This patch modifies the postfix_queue role to add ability to configure
postfix header_checks and sender_canonical_maps.

The contents of header_checks file is controlled by the
POSTFIX_QUEUE_HEADER_CHECKS ansible variable and sender_canonical_maps
by the POSTFIX_QUEUE_SENDER_CANONICAL_MAPS variable.
Both are optional and default to blank strings
(empty configuration files).

Define ALTERNATE_WORKER_QUEUES

Enabling SSL for insights

Fix jinja2 syntax for remove unnecessary white spaces or line breaks …

YAML style parameter passing

OPS-1593 As an operator, I want sudo_user converted to become user in…

OPS-1593 As an operator, I want sudo_user converted to become user in roles and plays, for compatibility with Ansible 2.x

OPS-1593 As an operator, I want sudo_user converted to become user in roles and plays, for compatibility with Ansible 2.x

OPS-1593 As an operator, I want sudo_user converted to become user in roles and plays, for compatibility with Ansible 2.x

Quote mode strings

Ansible turned 0640 into 420 and 0750 into 488, only one of which are
valid file modes.  Quotes prevent it from doing so too early.
Fixes d2f1595c.

SSH needs this script to be executable

During the edxapp refactor, three tasks were combined, but the modes
were all squished to 0644

Remove cycle from server-utils

Correct credentials URL root protocol

OIDC doesn't work out of the box if the redirect URI uses http.

Newer versions have been released.

More cleanup from this deprecation

This only worked by coincidence before

We were implicitly relying on mongo to return the list of members in
their _id order, which is absurd and I have no idea how we didn't catch
it previously.

We could do a little list comprehension to pull out the member with the
same _id,  but it seemed easier to just sort both lists and retain the
original intent.

GOCD Integration - an inventory file is now created when an instance is launched

I removed this in 9ae2caa0 so it's a no-op

Add vim configuration for devstack

Updated ansible config to increase ControlPersist (fix timeouts on long running tasks for remote hosts)

delete the user home directory as well if state is absent

Adds jenkins_protocol_https variable

Allows JENKINS_ANALYTICS_AUTH_REALM: none

Uses proxy_set_header Host $http_host

YAML style parameters passing

rewrite the edxapp role

Improvements to django_admin.sh

- Echo the command to run before running (for post-mortem debugging)
- Stop adding "--settings aws" to the end of every command, even when it
  was added to $manage earlier

Add another region to ec2.py

This appears to be the only way to ask it to look in multiple regions
since it doesn't support AWS_REGION or --region.
Alternately, we could start having independent .ini files for deploys.