Updated upgrade and deployment processes for https

This change simply makes sure that all containers and hosts have the
`apt-transport-https` package installed. this package is absolutly
required everywhere because we've changed all of the repo endpoints
to https and not all systems have this package installed on a base
kick. Furthermore an entry was added into the upgrade script to
ensure that upon upgrade everything will converge and remain
consistent.

Change-Id: I4b357ff7099a4c1c63c85ac9560aefc8d56709be
Closes-Bug: #1463155

playbooks/roles/openstack_hosts/defaults/main.yml

@@ -52,6 +52,7 @@ openstack_host_kernel_modules:
 ## Base packages
 openstack_host_apt_packages:
   - apparmor-utils
+  - apt-transport-https
   - bridge-utils
   - build-essential
   - cgroup-lite

scripts/run-upgrade.sh

@@ -297,6 +297,11 @@ sed -i '/^environment_version.*/d' /etc/openstack_deploy/openstack_user_config.y
 
 # Remove containers that we no longer need
 pushd playbooks
+  # Ensure that apt-transport-https is installed everywhere before doing anything else.
+  ansible "hosts:all_containers" \
+          -m shell \
+          -a "apt-get update && apt-get install -y apt-transport-https"
+
   # Setup all hosts to run lxc
   openstack-ansible lxc-hosts-setup.yml