Update git submodules

* Update docs/submodules/fuel from branch 'master'
  - [baremetal] Retire mas01 NAT
    
    Isolate networks by retiring NAT on mas01; also cutting direct
    internet access from cluster nodes that are not facing the public
    network (prx, cmp).
    
    NOTE: Since we are removing mas01 NAT, VCP VMs (except prx which have
    public IPs) and kvm nodes (cmp also have public IPs) will no longer
    have direct internet connectivity.
    Cluster deployment and operations will work without it, but if it is
    required for different reasons, the MaaS proxy could be enabled by
    uncommenting the /etc/enviroment section in:
    - cluster.baremetal-mcp-pike-common-ha.include.proxy.yml
    
    JIRA: FUEL-317
    
    Change-Id: I5ed8b420296b27df34a54ec1ebd7b7cf58041425
    Signed-off-by: Alexandru Avadanii <Alexandru.Avadanii@enea.com>
    
  - [patch] Use keystoneclient to check project ID
    
    Another prerequisite for decoupling public network from Openstack
    internal management network (upstream won't fix it for Pike):
    - port fix from [1] for using the internal network when connecting
      to keystone during project ID validation in nova, instead of
      going through public endpoint (and using SSL).
    
    [1] https://bugs.launchpad.net/nova/+bug/1716344
    
    Change-Id: Ic9a307df9af78fcd58cbcc07b5e62a7e07cc8d7d
    Signed-off-by: Alexandru Avadanii <Alexandru.Avadanii@enea.com>
    
  - [patch] keystone: Use v3 for admin endpoint
    
    Now that v2 API is obsolete, also switch 'admin' endpoint to v3
    (previously it was kept back for OCL compatibility).
    
    Change-Id: I9775d59d5e6b93d7351157f7550a0dd7114bee2f
    Signed-off-by: Alexandru Avadanii <Alexandru.Avadanii@enea.com>
    

1 files changed, 0 insertions, 0 deletions

diff --git a/docs/submodules/fuel b/docs/submodules/fuel
-Subproject f5a14b9a0a33ad4e76ebfdf099a544ac87fcd96
+Subproject 9a6e655e0b851ff6e449027c01ac1a66188b006