REMOVE: fas-changes.yml
  ( I think this was just needed for a short time for the account system
  migration, please correct me if it's got some better use)

Correct, it can be dropped.
 
REMOVE: ipsilon.yml
  ( we moved this to vm's because we couldn't run pam_sssd in openshift.
  Has that changed?)

No, that's still the cas as far as I can tell, we need to keep it in a VM (unless we get permanent storage for openshift).
 

A.