/notes/capping_ironic_wsgi_processes-6fa7306fc3c29de7.yaml b/releasenotes/notes/capping_ironic_wsgi_processes-6fa7306fc3c29de7.yaml
new file mode 100644
index 0000000000..cc5982b050
--- /dev/null
+++ b/releasenotes/notes/capping_ironic_wsgi_processes-6fa7306fc3c29de7.yaml
@@ -0,0 +1,6 @@
+---
+features:
+  - Capping the default value for the variable ``ironic_wsgi_processes``
+    to 16 when the user doesn't configure this variable. Default value
+    is one fourth the number of vCPUs available on the machine with a
+    capping value of 16.
diff --git a/releasenotes/notes/capping_keystone_workers-e284a47fc4dcea38.yaml b/releasenotes/notes/capping_keystone_workers-e284a47fc4dcea38.yaml
new file mode 100644
index 0000000000..b3b8477877
--- /dev/null
+++ b/releasenotes/notes/capping_keystone_workers-e284a47fc4dcea38.yaml
@@ -0,0 +1,6 @@
+---
+features:
+  - Capping the default value for the variable ``keystone_wsgi_processes``
+    to 16 when the user doesn't configure this variable. Default value is
+    half the number of vCPUs available on the machine with a capping value
+    of 16.
diff --git a/releasenotes/notes/capping_neutron_workers-d97a5d50ca996af5.yaml b/releasenotes/notes/capping_neutron_workers-d97a5d50ca996af5.yaml
new file mode 100644
index 0000000000..9517de6d1f
--- /dev/null
+++ b/releasenotes/notes/capping_neutron_workers-d97a5d50ca996af5.yaml
@@ -0,0 +1,6 @@
+---
+features:
+  - Capping the default value for the variables ``neutron_api_workers``,
+    ``neutron_num_sync_threads`` and ``neutron_metadata_workers`` to 16 when
+    the user doesn't configure these variables. Default value is half the
+    number of vCPUs available on the machine with a capping value of 16.
diff --git a/releasenotes/notes/capping_nova_workers-349f0f4d3fd50b37.yaml b/releasenotes/notes/capping_nova_workers-349f0f4d3fd50b37.yaml
new file mode 100644
index 0000000000..e24f4ff194
--- /dev/null
+++ b/releasenotes/notes/capping_nova_workers-349f0f4d3fd50b37.yaml
@@ -0,0 +1,7 @@
+---
+features:
+  - Capping the default value for the variables ``nova_wsgi_processes``,
+    ``nova_osapi_compute_workers``, ``nova_metadata_workers`` and
+    ``nova_conductor_workers`` to 16 when the user doesn't configure these
+    variables. Default value is half the number of vCPUs available on the
+    machine with a capping value of 16.
diff --git a/releasenotes/notes/capping_repo_nginx_workers-ddbc355855f8fe43.yaml b/releasenotes/notes/capping_repo_nginx_workers-ddbc355855f8fe43.yaml
new file mode 100644
index 0000000000..7a94146154
--- /dev/null
+++ b/releasenotes/notes/capping_repo_nginx_workers-ddbc355855f8fe43.yaml
@@ -0,0 +1,5 @@
+---
+features:
+  - Capping the default value for the variable ``repo_nginx_workers`` to
+    16 when the user doesn't configure this variable. Default value is half
+    the number of vCPUs available on the machine with a capping value of 16.
diff --git a/releasenotes/notes/capping_sahara_api_workers-d95bdf63093ce893.yaml b/releasenotes/notes/capping_sahara_api_workers-d95bdf63093ce893.yaml
new file mode 100644
index 0000000000..bfe84629c2
--- /dev/null
+++ b/releasenotes/notes/capping_sahara_api_workers-d95bdf63093ce893.yaml
@@ -0,0 +1,6 @@
+---
+features:
+  - Capping the default value for the variable ``sahara_api_workers``
+    to 16 when the user doesn't configure this variable. Default
+    value is half the number of vCPUs available on the machine with
+    a capping value of 16.
diff --git a/releasenotes/notes/capping_swift_services_workers-5ac9ecb28f56469f.yaml b/releasenotes/notes/capping_swift_services_workers-5ac9ecb28f56469f.yaml
new file mode 100644
index 0000000000..34241cd149
--- /dev/null
+++ b/releasenotes/notes/capping_swift_services_workers-5ac9ecb28f56469f.yaml
@@ -0,0 +1,8 @@
+---
+features:
+  - Capping the default value for the variable ``swift_proxy_server_workers``
+    to 16 when the user doesn't configure this variable and if the swift proxy
+    is in a container. Default value is half the number of vCPUs available on
+    the machine if the swift proxy is not in a container. Default value is half
+    the number of vCPUs available on the machine with a capping value of 16
+    if the proxy is in a container.
diff --git a/releasenotes/notes/ceilometer-init-config-overrides-8ac1b94bd70c9c09.yaml b/releasenotes/notes/ceilometer-init-config-overrides-8ac1b94bd70c9c09.yaml
new file mode 100644
index 0000000000..32dcf4406b
--- /dev/null
+++ b/releasenotes/notes/ceilometer-init-config-overrides-8ac1b94bd70c9c09.yaml
@@ -0,0 +1,10 @@
+---
+features:
+  - New variables have been added to allow a deployer to customize
+    a ceilometer systemd unit file to their liking.
+  - The task dropping the ceilometer systemd unit files now uses the
+    ``config_template`` action plugin allowing deployers access to
+    customize the unit files as they see fit without having to
+    load extra options into the defaults and polute the generic
+    systemd unit file with jinja2 variables and conditionals.
+
diff --git a/releasenotes/notes/ceilometer_upstream_file_retrieve-bbbf147cdeacb8f2.yaml b/releasenotes/notes/ceilometer_upstream_file_retrieve-bbbf147cdeacb8f2.yaml
new file mode 100644
index 0000000000..feafd9fa81
--- /dev/null
+++ b/releasenotes/notes/ceilometer_upstream_file_retrieve-bbbf147cdeacb8f2.yaml
@@ -0,0 +1,10 @@
+---
+features:
+  - Several configuration files that were not
+    templated for the ``os_ceilometer`` role are now
+    retrieved from git. The git repository used can
+    be changed using the
+    ``ceilometer_git_config_lookup_location`` variable.
+    By default this points to ``git.openstack.org``.
+    These files can still be changed using the
+    ``ceilometer_x_overrides`` variables.
diff --git a/releasenotes/notes/cinder-init-config-overrides-9e495aee023deed6.yaml b/releasenotes/notes/cinder-init-config-overrides-9e495aee023deed6.yaml
new file mode 100644
index 0000000000..a1ea39498c
--- /dev/null
+++ b/releasenotes/notes/cinder-init-config-overrides-9e495aee023deed6.yaml
@@ -0,0 +1,10 @@
+---
+features:
+  - New variables have been added to allow a deployer to customize
+    a cinder systemd unit file to their liking.
+  - The task dropping the cinder systemd unit files now uses the
+    ``config_template`` action plugin allowing deployers access to
+    customize the unit files as they see fit without having to
+    load extra options into the defaults and polute the generic
+    systemd unit file with jinja2 variables and conditionals.
+
diff --git a/releasenotes/notes/cinder_api_v3-cc53677ce77d97c3.yaml b/releasenotes/notes/cinder_api_v3-cc53677ce77d97c3.yaml
new file mode 100644
index 0000000000..3422fdfe38
--- /dev/null
+++ b/releasenotes/notes/cinder_api_v3-cc53677ce77d97c3.yaml
@@ -0,0 +1,5 @@
+---
+features:
+  - Add support for the cinder v3 api. This is enabled
+    by default, but can be disabled by setting the
+    ``cinder_enable_v3_api`` variable to ``false``.
diff --git a/releasenotes/notes/cinder_init_time_settings-1ef46f6b9d4fc1df.yaml b/releasenotes/notes/cinder_init_time_settings-1ef46f6b9d4fc1df.yaml
new file mode 100644
index 0000000000..79e98e0a9e
--- /dev/null
+++ b/releasenotes/notes/cinder_init_time_settings-1ef46f6b9d4fc1df.yaml
@@ -0,0 +1,19 @@
+---
+features:
+  - The ``cinder_sigkill_timeout`` was introduced to control
+    the time between sending a SIGTERM signal and a SIGKILL signal when
+    stopping or restarting services. This can help in letting long-lived
+    sessions drain while preventing new ones from starting before a
+    restart. Default is 120 seconds (was harcoded to 300 seconds).
+  - The ``cinder_restart_wait`` variable has been added to control the time
+    between restarts of cinder services. Default is 5 seconds (was
+    hardcoded to 150 seconds).
+upgrade:
+  - The ``cinder_sigkill_timeout`` was introduced to control
+    the time between sending a SIGTERM signal and a SIGKILL signal when
+    stopping or restarting services. This can help in letting long-lived
+    sessions drain while preventing new ones from starting before a
+    restart. Default is 120 seconds (was harcoded to 300 seconds).
+  - The ``cinder_restart_wait`` variable has been added to control the time
+    between restarts of cinder services. Default is 5 seconds (was
+    hardcoded to 150 seconds).
diff --git a/releasenotes/notes/copr-repo-priority-60b3603b0c1ff2f7.yaml b/releasenotes/notes/copr-repo-priority-60b3603b0c1ff2f7.yaml
new file mode 100644
index 0000000000..a68609c4fc
--- /dev/null
+++ b/releasenotes/notes/copr-repo-priority-60b3603b0c1ff2f7.yaml
@@ -0,0 +1,6 @@
+---
+features:
+  - |
+    The COPR repository for installing LXC on CentOS 7 is now set to a higher
+    priority than the default to ensure that LXC packages always come from the
+    COPR repository.
diff --git a/releasenotes/notes/customizable-login-banner-string-d8d5ae874e8e49f3.yaml b/releasenotes/notes/customizable-login-banner-string-d8d5ae874e8e49f3.yaml
new file mode 100644
index 0000000000..08fefdd053
--- /dev/null
+++ b/releasenotes/notes/customizable-login-banner-string-d8d5ae874e8e49f3.yaml
@@ -0,0 +1,6 @@
+---
+features:
+  - |
+    Deployers can provide a customized login banner via a new Ansible variable:
+    ``security_login_banner_text``. This banner text is used for non-graphical
+    logins, which includes console and ssh logins.
diff --git a/releasenotes/notes/deprecate_auth_plugin-1a78326719d67f23.yaml b/releasenotes/notes/deprecate_auth_plugin-1a78326719d67f23.yaml
new file mode 100644
index 0000000000..4e70fe1f08
--- /dev/null
+++ b/releasenotes/notes/deprecate_auth_plugin-1a78326719d67f23.yaml
@@ -0,0 +1,5 @@
+---
+deprecations:
+  - The ``cinder_keystone_auth_plugin`` variable has been deprecated.
+    ``cinder_keystone_auth_type`` should be used instead to configure
+    authentication type.
diff --git a/releasenotes/notes/deprecate_auth_plugin-347b326919d67a18.yaml b/releasenotes/notes/deprecate_auth_plugin-347b326919d67a18.yaml
new file mode 100644
index 0000000000..dced9374ac
--- /dev/null
+++ b/releasenotes/notes/deprecate_auth_plugin-347b326919d67a18.yaml
@@ -0,0 +1,5 @@
+---
+deprecations:
+  - The ``neutron_keystone_auth_plugin`` variable has been deprecated.
+    ``neutron_keystone_auth_type`` should be used instead to configure
+    authentication type.
diff --git a/releasenotes/notes/deprecate_auth_plugin-397a32171826ef78.yaml b/releasenotes/notes/deprecate_auth_plugin-397a32171826ef78.yaml
new file mode 100644
index 0000000000..606cb85493
--- /dev/null
+++ b/releasenotes/notes/deprecate_auth_plugin-397a32171826ef78.yaml
@@ -0,0 +1,5 @@
+---
+deprecations:
+  - The ``swift_keystone_auth_plugin`` variable has been deprecated.
+    ``swift_keystone_auth_type`` should be used instead to configure
+    authentication type.
diff --git a/releasenotes/notes/deprecate_auth_plugin-451832a71b967e27.yaml b/releasenotes/notes/deprecate_auth_plugin-451832a71b967e27.yaml
new file mode 100644
index 0000000000..025ae7864f
--- /dev/null
+++ b/releasenotes/notes/deprecate_auth_plugin-451832a71b967e27.yaml
@@ -0,0 +1,5 @@
+---
+deprecations:
+  - The ``trove_keystone_auth_plugin`` variable has been deprecated.
+    ``trove_keystone_auth_type`` should be used instead to configure
+    authentication type.
diff --git a/releasenotes/notes/deprecate_auth_plugin-71a83567d996752e.yaml b/releasenotes/notes/deprecate_auth_plugin-71a83567d996752e.yaml
new file mode 100644
index 0000000000..49c19be425
--- /dev/null
+++ b/releasenotes/notes/deprecate_auth_plugin-71a83567d996752e.yaml
@@ -0,0 +1,5 @@
+---
+deprecations:
+  - The ``aodh_keystone_auth_plugin`` variable has been deprecated.
+    ``aodh_keystone_auth_type`` should be used instead to configure
+    authentication type.
diff --git a/releasenotes/notes/deprecate_auth_plugin-781a536e19d674e8.yaml b/releasenotes/notes/deprecate_auth_plugin-781a536e19d674e8.yaml
new file mode 100644
index 0000000000..3ccdd13e06
--- /dev/null
+++ b/releasenotes/notes/deprecate_auth_plugin-781a536e19d674e8.yaml
@@ -0,0 +1,5 @@
+---
+deprecations:
+  - The ``ceilometer_keystone_auth_plugin`` variable has been deprecated.
+    ``ceilometer_keystone_auth_type`` should be used instead to configure
+    authentication type.
diff --git a/releasenotes/notes/deprecate_auth_plugin-819233a76d4523e8.yaml b/releasenotes/notes/deprecate_auth_plugin-819233a76d4523e8.yaml
new file mode 100644
index 0000000000..b0e6b18f75
--- /dev/null
+++ b/releasenotes/notes/deprecate_auth_plugin-819233a76d4523e8.yaml
@@ -0,0 +1,5 @@
+---
+deprecations:
+  - The ``gnocchi_keystone_auth_plugin`` variable has been deprecated.
+    ``gnocchi_keystone_auth_type`` should be used instead to configure
+    authentication type.
diff --git a/releasenotes/notes/deprecate_auth_plugin-a391325719b67612.yaml b/releasenotes/notes/deprecate_auth_plugin-a391325719b67612.yaml
new file mode 100644
index 0000000000..765e285b67
--- /dev/null
+++ b/releasenotes/notes/deprecate_auth_plugin-a391325719b67612.yaml
@@ -0,0 +1,5 @@
+---
+deprecations:
+  - The ``octavia_keystone_auth_plugin`` variable has been deprecated.
+    ``octavia_keystone_auth_type`` should be used instead to configure
+    authentication type.
diff --git a/releasenotes/notes/designate-pools-yaml-support-d693dc2471642167.yaml b/releasenotes/notes/designate-pools-yaml-support-d693dc2471642167.yaml
new file mode 100644
index 0000000000..68b9dbf3a5
--- /dev/null
+++ b/releasenotes/notes/designate-pools-yaml-support-d693dc2471642167.yaml
@@ -0,0 +1,11 @@
+---
+features:
+  - The Designate pools.yaml file can now be generated via the
+    designate_pools_yaml attribute, if desired. This allows users to populate
+    the Designate DNS server configuration using attributes from other plays
+    and obviates the need to manage the file outside of the Designate role.
+upgrade:
+  - The Designate pools.yaml file can now be generated via the
+    designate_pools_yaml attribute, if desired. This ability is toggled by
+    the designate_use_pools_yaml_attr attribute. In the future this behavior
+    may become default and designate_pools_yaml may become a required variable.
diff --git a/releasenotes/notes/disable-rpm-perms-fix-by-default-b164e39717f0ada7.yaml b/releasenotes/notes/disable-rpm-perms-fix-by-default-b164e39717f0ada7.yaml
new file mode 100644
index 0000000000..2d0a96e67d
--- /dev/null
+++ b/releasenotes/notes/disable-rpm-perms-fix-by-default-b164e39717f0ada7.yaml
@@ -0,0 +1,6 @@
+---
+security:
+  - |
+    The security role will no longer fix file permissions and ownership based
+    on the contents of the RPM database by default. Deployers can opt in for
+    these changes by setting ``security_reset_perm_ownership`` to ``yes``.
diff --git a/releasenotes/notes/galera-client-url-var-deprecate-9ced45ea374c3c7d.yaml b/releasenotes/notes/galera-client-url-var-deprecate-9ced45ea374c3c7d.yaml
new file mode 100644
index 0000000000..d12b8e293c
--- /dev/null
+++ b/releasenotes/notes/galera-client-url-var-deprecate-9ced45ea374c3c7d.yaml
@@ -0,0 +1,9 @@
+---
+features:
+  - The ``galera_client`` role will default to using the ``galera_repo_url``
+    URL if the value for it is set. This simplifies using an alternative
+    mirror for the MariaDB server and client as only one variable needs to
+    be set to cover them both.
+deprecations:
+  - The variables ``galera_client_apt_repo_url`` and ``galera_client_yum_repo_url``
+    are deprecated in favour of the common variable ``galera_client_repo_url``.
diff --git a/releasenotes/notes/glance-init-config-overrides-d1c8c3dcc50c109a.yaml b/releasenotes/notes/glance-init-config-overrides-d1c8c3dcc50c109a.yaml
new file mode 100644
index 0000000000..10f6db86a9
--- /dev/null
+++ b/releasenotes/notes/glance-init-config-overrides-d1c8c3dcc50c109a.yaml
@@ -0,0 +1,10 @@
+---
+features:
+  - New variables have been added to allow a deployer to customize
+    a glance systemd unit file to their liking.
+  - The task dropping the glance systemd unit files now uses the
+    ``config_template`` action plugin allowing deployers access to
+    customize the unit files as they see fit without having to
+    load extra options into the defaults and polute the generic
+    systemd unit file with jinja2 variables and conditionals.
+
diff --git a/releasenotes/notes/gnocchi-deploy-config-file-afba6c2a8edac025.yaml b/releasenotes/notes/gnocchi-deploy-config-file-afba6c2a8edac025.yaml
new file mode 100644
index 0000000000..26b58f20fd
--- /dev/null
+++ b/releasenotes/notes/gnocchi-deploy-config-file-afba6c2a8edac025.yaml
@@ -0,0 +1,7 @@
+---
+features:
+  - The ``os_gnocchi`` role now includes a facility where you can place your
+    own default ``api-paste.ini`` or ``policy.json`` file in
+    ``/etc/openstack_deploy/gnocchi`` (by default) and it will be
+    deployed to the target host after being interpreted by the
+    template engine.
diff --git a/releasenotes/notes/gnocchi-init-config-overrides-4fc9ec27ea1bd090.yaml b/releasenotes/notes/gnocchi-init-config-overrides-4fc9ec27ea1bd090.yaml
new file mode 100644
index 0000000000..cce14d616c
--- /dev/null
+++ b/releasenotes/notes/gnocchi-init-config-overrides-4fc9ec27ea1bd090.yaml
@@ -0,0 +1,10 @@
+---
+features:
+  - New variables have been added to allow a deployer to customize
+    a gnocchi systemd unit file to their liking.
+  - The task dropping the gnocchi systemd unit files now uses the
+    ``config_template`` action plugin allowing deployers access to
+    customize the unit files as they see fit without having to
+    load extra options into the defaults and polute the generic
+    systemd unit file with jinja2 variables and conditionals.
+
diff --git a/releasenotes/notes/gnocchi_upstream_file_retrieve-e2a056bfc532d761.yaml b/releasenotes/notes/gnocchi_upstream_file_retrieve-e2a056bfc532d761.yaml
new file mode 100644
index 0000000000..8a2dd97298
--- /dev/null
+++ b/releasenotes/notes/gnocchi_upstream_file_retrieve-e2a056bfc532d761.yaml
@@ -0,0 +1,10 @@
+---
+features:
+  - Several configuration files that were not
+    templated for the ``os_gnocchi` role are now
+    retrieved from git. The git repository used can
+    be changed using the
+    ``gnocchi_git_config_lookup_location`` variable.
+    By default this points to ``git.openstack.org``.
+    These files can still be changed using the
+    ``gnocchi_x_overrides`` variables.
diff --git a/releasenotes/notes/heat-init-config-overrides-004872081661a34c.yaml b/releasenotes/notes/heat-init-config-overrides-004872081661a34c.yaml
new file mode 100644
index 0000000000..9f88ba823c
--- /dev/null
+++ b/releasenotes/notes/heat-init-config-overrides-004872081661a34c.yaml
@@ -0,0 +1,10 @@
+---
+features:
+  - New variables have been added to allow a deployer to customize
+    a heat systemd unit file to their liking.
+  - The task dropping the heat systemd unit files now uses the
+    ``config_template`` action plugin allowing deployers access to
+    customize the unit files as they see fit without having to
+    load extra options into the defaults and polute the generic
+    systemd unit file with jinja2 variables and conditionals.
+
diff --git a/releasenotes/notes/implement-ssl-48a82cf611db0eb6.yaml b/releasenotes/notes/implement-ssl-48a82cf611db0eb6.yaml
new file mode 100644
index 0000000000..3dd18c4b10
--- /dev/null
+++ b/releasenotes/notes/implement-ssl-48a82cf611db0eb6.yaml
@@ -0,0 +1,5 @@
+---
+features:
+  - Allows SSL connection to Galera with SSL support. ``galera_use_ssl`` option has to
+    be set to ``true``, in this case self-signed CA cert or user-provided CA cert will
+    be delivered to the container/host.
diff --git a/releasenotes/notes/implement-ssl-dd42ad2ff91af0bd.yaml b/releasenotes/notes/implement-ssl-dd42ad2ff91af0bd.yaml
new file mode 100644
index 0000000000..9601740061
--- /dev/null
+++ b/releasenotes/notes/implement-ssl-dd42ad2ff91af0bd.yaml
@@ -0,0 +1,6 @@
+---
+features:
+  - Implements SSL connection ability to MySQL. ``galera_use_ssl`` option has to
+    be set to ``true`` (default), in this case playbooks create self-signed
+    SSL bundle and sets up MySQL configs to use it or distributes user-provided
+    bundle throughout Galera nodes.
diff --git a/releasenotes/notes/implement_tuning_params-e627c774c0d0c9d2.yaml b/releasenotes/notes/implement_tuning_params-e627c774c0d0c9d2.yaml
new file mode 100644
index 0000000000..acfe55b7f4
--- /dev/null
+++ b/releasenotes/notes/implement_tuning_params-e627c774c0d0c9d2.yaml
@@ -0,0 +1,10 @@
+---
+features:
+  - Haproxy-server role allows to set up tunable parameters.
+    For doing that it is necessary to set up a dictionary of options in the
+    config files, mentioning those which have to be changed (defaults for the
+    remaining ones are programmed in the template). Also "maxconn" global option
+    made to be tunable.
+upgrade:
+  - The ``haproxy_bufsize`` variable has been removed and made a part of the
+    ``haproxy_tuning_params`` dictionary.
diff --git a/releasenotes/notes/ironic-init-config-overrides-e73d9fd46a69afcf.yaml b/releasenotes/notes/ironic-init-config-overrides-e73d9fd46a69afcf.yaml
new file mode 100644
index 0000000000..15893d73bd
--- /dev/null
+++ b/releasenotes/notes/ironic-init-config-overrides-e73d9fd46a69afcf.yaml
@@ -0,0 +1,10 @@
+---
+features:
+  - New variables have been added to allow a deployer to customize
+    a ironic systemd unit file to their liking.
+  - The task dropping the ironic systemd unit files now uses the
+    ``config_template`` action plugin allowing deployers access to
+    customize the unit files as they see fit without having to
+    load extra options into the defaults and polute the generic
+    systemd unit file with jinja2 variables and conditionals.
+
diff --git a/releasenotes/notes/keystone-init-config-overrides-1857d5e5bc5a905f.yaml b/releasenotes/notes/keystone-init-config-overrides-1857d5e5bc5a905f.yaml
new file mode 100644
index 0000000000..5638c85da3
--- /dev/null
+++ b/releasenotes/notes/keystone-init-config-overrides-1857d5e5bc5a905f.yaml
@@ -0,0 +1,10 @@
+---
+features:
+  - New variables have been added to allow a deployer to customize
+    a keystone systemd unit file to their liking.
+  - The task dropping the keystone systemd unit files now uses the
+    ``config_template`` action plugin allowing deployers access to
+    customize the unit files as they see fit without having to
+    load extra options into the defaults and polute the generic
+    systemd unit file with jinja2 variables and conditionals.
+
diff --git a/releasenotes/notes/keystone_plugin_default_update-c025bd5508069df3.yaml b/releasenotes/notes/keystone_plugin_default_update-c025bd5508069df3.yaml
new file mode 100644
index 0000000000..69d5e71533
--- /dev/null
+++ b/releasenotes/notes/keystone_plugin_default_update-c025bd5508069df3.yaml
@@ -0,0 +1,12 @@
+---
+features:
+  - The default behaviour of ``ensure_endpoint`` in the
+    keystone module has changed to update an existing
+    endpoint, if one exists that matches the service
+    name, type, region and interface. This ensures that
+    no duplicate service entries can exist per region.
+deprecations:
+  - The ``update`` state for the ``ensure_endpoint``
+    method of the ``keystone`` module is now deprecated,
+    and will be removed in the Queens cycle. Setting
+    state to ``present`` will achieve the same result.
diff --git a/releasenotes/notes/libvirt-rbd-independent-5876349073463cc3.yaml b/releasenotes/notes/libvirt-rbd-independent-5876349073463cc3.yaml
new file mode 100644
index 0000000000..00cc1c192a
--- /dev/null
+++ b/releasenotes/notes/libvirt-rbd-independent-5876349073463cc3.yaml
@@ -0,0 +1,8 @@
+---
+features:
+  - Removed dependency for ``cinder_backends_rbd_inuse`` in nova.conf
+    when setting ``rbd_user`` and ``rbd_secret_uuid`` variables.
+    Cinder delivers all necessary values via RPC when attaching the
+    volume, so those variables are only necessary for ephemeral
+    disks stored in Ceph. These variables are required to be set up
+    on cinder-volume side under backend section.
diff --git a/releasenotes/notes/lxc-install-from-pkg-centos-e38d351a3a9ac67e.yaml b/releasenotes/notes/lxc-install-from-pkg-centos-e38d351a3a9ac67e.yaml
new file mode 100644
index 0000000000..02b3321266
--- /dev/null
+++ b/releasenotes/notes/lxc-install-from-pkg-centos-e38d351a3a9ac67e.yaml
@@ -0,0 +1,5 @@
+---
+features:
+  - |
+    LXC on CentOS is now installed via package from a COPR repository rather
+    than installed from the upstream source.
diff --git a/releasenotes/notes/lxc-interface-scripts-78e9021cf2ed0c97.yaml b/releasenotes/notes/lxc-interface-scripts-78e9021cf2ed0c97.yaml
new file mode 100644
index 0000000000..5ad710e00e
--- /dev/null
+++ b/releasenotes/notes/lxc-interface-scripts-78e9021cf2ed0c97.yaml
@@ -0,0 +1,7 @@
+---
+features:
+  - In the lxc_container_create role, the keys ``preup``, ``postup``,
+    ``predown``, and ``postdown`` are now supported in the
+    ``container_networks`` dict for Ubuntu systems. This allows operators to
+    configure custom scripts to be run by Ubuntu's ifupdown system when network
+    interface states are changed.
diff --git a/releasenotes/notes/lxc_net_manage_iptables-95e52387dcef0015.yaml b/releasenotes/notes/lxc_net_manage_iptables-95e52387dcef0015.yaml
new file mode 100644
index 0000000000..2cc4015a1c
--- /dev/null
+++ b/releasenotes/notes/lxc_net_manage_iptables-95e52387dcef0015.yaml
@@ -0,0 +1,5 @@
+---
+features:
+  - The variable ``lxc_net_manage_iptables`` has been added. This variable
+    can be overridden by deployers if system wide iptables rules are already
+    in place or managed by deployers chioce.
diff --git a/releasenotes/notes/multi-os-wheel-repos-7910b13547ea59ad.yaml b/releasenotes/notes/multi-os-wheel-repos-7910b13547ea59ad.yaml
new file mode 100644
index 0000000000..9a57ca4c77
--- /dev/null
+++ b/releasenotes/notes/multi-os-wheel-repos-7910b13547ea59ad.yaml
@@ -0,0 +1,9 @@
+---
+features:
+  - The repo server file system structure has been updated to
+    allow for multiple Operating systems running multiple
+    architectures to be run at the same time and served from
+    a single server without impacting pools, venvs, wheel
+    archives, and manifests. The new structure follows the
+    following pattern `$RELEASE/$OS_TYPE-$ARCH` and has been
+    applied to *os-releases*, *venvs*, and *pools*.
diff --git a/releasenotes/notes/neutron-dragonflow-support-fce23f85c6a0bebd.yaml b/releasenotes/notes/neutron-dragonflow-support-fce23f85c6a0bebd.yaml
new file mode 100644
index 0000000000..12bb34f8f6
--- /dev/null
+++ b/releasenotes/notes/neutron-dragonflow-support-fce23f85c6a0bebd.yaml
@@ -0,0 +1,7 @@
+---
+features:
+  - The ``dragonflow`` plugin for neutron is now available.
+    You can set the ``neutron_plugin_type`` to
+    ``ml2.dragonflow`` to utilize this code path.
+    The ``dragonflow`` code path is currently
+    experimental.
diff --git a/releasenotes/notes/neutron-init-config-overrides-9d1d2b3b908705ed.yaml b/releasenotes/notes/neutron-init-config-overrides-9d1d2b3b908705ed.yaml
new file mode 100644
index 0000000000..fba1b2446e
--- /dev/null
+++ b/releasenotes/notes/neutron-init-config-overrides-9d1d2b3b908705ed.yaml
@@ -0,0 +1,10 @@
+---
+features:
+  - New variables have been added to allow a deployer to customize
+    a neutron systemd unit file to their liking.
+  - The task dropping the neutron systemd unit files now uses the
+    ``config_template`` action plugin allowing deployers access to
+    customize the unit files as they see fit without having to
+    load extra options into the defaults and polute the generic
+    systemd unit file with jinja2 variables and conditionals.
+
diff --git a/releasenotes/notes/nova-init-config-overrides-7221a8f9d5be9291.yaml b/releasenotes/notes/nova-init-config-overrides-7221a8f9d5be9291.yaml
new file mode 100644
index 0000000000..216cbc6cae
--- /dev/null
+++ b/releasenotes/notes/nova-init-config-overrides-7221a8f9d5be9291.yaml
@@ -0,0 +1,10 @@
+---
+features:
+  - New variables have been added to allow a deployer to customize
+    a designate systemd unit file to their liking.
+  - The task dropping the designate systemd unit files now uses the
+    ``config_template`` action plugin allowing deployers access to
+    customize the unit files as they see fit without having to
+    load extra options into the defaults and polute the generic
+    systemd unit file with jinja2 variables and conditionals.
+
diff --git a/releasenotes/notes/nova-ocata-conf-deprecations-0a99d13c97424c51.yaml b/releasenotes/notes/nova-ocata-conf-deprecations-0a99d13c97424c51.yaml
new file mode 100644
index 0000000000..beabea163e
--- /dev/null
+++ b/releasenotes/notes/nova-ocata-conf-deprecations-0a99d13c97424c51.yaml
@@ -0,0 +1,13 @@
+---
+deprecations:
+  - Several ``nova.conf`` options that were deprecated have
+    been removed from the ``os_nova`` role. The
+    following OpenStack-Ansible variables are no longer
+    used and should be removed from any variable override
+    files.
+
+    * ``nova_dhcp_domain``
+    * ``nova_quota_fixed_ips``
+    * ``nova_quota_floating_ips``
+    * ``nova_quota_security_group_rules``
+    * ``nova_quota_security_groups``
diff --git a/releasenotes/notes/nova-placement-api-07ce03fdceb95c6d.yaml b/releasenotes/notes/nova-placement-api-07ce03fdceb95c6d.yaml
new file mode 100644
index 0000000000..37ff6b8e9a
--- /dev/null
+++ b/releasenotes/notes/nova-placement-api-07ce03fdceb95c6d.yaml
@@ -0,0 +1,12 @@
+---
+features:
+  - The ``nova-placement`` service is now configured
+    by default. ``nova_placement_service_enabled``
+    can be set to ``False`` to disable the
+    ``nova-placement`` service.
+  - The ``nova-placement`` api service will run as
+    its own ansible group ``nova_api_placement``.
+  - Nova cell_v2 support has been added. The default
+    cell is ``cell1`` which can be overridden by the
+    ``nova_cell1_name``. Support for multiple cells
+    is not yet available.
diff --git a/releasenotes/notes/nova_galera_ssl-24c2ca2a8ab6fec4.yaml b/releasenotes/notes/nova_galera_ssl-24c2ca2a8ab6fec4.yaml
new file mode 100644
index 0000000000..07540721f9
--- /dev/null
+++ b/releasenotes/notes/nova_galera_ssl-24c2ca2a8ab6fec4.yaml
@@ -0,0 +1,9 @@
+---
+features:
+  - Nova may now use an encrypted database connection.
+    This is enabled by setting ``nova_galera_use_ssl``
+    to ``True``.
+security:
+  - Nova may now use an encrypted database connection.
+    This is enabled by setting ``nova_galera_use_ssl``
+    to ``True``.
diff --git a/releasenotes/notes/nova_use_cinder_v3_api-ce5f9c030591c404.yaml b/releasenotes/notes/nova_use_cinder_v3_api-ce5f9c030591c404.yaml
new file mode 100644
index 0000000000..81df89a857
--- /dev/null
+++ b/releasenotes/notes/nova_use_cinder_v3_api-ce5f9c030591c404.yaml
@@ -0,0 +1,6 @@
+---
+upgrade:
+  - When upgrading nova the cinder ``catalog_info`` will
+    change to use the ``cinderv3`` endpoint. Ensure that
+    you have upgraded cinder so that the ``cinderv3``
+    endpoint exists in the keystone catalog.
diff --git a/releasenotes/notes/os-neutron-deprecate-dhcp-domain-63b4c4dfbccd3a3a.yaml b/releasenotes/notes/os-neutron-deprecate-dhcp-domain-63b4c4dfbccd3a3a.yaml
new file mode 100644
index 0000000000..82cd8c2106
--- /dev/null
+++ b/releasenotes/notes/os-neutron-deprecate-dhcp-domain-63b4c4dfbccd3a3a.yaml
@@ -0,0 +1,4 @@
+---
+upgrade:
+  - The variable ``neutron_dhcp_domain`` has been renamed to
+    ``neutron_dns_domain``.
diff --git a/releasenotes/notes/primary-container-rebuild-a2f4d7f33d66c843.yaml b/releasenotes/notes/primary-container-rebuild-a2f4d7f33d66c843.yaml
new file mode 100644
index 0000000000..7c85026ea8
--- /dev/null
+++ b/releasenotes/notes/primary-container-rebuild-a2f4d7f33d66c843.yaml
@@ -0,0 +1,5 @@
+---
+critical:
+  - A bug that caused the Keystone credential keys to be lost when the playbook
+    is run during a rebuild of the first Keystone container has been fixed.
+    Please see launchpad bug 1667960 for more details.
diff --git a/releasenotes/notes/public-uri-proto-a1f05edd1a594f7f.yaml b/releasenotes/notes/public-uri-proto-a1f05edd1a594f7f.yaml
new file mode 100644
index 0000000000..314697c271
--- /dev/null
+++ b/releasenotes/notes/public-uri-proto-a1f05edd1a594f7f.yaml
@@ -0,0 +1,5 @@
+---
+fixes:
+  - The openstack service uri protocol variables were not being used to
+    set the Trove specific uris. This resulted in 'http' always being used
+    for the public, admin and internal uris even when 'https' was intended.
diff --git a/releasenotes/notes/remove-ceilometer-api-2bada67ecc58e18b.yaml b/releasenotes/notes/remove-ceilometer-api-2bada67ecc58e18b.yaml
new file mode 100644
index 0000000000..e38f23984a
--- /dev/null
+++ b/releasenotes/notes/remove-ceilometer-api-2bada67ecc58e18b.yaml
@@ -0,0 +1,11 @@
+---
+upgrade:
+  - |
+    The ceilometer-api service/container can be removed as part of O->P
+    upgrades. A ceilometer-central container will be created to contain
+    the central ceilometer agents.
+deprecations:
+  - |
+    The ceilometer API service is now deprecated. OpenStack-Ansible no longer
+    deploys this service. To make queries against metrics, alarms, and/or
+    events, please use the the gnocchi, aodh, and panko APIs, respectively.
diff --git a/releasenotes/notes/remove-ceilometer-collector-aeaf6e9e1d3eb345.yaml b/releasenotes/notes/remove-ceilometer-collector-aeaf6e9e1d3eb345.yaml
new file mode 100644
index 0000000000..31ec8609cf
--- /dev/null
+++ b/releasenotes/notes/remove-ceilometer-collector-aeaf6e9e1d3eb345.yaml
@@ -0,0 +1,9 @@
+---
+features:
+  - |
+    Gnocchi is now used as the default publisher.
+deprecations:
+  - |
+    Per https://review.openstack.org/#/c/413920/20, the ceilometer-collector
+    service is now deprecated and its respective container is no longer
+    deployed by default. Gnocchi is now used as the default publisher.
diff --git a/releasenotes/notes/remove-uca-rdo-8c625c61eeb9a771.yaml b/releasenotes/notes/remove-uca-rdo-8c625c61eeb9a771.yaml
new file mode 100644
index 0000000000..9c5b8196a3
--- /dev/null
+++ b/releasenotes/notes/remove-uca-rdo-8c625c61eeb9a771.yaml
@@ -0,0 +1,5 @@
+---
+other:
+  - From now on, external repo management (in use for
+    RDO/UCA for example) will be done inside the
+    pip-install role, not in the repo_build role.
diff --git a/releasenotes/notes/replace-epel-df390980c03bbaa8.yaml b/releasenotes/notes/replace-epel-df390980c03bbaa8.yaml
new file mode 100644
index 0000000000..443a8af9db
--- /dev/null
+++ b/releasenotes/notes/replace-epel-df390980c03bbaa8.yaml
@@ -0,0 +1,9 @@
+---
+upgrade:
+  - |
+    The EPEL repository is now removed in favor of the RDO repository.
+
+    **This is a breaking change for existing CentOS deployments.** The ``yum``
+    package manager will have errors when it finds that certain packages that
+    it installed from EPEL are no longer available.  Deployers may need to
+    rebuild container or reinstall packages to complete this change.
diff --git a/releasenotes/notes/rpc-encryption-b75fb0d08579a7dd.yaml b/releasenotes/notes/rpc-encryption-b75fb0d08579a7dd.yaml
new file mode 100644
index 0000000000..289323ba4c
--- /dev/null
+++ b/releasenotes/notes/rpc-encryption-b75fb0d08579a7dd.yaml
@@ -0,0 +1,7 @@
+---
+features:
+  - In the Ocata release, Trove added support for encrypting the rpc
+    communication between the guest DBaaS instances and the control plane.
+    The default values for ``trove_taskmanager_rpc_encr_key`` and
+    ``trove_inst_rpc_key_encr_key`` should be overridden to specify
+    installation specific values.
diff --git a/releasenotes/notes/rsyslog_server_storage_policy-1dcdd5630acdeb79.yaml b/releasenotes/notes/rsyslog_server_storage_policy-1dcdd5630acdeb79.yaml
new file mode 100644
index 0000000000..e61d13d7df
--- /dev/null
+++ b/releasenotes/notes/rsyslog_server_storage_policy-1dcdd5630acdeb79.yaml
@@ -0,0 +1,5 @@
+---
+features:
+  - Added storage policy so that deployers can override how to store the logs.
+    ``per_host`` stores logs in a sub-directory per host. ``per_program`` stores logs
+    in a single file per application which facilitates troubleshooting easy.
diff --git a/releasenotes/notes/sahara-init-config-overrides-4c35b88618b0d0b4.yaml b/releasenotes/notes/sahara-init-config-overrides-4c35b88618b0d0b4.yaml
new file mode 100644
index 0000000000..8e637744ce
--- /dev/null
+++ b/releasenotes/notes/sahara-init-config-overrides-4c35b88618b0d0b4.yaml
@@ -0,0 +1,10 @@
+---
+features:
+  - New variables have been added to allow a deployer to customize
+    a sahara systemd unit file to their liking.
+  - The task dropping the sahara systemd unit files now uses the
+    ``config_template`` action plugin allowing deployers access to
+    customize the unit files as they see fit without having to
+    load extra options into the defaults and polute the generic
+    systemd unit file with jinja2 variables and conditionals.
+
diff --git a/releasenotes/notes/shosts-file-search-opt-in-887f600a79eef07e.yaml b/releasenotes/notes/shosts-file-search-opt-in-887f600a79eef07e.yaml
new file mode 100644
index 0000000000..bee7e0a28e
--- /dev/null
+++ b/releasenotes/notes/shosts-file-search-opt-in-887f600a79eef07e.yaml
@@ -0,0 +1,7 @@
+---
+security:
+  - |
+    The tasks that search for ``.shosts`` and ``shosts.equiv`` files
+    (STIG ID: RHEL-07-040330) are now skipped by default. The search takes a
+    long time to complete on systems with lots of files and it also causes a
+    significant amount of disk I/O while it runs.
diff --git a/releasenotes/notes/stig-rhel7-version-1-renumbering-fiesta-aa047fea3ea35e74.yaml b/releasenotes/notes/stig-rhel7-version-1-renumbering-fiesta-aa047fea3ea35e74.yaml
new file mode 100644
index 0000000000..b725d54364
--- /dev/null
+++ b/releasenotes/notes/stig-rhel7-version-1-renumbering-fiesta-aa047fea3ea35e74.yaml
@@ -0,0 +1,20 @@
+---
+prelude: >
+    The first release of the Red Hat Enterprise Linux 7 STIG was entirely
+    renumbered from the pre-release versions. Many of the STIG configurations
+    simply changed numbers, but some were removed or changed. A few new
+    configurations were added as well.
+security:
+  - |
+    The latest version of the RHEL 7 STIG requires that a standard login banner
+    is presented to users when they log into the system (V-71863). The
+    security role now deploys a login banner that is used for console and ssh
+    sessions.
+  - |
+    The ``cn_map`` permissions and ownership adjustments included as part of
+    RHEL-07-040070 and RHEL-07-040080 has been removed. This STIG
+    configuration was removed in the most recent release of the RHEL 7 STIG.
+  - |
+    The PKI-based authentication checks for RHEL-07-040030, RHEL-07-040040,
+    and RHEL-07-040050 are no longer included in the RHEL 7 STIG. The tasks
+    and documentation for these outdated configurations are removed.
diff --git a/releasenotes/notes/suse-support-7919a5e43ebdd793.yaml b/releasenotes/notes/suse-support-7919a5e43ebdd793.yaml
new file mode 100644
index 0000000000..4940f6d574
--- /dev/null
+++ b/releasenotes/notes/suse-support-7919a5e43ebdd793.yaml
@@ -0,0 +1,4 @@
+---
+features:
+  - The role now supports SUSE based distributions. Required packages
+    can now be installed using the `zypper` package manager.
diff --git a/releasenotes/notes/suse-support-f50df7e6b27e3e15.yaml b/releasenotes/notes/suse-support-f50df7e6b27e3e15.yaml
new file mode 100644
index 0000000000..4940f6d574
--- /dev/null
+++ b/releasenotes/notes/suse-support-f50df7e6b27e3e15.yaml
@@ -0,0 +1,4 @@
+---
+features:
+  - The role now supports SUSE based distributions. Required packages
+    can now be installed using the `zypper` package manager.
diff --git a/releasenotes/notes/swift-init-config-overrides-822ec734e02a0dd1.yaml b/releasenotes/notes/swift-init-config-overrides-822ec734e02a0dd1.yaml
new file mode 100644
index 0000000000..fd85b24b42
--- /dev/null
+++ b/releasenotes/notes/swift-init-config-overrides-822ec734e02a0dd1.yaml
@@ -0,0 +1,10 @@
+---
+features:
+  - New variables have been added to allow a deployer to customize
+    a swift systemd unit file to their liking.
+  - The task dropping the swift systemd unit files now uses the
+    ``config_template`` action plugin allowing deployers access to
+    customize the unit files as they see fit without having to
+    load extra options into the defaults and polute the generic
+    systemd unit file with jinja2 variables and conditionals.
+
diff --git a/releasenotes/notes/swift-pypy-support-9706519c4b88a571.yaml b/releasenotes/notes/swift-pypy-support-9706519c4b88a571.yaml
index cb683120a3..5d5386e8dd 100644
--- a/releasenotes/notes/swift-pypy-support-9706519c4b88a571.yaml
+++ b/releasenotes/notes/swift-pypy-support-9706519c4b88a571.yaml
@@ -1,7 +1,7 @@
 ---
 features:
-  - While default python interpreter for swift is cpython, pypy is 
-    now an option. This change adds the ability to greatly improve swift 
+  - While default python interpreter for swift is cpython, pypy is
+    now an option. This change adds the ability to greatly improve swift
     performance without the core code modifications. These changes have
     been implemented using the documentation provided by Intel and
     Swiftstack. `Notes about the performance increase can be seen
diff --git a/releasenotes/notes/swift_internal_client-7c497400d7a8b4a2.yaml b/releasenotes/notes/swift_internal_client-7c497400d7a8b4a2.yaml
new file mode 100644
index 0000000000..936ee3bac6
--- /dev/null
+++ b/releasenotes/notes/swift_internal_client-7c497400d7a8b4a2.yaml
@@ -0,0 +1,7 @@
+---
+features:
+  - Swift container-sync has been updated to use
+    ``internal-client``. This means a new configuration
+    file ``internal-client.conf`` has been added.
+    Configuration can be overridden using the variable
+    ``swift_internal_client_conf_overrides``.
diff --git a/releasenotes/notes/tempest-remove-old-run-script-4365fa3b091169d8.yaml b/releasenotes/notes/tempest-remove-old-run-script-4365fa3b091169d8.yaml
new file mode 100644
index 0000000000..002c576128
--- /dev/null
+++ b/releasenotes/notes/tempest-remove-old-run-script-4365fa3b091169d8.yaml
@@ -0,0 +1,10 @@
+---
+upgrade:
+  - The ``openstack_tempest_gate.sh`` script has been removed
+    as it requires the use of the ``run_tempest.sh`` script
+    which has been deprecated in Tempest. In order to
+    facilitate the switch, the default for the variable
+    ``tempest_run`` has been set to ``yes``, forcing the role
+    to execute tempest by default. This default can be changed
+    by overriding the value to ``no``. The test whitelist may
+    be set through the list variable ``tempest_test_whitelist``.
diff --git a/releasenotes/notes/trove-init-config-overrides-ffce7e419061c4da.yaml b/releasenotes/notes/trove-init-config-overrides-ffce7e419061c4da.yaml
new file mode 100644
index 0000000000..0b84eb4530
--- /dev/null
+++ b/releasenotes/notes/trove-init-config-overrides-ffce7e419061c4da.yaml
@@ -0,0 +1,10 @@
+---
+features:
+  - New variables have been added to allow a deployer to customize
+    a trove systemd unit file to their liking.
+  - The task dropping the trove systemd unit files now uses the
+    ``config_template`` action plugin allowing deployers access to
+    customize the unit files as they see fit without having to
+    load extra options into the defaults and polute the generic
+    systemd unit file with jinja2 variables and conditionals.
+
diff --git a/releasenotes/notes/update-multi-backend-options-4eb27290058401d3.yaml b/releasenotes/notes/update-multi-backend-options-4eb27290058401d3.yaml
new file mode 100644
index 0000000000..a6e432a24d
--- /dev/null
+++ b/releasenotes/notes/update-multi-backend-options-4eb27290058401d3.yaml
@@ -0,0 +1,9 @@
+---
+features:
+  - Added new variable ``tempest_volume_backend_names`` and updated
+    templates/tempest.conf.j2 to point ``backend_names`` at this variable
+deprecations:
+  - Removed ``tempest_volume_backend1_name`` and
+    ``tempest_volume_backend1_name`` since ``backend1_name`` and
+    ``backend2_name`` were removed from tempest in commit 27905cc (merged
+    26/04/2016)
diff --git a/releasenotes/notes/userspace_group_and_host_vars-14f77b5eb518e32d.yaml b/releasenotes/notes/userspace_group_and_host_vars-14f77b5eb518e32d.yaml
new file mode 100644
index 0000000000..dc890ce9ca
--- /dev/null
+++ b/releasenotes/notes/userspace_group_and_host_vars-14f77b5eb518e32d.yaml
@@ -0,0 +1,22 @@
+---
+features:
+  - The deployer can now define an environment variable
+    ``GROUP_VARS_PATH`` with the folders of its choice
+    (separated by the colon sign) to define an user
+    space group_vars folder. These vars will apply but
+    be (currently) overriden by the OpenStack-Ansible
+    default group vars, by the set facts, and by the
+    user_* variables. If the deployer defines multiple
+    paths, the variables found are merged, and
+    precedence is increasing from left to right
+    (the last defined in GROUP_VARS_PATH wins)
+  - The deployer can now define an environment variable
+    ``HOST_VARS_PATH`` with the folders of its choice
+    (separated by the colon sign) to define an user
+    space host_vars folder. These vars will apply but
+    be (currently) overriden by the OpenStack-Ansible
+    default host vars, by the set facts, and by the
+    user_* variables. If the deployer defines multiple
+    paths, the variables found are merged, and
+    precedence is increasing from left to right
+    (the last defined in HOST_VARS_PATH wins)
diff --git a/releasenotes/notes/var-rename-gnocchi-endpoints-87626018773f77e0.yaml b/releasenotes/notes/var-rename-gnocchi-endpoints-87626018773f77e0.yaml
new file mode 100644
index 0000000000..b7efb4661d
--- /dev/null
+++ b/releasenotes/notes/var-rename-gnocchi-endpoints-87626018773f77e0.yaml
@@ -0,0 +1,5 @@
+---
+upgrade:
+  - |
+    Gnocchi service endpoint variables were not named correctly. Renamed
+    variables to be consistent with other roles.