The default role may have permissions added by users. They should remain
without removal. If a seeded permissions needs removal from the default
role, it should be explicitly removed in a migration.
Additionally, attempting to remove permissions with filters from a role
led to a failure due to an incorrect search parameter which has now been
fixed.

(cherry picked from commit ada7d6ef)

In case the default value is omitted and the merge_override option is
selcted, the previous version of this migration didn't cast the default
leading to a failure when merging overrides.
Error message was also improved to be clearer and less frightening than
a stack trace.

(cherry picked from commit 705d8644)

db/migrate/20170112175131_migrate_template_to_parameters_macros.rb
caused all LookupKey default values and LookupValue values to be saved
as strings, because it updated the attributes without calling callbacks,
causing cast_default_value or cast_value callbacks to be ignored.
This causes any values not of string type to break.

(cherry picked from commit e719d906)

This reverts commit 09ad88bf.

(cherry picked from commit dc1f9cfa)

Creating a new VMware image fails during provisioning with
"Could not match network interface".  Searching for distributed
virtual switch via key BEFORE searching with the nic_attrs structure
resolves a false positive match when vCenter contains VDS migrated
from prior install with ref attribute that matches a different
object's key.

(cherry picked from commit f5ea70ad)

(cherry picked from commit f22a6c64)

When defining smart class parameter values with type YAML and submitted
in GUI an Ruby error message gets prepended for each array entry.

Defining an YAML-Array like:

---
- name: foo
  mount_point: /bar
- name: john
  mount_point: /doe

is shown on the ENC as:

- !ruby/hash:ActiveSupport::HashWithIndifferentAccess
  name: foo
  mount_point: "/bar"
- !ruby/hash:ActiveSupport::HashWithIndifferentAccess
  name: john
  mount_point: "/doe"

In order to avoid parsing the whole YAML or monkeypatching
HashWithIndifferentAccess the easiest workaround is to convert to
JSON then parse back to YAML

(cherry picked from commit d477552c)

(cherry picked from commit 7949aadb)

(cherry picked from commit aa797c6b)

On fog-openstack 0.1.23, Excon expects a 200 when it creates the first
key-pair on OpenStack. On recent versions, it returns a 201.
There is a fix for it on fog-openstack 0.1.25, so we should update to it
both in Foreman and in packaging.

(cherry picked from commit 1dbb2c5b)

(cherry picked from commit 248d1f90ee2ee9f966180fc55de76daaa6ff18a3)

(cherry picked from commit 57d90df0)

Rename method that does not cache

(cherry picked from commit 6bda0a48)

(cherry picked from commit 397ea488)

(cherry picked from commit 5ad97ff7)

(cherry picked from commit 274665e2)

This is needed for CoreOS provisioning templates.