Add ansible roles for managing HSM software

This patch adds two Ansible roles used to manage client software for
Hardware Security Modules (HSMs).  These roles are used in TripleO
to install HSM client software on controller nodes to enable the
PKCS#11 backend for Barbican.

Change-Id: Ifd7a46da84fb81eeff7ce2e935cc39007dddbf76
Needed-By: I9195626ea987606400f2e68bfe43ab917b4191dd

gerrit/acls/openstack/ansible-role-atos-hsm.config

@@ -0,0 +1,11 @@
+[access "refs/heads/*"]
+abandon = group ansible-role-atos-hsm-core
+label-Code-Review = -2..+2 group ansible-role-atos-hsm-core
+label-Workflow = -1..+1 group ansible-role-atos-hsm-core
+
+[receive]
+requireChangeId = true
+requireContributorAgreement = true
+
+[submit]
+mergeContent = true

gerrit/acls/openstack/ansible-role-thales-hsm.config

@@ -0,0 +1,11 @@
+[access "refs/heads/*"]
+abandon = group ansible-role-thales-hsm-core
+label-Code-Review = -2..+2 group ansible-role-thales-hsm-core
+label-Workflow = -1..+1 group ansible-role-thales-hsm-core
+
+[receive]
+requireChangeId = true
+requireContributorAgreement = true
+
+[submit]
+mergeContent = true

gerrit/projects.yaml

@@ -1064,6 +1064,9 @@
 - project: openstack/ansible-role-ara
   use-storyboard: true
   description: Ansible role to install and set up ARA
+- project: openstack/ansible-role-atos-hsm
+  description: Ansible role to manage ATOS Hardware Security Module (HSM) client software
+  upstream: https://github.com/dmend/ansible-role-atos-hsm
 - project: openstack/ansible-role-bindep
   description: Ansible role to manage bindep
 - project: openstack/ansible-role-carbon
@@ -1176,6 +1179,10 @@
   groups:
     - openstack-ansible
   docimpact-group: openstack-ansible
+- project: openstack/ansible-role-thales-hsm
+  description: Ansible role to manage Thales Hardware Security Module (HSM)
+    client software
+  upstream: https://github.com/dmend/ansible-role-thales-hsm
 - project: openstack/ansible-role-tripleo-aodh
   description: TripleO related Ansible role for Aodh
   acl-config: /home/gerrit2/acls/openstack/tripleo-ansible.config

gerritbot/channels.yaml

@@ -341,10 +341,12 @@ openstack-ansible:
     # Then alphabetical order
     - openstack/ansible-config_template
     - openstack/ansible-hardening
+    - openstack/ansible-role-atos-hsm
     - openstack/ansible-role-python_venv_build
     - openstack/ansible-role-systemd_mount
     - openstack/ansible-role-systemd_networkd
     - openstack/ansible-role-systemd_service
+    - openstack/ansible-role-thales-hsm
     - openstack/monitorstack
   branches:
     - ^stable/.*
@@ -364,6 +366,8 @@ openstack-barbican:
     - patchset-created
     - change-merged
   projects:
+    - openstack/ansible-role-atos-hsm
+    - openstack/ansible-role-thales-hsm
     - openstack/barbican
     - openstack/barbican-specs
     - openstack/barbican-tempest-plugin

zuul/main.yaml

@@ -207,6 +207,7 @@
           - openstack/ansible-config_template
           - openstack/ansible-hardening
           - openstack/ansible-role-ara
+          - openstack/ansible-role-atos-hsm
           - openstack/ansible-role-bindep
           - openstack/ansible-role-carbon
           - openstack/ansible-role-chrony
@@ -241,6 +242,7 @@
           - openstack/ansible-role-systemd_mount
           - openstack/ansible-role-systemd_networkd
           - openstack/ansible-role-systemd_service
+          - openstack/ansible-role-thales-hsm
           - openstack/ansible-role-tripleo-aodh
           - openstack/ansible-role-tripleo-barbican
           - openstack/ansible-role-tripleo-ceilometer