# changelog

author: Adam Miller <admiller@redhat.com> - 0.2-1
changelog:
  - Update to latest upstream release
  - Restructured some of the golang deps  build setup for restructuring done
    upstream


author: Scott Dodson <sdodson@redhat.com> 0.2-3
changelog:
  - Update to 21fb40637c4e3507cca1fcab6c4d56b06950a149
  - Split packaging of openshift-master and openshift-node


author: Steve Milner <smilner@redhat.com> 0.2-8
changelog:
  - Master configs will be generated if none are found when the master is installed.
  - Node configs will be generated if none are found when the master is installed.
  - Additional notice file added if config is generated by the RPM.
  - All-In-One services removed.


author: Scott Dodson <sdodson@redhat.com> 0.2-9
changelog:
  - Rename from openshift -> origin
  - Symlink /var/lib/origin to /var/lib/openshift if /var/lib/openshift exists


author: - Maxim Burgerhout <wzzrd@fedoraproject.org> - 0.71b-2
changelog:
  - Enable tests to be run during build
  - Remove EL5 code from specfile in order to 
  - Fix %files section to include the proper files


author: - Maxim Burgerhout <wzzrd@fedoraproject.org> - 0.71c-1
changelog:
  - Build with new upstream tarball containing fixes for hashbangs, exec bits,
    a LICENSE file and more.


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.39-1
changelog:
  - Fix etcd helper function template error (sdodson@redhat.com)
  - Fix server csr while loop oc_csr_approve (mgugino@redhat.com)
  - Add support for ak/orgid (e.minguez@gmail.com)
  - Remove unnecessary passlib check (jkr@adorsys.de)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.40-1
changelog:
  - Ensure default StorageClass reclaimPolicy is set to nil instead of
    emptystring when reclaim_policy undefined (mawong@redhat.com)
  - Don't set reclaim policy to empty string (mawong@redhat.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.42-1
changelog:
  - Add support for ak/orgid for RHEL (e.minguez@gmail.com)
  - Update the value of 'openshift_grafana_prometheus_serviceaccount' Fix
    openshift_grafana prometheus serviceaccount default value in README,The
    default value is 'promethus','promethus' missed a letter, and there should be
    an e after the h,so it should be 'prometheus' (3168582@qq.com)
  - openshift-prometheus: improve uninstall process (pgier@redhat.com)
  - Fix incorrect formatting for ca file (vrutkovs@redhat.com)
  - _idp['name'] not availabe (github@st0ne.at)
  - Move openshift_crio_pause_image to openshift_facts (rteague@redhat.com)
  - Renames CRI-O pause_image to openshift_crio_pause_image.
    (jtudelag@redhat.com)
  - Remove docker excluder from image prep packages (rteague@redhat.com)
  - kube_proxy_and_dns: add role that runs standalone kube-proxy + DNS
    (dcbw@redhat.com)
  - Ensure sebool container_manage_cgroup on upgrade (mgugino@redhat.com)
  - Fix cpu_limit check in eventrouter template (vrutkovs@redhat.com)
  - openshift-control-plane: check whether the sync pods are ready before
    selecting nodes (pgier@redhat.com)
  - make azure load balancer creation parameters as options (weshi@redhat.com)
  - Update pause image value in crio.conf after upgrade (umohnani@redhat.com)
  - Prefix identity provider's CA files with identity provider names
    (vrutkovs@redhat.com)
  - Dissalow custom CA file path for providers with CA path (vrutkovs@redhat.com)
  - GlusterFS: Replace heketi Route with Service URL (jarrpa@redhat.com)
  - Be more accuracy for getting def_route_int and def_route_ip
    (bysnupy@hotmail.com)
  - Don't collect node facts on master - these are set during bootstrap
    (vrutkovs@redhat.com)
  - rollback node ports (m.judeikis@gmail.com)
  - fix metrics become syntax (eduardas@redhat.com)
  - change become syntax (m.judeikis@gmail.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.43-1
changelog:
  - Fix etcdctl aliases on etcd hosts (vrutkovs@redhat.com)
  - Don't reset os_firewall_use_firewalld if iptables is inactive during upgrade
    (vrutkovs@redhat.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.44-1
changelog:
  - Use first_master_client_binary from hostvars[groups.oo_first_master.0]
    (nakayamakenjiro@gmail.com)
  - Ensure master image is pre-pulled on upgrade (mgugino@redhat.com)
  - Fixing a typo s/Cound/Could/g noticed with an error getting CSR's approved
    (roxenham@redhat.com)
  - Configure a list of etcd cipher suites via `etcd_cipher_suites`
    (vrutkovs@redhat.com)
  - Add failed_when to 'Remove the image stream tag' tasks (mgugino@redhat.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.45-1
changelog:
  - Don't fetch provider facts if openshift_cloud_provider_kind is not set
    (vrutkovs@redhat.com)
  - GlusterFS: External uninstall (jarrpa@redhat.com)
  - GlusterFS: Ignore external nodes (jarrpa@redhat.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.46-1
changelog:
  - GlusterFS: Fix heketi_pod check (jarrpa@redhat.com)
  - Add oc_get_nodes to debug csr output (mgugino@redhat.com)
  - Add extra debug info to csr module (mgugino@redhat.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.35-1
changelog:
  - python-scandir was renamed in EPEL (vrutkovs@redhat.com)
  - cluster monitoring operator: add nodeselector (vrutkovs@redhat.com)
  - Use openshift_image_tag for registry-console upgrade (rteague@redhat.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.36-1
changelog:
  - Move filters (mateus.caruccio@getupcloud.com)
  - Overwrite grafana datasource and dashboards (mateus.caruccio@getupcloud.com)
  - Dont fail when datasource or dashboard already exists
    (mateus.caruccio@getupcloud.com)
  - Adding build info to image. (#9760) (kwoodson@redhat.com)
  - Add support to static pods for etcd helpers (sdodson@redhat.com)
  - Refactor csr approvals: oc_csr_approve (mgugino@redhat.com)
  - fix error in cnx conditional regex (derekmcquay@gmail.com)
  - If the cluster's arch is power (ppc64le) don't install default catalog.
    Create v3.10 imagestreams, quickstart, and db-templates that support ppc64le
    (jeyoung@redhat.com)
  - Log driver for JSON should be json-file (umohnani@redhat.com)
  - GlusterFS: Run kernel_modules.yml once on all nodes (jarrpa@redhat.com)
  - control plane upgrade: don't remove -master package on Atomic
    (vrutkovs@redhat.com)
  - Update search string for registry console (mgugino@redhat.com)
  - Increase maximum number of open file descriptors for dnsmasq
    (ichavero@redhat.com)
  - Refactor registry-console template and vars (mgugino@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.6.173.0.57-1
changelog:
  - Ensure controllerConfig.serviceServingCert is correctly set during upgrade.
    (abutcher@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.6.173.0.58-1
changelog:
  - Improve CA playbook restart logic and skip restarts when related services had
    previously expired certificates. (abutcher@redhat.com)
  - Fix undefined variable for master upgrades (mgugino@redhat.com)
  - Ensuring that kube-service-catalog project has empty node-selector
    (ewolinet@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.6.173.0.59-1
changelog:
  - Default groups.oo_new_etcd_to_config to an empty list (jchaloup@redhat.com)
  - bug 1489498. preserve replica and shard settings (jcantril@redhat.com)
  - Use "requests" for CPU resources instead of limits
    (peter.portante@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.6.173.0.60-1
changelog:
  - Update v3.6 content (sdodson@redhat.com)
  - Ensure proper variable templating for skopeo auth credentials
    (mgugino@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.10.27-2
changelog:
  - Disable papr on pull requests (sdodson@redhat.com)
  - Add step to remove all k8s_ containers (mgugino@redhat.com)
  - Add boolean to uninstall for docker (mgugino@redhat.com)
  - Add doc note that kuryr requires openstack cloud provider
    (tzumainn@redhat.com)
  - Add containerized glusterfs cluster health check (mgugino@redhat.com)
  - Cleanup node bootstrap / scaleup code (mgugino@redhat.com)
  - adding unmount task below the backup task (bysnupy@hotmail.com)
  - Allow user to specify local openstack.conf (tzumainn@redhat.com)
  - Remove sections of kuryr documentation that tell user to disable registry
    creation (tzumainn@redhat.com)
  - Added OpenStack security group requirements section (tzumainn@redhat.com)
  - Allow disabling Network Manager managed dns (arun.neelicattu@gmail.com)
  - Add bool filter to all instances of openshift_use_crio (rteague@redhat.com)
  - Allow shared_non_ops as kibana index mode (farandac@redhat.com)
  - ignore failing dns clean errors when running openstack uninstall playbook
    (tzumainn@redhat.com)
  - Remove unused variables (spasquie@redhat.com)
  - Added node selector option for CFME role and fixed formatting issues
    (dluong@redhat.com)
  - Support tabs in resolv.conf (vrutkovs@redhat.com)
  - Upgrade Prometheus and AlertManager image versions (spasquie@redhat.com)
  - Fix order for invoking the hostpath storage task for registry
    (ngompa@datto.com)
  - Add a components public playbook (sdodson@redhat.com)
  - Cope with OpenShift returning no value when an environment variable is an
    empty string (mchappel@redhat.com)
  - Update Calico versions to the latest (v3.1.3) (mleung975@gmail.com)
  - bug 1597282. Quote selector to make it valid json (jcantril@redhat.com)
  - Add Prometheus scrape config for openshift-logging (lukas.vlcek@gmail.com)
  - bug 1590920. Bump fluent default memory to 756M (jcantril@redhat.com)
  - oreg url fix (m.judeikis@gmail.com)
  - Defining a default for logging_elasticsearch_rollout_override var in es
    handler (ewolinet@redhat.com)
  - Allow the 9k-10k port range for Prometheus (spasquie@redhat.com)
  - Setup logrotate on nodes once (vrutkovs@redhat.com)
  - google-cloud-sdk is x86_64 only (sdodson@redhat.com)
  - bug 1575546. Fix logging eventrouter cpu requests (jcantril@redhat.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.28-1
changelog:
  - add conditional clauses for handling cnx versions (derekmcquay@gmail.com)
  - apply the container_runtime for calico (derekmcquay@gmail.com)
  - Require -hyperkube RPMs instead of -master (vrutkovs@redhat.com)
  - Don't require etcd RPM to be installable on masters (vrutkovs@redhat.com)
  - Don't require fast-datapath channel on RHEL (vrutkovs@redhat.com)
  - No longer require SDN to be installed on nodes (vrutkovs@redhat.com)
  - node restart: check that all vars are defined (vrutkovs@redhat.com)
  - Change multipath prio from const to alua (jarrpa@redhat.com)
  - Adding min-port to dnsmasq configuration (rhowe@redhat.com)
  - Ensure kernel-modules not installed on atomic (mgugino@redhat.com)
  - Fedora: Install kernel-modules (mgugino@redhat.com)
  - Conditionally skip node approval for incremental 3.10 upgrades
    (rteague@redhat.com)
  - Update openshift_release version in sample inventory file
    (dani_comnea@yahoo.com)
  - 'Wait for node to be ready' task should check that all vars are defined
    (vrutkovs@redhat.com)
  - Fix prometheus annotations typo (vrutkovs@redhat.com)
  - Fix master env migrate module comments (mgugino@redhat.com)
  - move from latest to versioned repo (m.judeikis@gmail.com)
  - router-redeploy: don't check that annotations are missing
    (vrutkovs@redhat.com)
  - Fix master config migration module (mgugino@redhat.com)
  - oc_obj should correctly identify 'results': [{}] as 'Object not found'
    (mchappel@redhat.com)
  - updating doc for SSL cert (dcritch@redhat.com)
  - Adding support for an SSL certificate signed by the OpenStack cluster
    (dcritch@redhat.com)
  - Don't get file checksum, attributes and mime type in stat module calls
    (vrutkovs@redhat.com)
  - Sanity check htpasswd respect default (mgugino@redhat.com)
  - Fix glusterfs cluster check when condition (mgugino@redhat.com)
  - Ensure that monitoring operator has nodes to run (vrutkovs@redhat.com)
  - BZ-1608216 Set timeoutSeconds for readinessProbe on Cassandra RCs
    (ruben.vp8510@gmail.com)
  - Reorganized OpenStack cloud provider documentation (tzumainn@redhat.com)
  - Set log-path = ~/openshift-ansible.log (sdodson@redhat.com)
  - Add atomic package to base and debug package lists
    (nakayamakenjiro@gmail.com)
  - Remove callback plugin, artifact of a quick installer (vrutkovs@redhat.com)
  - Migrate old master env files to new location (mgugino@redhat.com)
  - Add configmap-generator templates (simaishi@redhat.com)
  - Disable the wifi collector in node_exporter (spasquie@redhat.com)
  - Fix openshift_logging on Python3 (christoffer.reijer@basalt.se)
  - check_htpasswd_provider: throw error if openshift_master_identity_providers
    is not parsed into a list (vrutkovs@redhat.com)
  - Change the order of template_var calls in check_htpasswd_provider
    (vrutkovs@redhat.com)
  - Make regex for the openshift_pkg_version simpler (nakayamakenjiro@gmail.com)
  - Add unit tests for check_pkg_version_format and check_release_format
    (nakayamakenjiro@gmail.com)
  - Add format check of openshift_pkg_version and openshift_release
    (nakayamakenjiro@gmail.com)
  - Sync grafana deployment. to openshift-monitoring. (mrsiano@gmail.com)
  - default_storage: configure rolebindings for azure-file storage backend
    (arun.neelicattu@gmail.com)
  - default_storage: allow configuring mountOptions and reclaimPolicy
    (arun.neelicattu@gmail.com)
  - lib_openshift/oc_storageclass: support mountOptions and reclaimPolicy
    (arun.neelicattu@gmail.com)
  - Use ansible systemd module to check service status
    (nakayamakenjiro@gmail.com)
  - Confirm iptables service status by checking command status
    (nakayamakenjiro@gmail.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.29-1
changelog:
  - CFME: set default value for openshift_hosted_infra_selector
    (vrutkovs@redhat.com)
  - vgchange before vgremove update. (sarumuga@redhat.com)
  - To avoid I/O errors, carry out vg deactivate (using vgchange -an) and dmsetup
    remove device. (sarumuga@redhat.com)
  - Update glusterfs README about uninstall playbook (sarumuga@redhat.com)
  - Add CentoOS Origin repo for 310 release (dani_comnea@yahoo.com)
  - SCC recouncilation has to run with older oc, before node upgrade
    (vrutkovs@redhat.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.30-1
changelog:
  - Remove atomic-openshift-master package during upgrade (rteague@redhat.com)
  - Added support for ak when registering hosts (e.minguez@gmail.com)
  - The l_glusterfs_count is a string need to cast to int for comparison.
    (mbruzek@gmail.com)
  - Default CFME nodeselector should be a list of str, not a dict
    (vrutkovs@redhat.com)
  - The file name has changed to heketi_get_key.yml (mbruzek@gmail.com)
  - vgchange before vgremove update. (sarumuga@redhat.com)
  - To avoid I/O errors, carry out vg deactivate (using vgchange -an) and dmsetup
    remove device. (sarumuga@redhat.com)
  - Remove system container cri-o during 3.10 upgrade (rteague@redhat.com)
  - Adding documentation in hosts.example (jcallen@redhat.com)
  - Add a license parameter to gcloud command (jcallen@redhat.com)
  - Fix audit config interpolation (denis@gladkikh.email)
  - Remove unused/broken node cert plays (mgugino@redhat.com)
  - Add quotes to node selector (rteague@redhat.com)
  - GlusterFS: Upgrade playbook (jarrpa@redhat.com)
  - Refactor glusterfs for scaleup (mgugino@redhat.com)
  - Remove hyperkube package (norito.agetsuma@gmail.com)
  - re-order and required values (rcook@redhat.com)
  - matching the name values (rcook@redhat.com)
  - adding parameters to allow for load balancer creation (rcook@redhat.com)
  - set the external url of prometheus (pgier@redhat.com)
  - re-enable GA repos for 3.10 (Mangirdas@Judeikis.LT)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.7.25-1
changelog:
  - remove integration tests from tox (lmeyer@redhat.com)
  - Changing include_tasks to include for release-3.7 (ewolinet@redhat.com)
  - initialize_facts: include role os_firewall (gscrivan@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.7.26-1
changelog:
  - Update CF 4.6 Beta templates in openshift_management directory
    (simaishi@redhat.com)
  - CF 4.6 templates (simaishi@redhat.com)
  - remove legacy master (m.judeikis@gmail.com)
  - openshift_checks: repair adhoc list-checks mode (lmeyer@redhat.com)
  - docker_image_availability: enable skopeo to use proxies (lmeyer@redhat.com)
  - Fix docker_image_availability checks (mgugino@redhat.com)
  - [1512810] Ensure failures during init abort installation (rteague@redhat.com)
  - Require minimum Ansible version 2.3.2 (rteague@redhat.com)
  - Allow for firewalld on atomic host (sdodson@redhat.com)
  - Fix a typo in "Determine if growpart is installed" (vrutkovs@redhat.com)
  - Check rc for commands with openshift_client_binary and failed_when
    (vrutkovs@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.7.27-1
changelog:
  - docker_image_availability: containerized overrides (lmeyer@redhat.com)
  - [release-3.7] [1538896] Correct certificate alt name parsing
    (rteague@redhat.com)
  - Readd etcd openshift_facts (mgugino@redhat.com)
  - Only automatically restart if cluster is in yellow or green state
    (ewolinet@redhat.com)
  - [1538816] Backport #6817 & #5970 (rteague@redhat.com)
  - [1530403] Improve etcd group error message (rteague@redhat.com)
  - Update haproxy.cfg.j2 (rteague@redhat.com)
  - Add support for Amazon EC2 C5 instance types (rteague@redhat.com)
  - Lowercase node names when creating certificates (vrutkovs@redhat.com)
  - Ensure that node names are lowerecased before matching (sdodson@redhat.com)
  - Ensure we are running oc execs against running pods (ewolinet@redhat.com)


author: Justin Pierce <jupierce@redhat.com> 3.7.28-1
changelog:
  - Conditionally create pvcs for metrics depending on whether or not it already
    exists (ewolinet@redhat.com)
  - cherry-pick to 3.7 gluster block (m.judeikis@gmail.com)
  - allow setting of kibana env vars (jcantril@redhat.com)
  - No longer compare with legacy hosted var (ewolinet@redhat.com)
  - Preserving ES dc storage type unless overridden by inventory variable
    (ewolinet@redhat.com)
  - Rework provisioners vars to support different prefix/version for Origin/OSE
    (vrutkovs@redhat.com)
  - Correct ability to override openshift_management_app_template
    (rteague@redhat.com)
  - Pull openshift_image_tag from oo_masters_to_config rather oo_first_master.
    (abutcher@redhat.com)
  - Default install_result when reloading generated facts. (abutcher@redhat.com)
  - Remove remaining haproxy files with uninstallation
    (nakayamakenjiro@gmail.com)
  - Remove master ha_bool checks 3.7 (mgugino@redhat.com)
  - Don't restart docker when re-deploying node certs (sdodson@redhat.com)


author: Justin Pierce <jupierce@redhat.com> 3.7.29-1
changelog:
  - Add ability to mount volumes into system container nodes (mgugino@redhat.com)
  - health checks: tolerate ovs 2.9 (lmeyer@redhat.com)
  - Fixing file write issue. (kwoodson@redhat.com)
  - image name incorrect (rcook@redhat.com)


author: Justin Pierce <jupierce@redhat.com> 3.7.31-1
changelog:
  - origin-dns: make sure cluster.local DNS server is listed first
    (vrutkovs@redhat.com)
  - Whenever we create a new es node ignore health checks, changing prometheus pw
    gen for increased secret idempotency (ewolinet@redhat.com)
  - Add python-ipaddress to dependencies (fabian@fabianism.us)
  - Bug 1541625- properly cast provided ip address to unicode
    (fabian@fabianism.us)
  - Make IP object a string (fabian@fabianism.us)
  - Add kube service ipaddress to no_proxy list (sdodson@redhat.com)
  - Use r_etcd_common_etcdctl_command instead of hardcoded binary name to support
    containerized upgrade (vrutkovs@redhat.com)
  - bug 1537857. Fix retrieving prometheus metrics (jcantril@redhat.com)
  - include elasticsearch container name (jvallejo@redhat.com)
  - persistent volume: fix template to support python3 (vrutkovs@redhat.com)
  - xPaaS v1.4.8 for v3.7 (sdodson@redhat.com)
  - Bump xpaas version (sdodson@redhat.com)
  - changed oc command to {{ openshift.common.client_binary }}
    (datarace101@gmail.com)
  - Allow journald_vars_to_replace to set (mgugino@redhat.com)
  - fix indentation of terminationGracePeriodSeconds var (jsanda@redhat.com)
  - Changing the check for 1,3 or 5 etcd nodes so that it just checks that the
    number isn't 0 (geoff.newson@gmail.com)


author: Justin Pierce <jupierce@redhat.com> 3.7.32-1
changelog:
  - bug 1547348. Annotate ops projects with an .operation prefix
    (jcantril@redhat.com)
  - Link to etcd v3 migration docs rather than suggesting dangerous things
    (sdodson@redhat.com)
  - Adding blank library files for action_plugins (ewolinet@redhat.com)
  - Only try to yaml.load a file if it ends in .yml or .yaml in logging facts
    (ewolinet@redhat.com)
  - Removing include_tasks calls and fixing prior cherrypicks
    (ewolinet@redhat.com)
  - Fix undefined lib_utils_oo_random_word on release-3.7. #7173
    (Shelnutt2@gmail.com)
  - Patching only if file exists. Fixing es configmap name we patch against
    (ewolinet@redhat.com)
  - Updating deprecation variable check to use a module for cleaner output and
    use run_once to limit to one host. Add flag to skip dep check if desired
    (ewolinet@redhat.com)
  - Changing conditional_set_fact from module to action_plugin since it does not
    need to access hosts to be effective and to reduce playbook output
    (ewolinet@redhat.com)
  - Updating logging_facts to be able to pull values from config maps yaml files,
    use diffs to keep custom changes, white list certain settings when creating
    diffs (ewolinet@redhat.com)
  - Revert "GlusterFS: Remove image option from heketi command" (hansmi@vshn.ch)


author: Justin Pierce <jupierce@redhat.com> 3.7.34-1
changelog:
  - delete config map, dameon set, and cluster role (john.sanda@gmail.com)
  - check for empty string in the installers deps task (john.sanda@gmail.com)


author: Iryna Shcherbina <ishcherb@redhat.com> - 2.18.4-2
changelog:
  - Fix ambiguous Python 2 dependency declarations
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Toshio Kuratomi <toshio@fedoraproject.org> - - 2.2.2.0-0.2.rc1
changelog:
  - Add a python3 ansible package.  Note that upstream doesn't intend for the library
    to be used by third parties so this is really just for the executables.  It's not
    strictly required that the executables be built for both python2 and python3 but
    we do need to get testing of the python3 version to know if it's stable enough to
    go into the next Fedora.  We also want the python2 version available in case a user
    has to get something done and the python3 version is too buggy.
  - Fix Ansible cli scripts to handle appended python version


author: Toshio Kuratomi <toshio@fedoraproject.org> - - 2.2.2.0-0.3.rc1
changelog:
  - Add a symlink for ansible executables to be accessed via python major version
    (ie: ansible-3) in addition to python-major-minor (ansible-3.6)


author: Kevin Fenzi <kevin@scrye.com> - 2.2.2.0-3
changelog:
  - Deal with RHEL7 pytest vs python-pytest.
  - Rebase epel6 newer jinja patch.
  - Conditionalize exclude for RHEL6 rpm.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.3.0.0-1
changelog:
  - Update to 2.3.0
  - Remove upstreamed patches
  - Remove controlpersist socket path path as a custom solution was included
    upstream
  - Run the unittests from the upstream tarball now instead of having to download
    separately
  - Build a documentation subpackage


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.21-1
changelog:
  - glusterfs: bind created volume to the claim (vrutkovs@redhat.com)
  - Wait for existing nodes to go Ready before approval (sdodson@redhat.com)
  - Fix ordering of etcd stop and mask (mgugino@redhat.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.23-1
changelog:
  - add firewall rules for node exporter (m.judeikis@gmail.com)
  - AWS: use vpc name instead of cluster id when creating security groups
    (cewong@redhat.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.24-1
changelog:
  - Avoid undefined variable glusterfs_heketi_user_key (sdodson@redhat.com)
  - When the node process is down, don't exit (ccoleman@redhat.com)
  - Add scaleup playbook and docs for OpenStack (tomas@sedovic.cz)
  - Fix the Neutron DNS docs (tomas@sedovic.cz)
  - Add support for OpenStack internal DNS (tomas@sedovic.cz)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.26-1
changelog:
  - Allow to autoname scale group instances (jchaloup@redhat.com)
  - re-enable 3.10 repos (m.judeikis@gmail.com)


author: Justin Pierce <jupierce@redhat.com> 3.10.0-0.63.0
changelog:
  - Bug 1586366 - Use include_tasks for dynamic task file includes
    (rteague@redhat.com)
  - Make prometheus use persistent storage by default (ironcladlou@gmail.com)
  - Make Kuryr connect to OpenShift API through LB (mdulko@redhat.com)


author: Tim Bielawa <tbielawa@redhat.com> 3.10.19-1
changelog:
  - Add max-size to docker log opts (umohnani@redhat.com)
  - Remove old service files before masking them (sdodson@redhat.com)
  - replace samples with ones from origin v3.10 (bparees@redhat.com)
  - generate_pv_pvcs_list: set claimRef for NFS volumes (vrutkovs@redhat.com)
  - Fix storageclass setting for NFS (vrutkovs@redhat.com)
  - Add openshift_docker_gc role to upgrade path (rteague@redhat.com)
  - Exclude existing masters from node list for CSR approval during node and
    master scaleup. (abutcher@redhat.com)
  - Allow installs of Node Problem Detector during upgrades (joesmith@redhat.com)
  - Increate lbaas_activation_timeout for kuryr-controller (ltomasbo@redhat.com)
  - Sync Fuse console templates (antonin@stefanutti.fr)
  - Ensure nodes created by a scale group have a Name tag (amcdermo@redhat.com)
  - Do not delete IAM cert if explicitely requested (jchaloup@redhat.com)
  - Use OPENSHIFT_CLUSTER env in OpenStack uninstall (tomas@sedovic.cz)
  - standalone etcds: make sure etcd facts are set before applying etcd config
    (vrutkovs@redhat.com)
  - Fix etcd restart commands (mgugino@redhat.com)
  - Add Fuse Console templates (antonin@stefanutti.fr)
  - Make openshift_control_plane/check_master_api_is_ready.yml generic
    (sdodson@redhat.com)
  - Wait for API availability before migrating storage, add retries
    (sdodson@redhat.com)
  - Accept client certs from node, system:admin, and bootstrap SA
    (sdodson@redhat.com)
  - Fix scalegroup upgrades so don't have to delete ASG's. (mwoodson@redhat.com)
  - Dedicated etcd nodes should not be added to oo_nodes_to_upgrade
    (vrutkovs@redhat.com)
  - Don't upgrade nodes which only have dedicated etcd (vrutkovs@redhat.com)
  - add node get-node-logs script (m.judeikis@gmail.com)
  - hardcode flexvolume path on atomic hosts (hekumar@redhat.com)
  - Sync latest content (sdodson@redhat.com)
  - Discourage use of openshift_docker_additional_registries (sdodson@redhat.com)
  - Make sure that we use rslave mount propagation (hekumar@redhat.com)
  - Update ansible code to preseve path on non-atomic hosts (hekumar@redhat.com)
  - Mark ready nodes as accepted during oc_adm_csr approval.
    (abutcher@redhat.com)
  - Add infra secgroup rules to the flat secgrp rules (ltomasbo@redhat.com)
  - Reconfigure web console after certificates were redeployed
    (vrutkovs@redhat.com)
  - Update etcd pod to 3.2.22 (sdodson@redhat.com)
  - Use openshift_is_atomic fact from delegated host (vrutkovs@redhat.com)
  - Ensure SkyDNS is enabled with Kuryr SDN (ltomasbo@redhat.com)
  - etcd: add clientAuth to server usage (rphillips@redhat.com)
  - Configure node proxy settings on bootstrapped nodes (vrutkovs@redhat.com)
  - Copying acs-engine output to know location. (kwoodson@redhat.com)
  - Add kubelet-plugins to allowed locations (hekumar@redhat.com)
  - Bug 1589134- Namespace the CRD variable to prevent collision
    (fabian@fabianism.us)
  - Gather master facts to make sure cluster_hostname gets appended to no_proxy
    list on nodes (vrutkovs@redhat.com)
  - Get acs-engine from new CI namespace (kargakis@protonmail.ch)
  - Mount kubelet plugins inside controller (hekumar@redhat.com)
  - Allowing for build artifacts to persist. (kwoodson@redhat.com)
  - Fix volume location in containarized installs (hekumar@redhat.com)
  - Add Data Grid 7.2 to OpenShift Cloud Platform (remerson@redhat.com)
  - Increase watch_retry_timeout for kuryr-daemon (mdulko@redhat.com)
  - Adding sslcacert to additional repos (craig.munro@gmail.com)
  - Update routers that are defined in openshift_hosted_routers
    (sdodson@redhat.com)
  - Correct tests used as filters (rteague@redhat.com)
  - Move os_sdn_network_plugin_name into openshift_facts (sdodson@redhat.com)
  - Fix openshift_node_config_name in bootstrap.yml. (abutcher@redhat.com)
  - Only dump oreg_url when value is defined. (kwoodson@redhat.com)
  - Variablizing vm size for azure. (kwoodson@redhat.com)
  - bug 1575903. Default ES memory to 8G (jcantril@redhat.com)
  - Add a debug statement to the image build to dump tag information.
    (kwoodson@redhat.com)
  - Remove haproxy from node package set (sdodson@redhat.com)
  - Find router pods with fully qualified prefixes during upgrade
    (sdodson@redhat.com)
  - Set `openshift_node_group_name` for the CNS nodes (tomas@sedovic.cz)
  - Persist oreg_url in node image (kargakis@protonmail.ch)
  - bump xpaas to 1.4.14 (rcernich@redhat.com)
  - Deprecate openshift_node_kubelet_args and openshift_node_labels
    (vrutkovs@redhat.com)
  - Maybe the symlink is slightly off? (sdodson@redhat.com)
  - azure: disable waagent data disk management (jminter@redhat.com)
  - Bug 1558689 - Add iproute to Dockerfile.rhel7 (rteague@redhat.com)
  - manage_node: don't add extra labels to infra/compute/master nodes
    (vrutkovs@redhat.com)
  - "Fixed ns_update var check" (erj826@bu.edu)
  - no_proxy: use 'append' to properly add a string to a list
    (vrutkovs@redhat.com)
  - openshift_aws: enabled different instance type to be used
    (mwoodson@redhat.com)
  - Updating node group mappings to use an openshift specific tag.
    (kwoodson@redhat.com)
  - Set UID,fsGroup and Linux options to cassandra RC's (ruben.vp8510@gmail.com)
  - Revert "Migrate hawkular metrics to a new namespace" (ruben.vp8510@gmail.com)
  - change from none to len of the string (davis.phillips@gmail.com)
  - Fully qualify all openshift/origin and openshift3/ose images
    (sdodson@redhat.com)
  - Add node_group_checks to openshift_node_group.yml (rteague@redhat.com)
  - Add openshift-node entry-point playbooks (rteague@redhat.com)
  - Fix invalid openshift_master_audit_config in hosts.example
    (vrutkovs@redhat.com)
  - Record etcd static pod version only if master-exec has stdout
    (vrutkovs@redhat.com)
  - upgrade: init facts on nodes so that NO_PROXY would include nodes
    (vrutkovs@redhat.com)
  - Enable container_manage_crgroup sebool (sdodson@redhat.com)
  - master config: join bootstrap settings and sync DS tasks
    (vrutkovs@redhat.com)
  - Add openshift_master_cluster_hostname to no_proxy list (vrutkovs@redhat.com)
  - Remove umount /var/lib/docker as docker-storage-setup --reset umount it
    (nakayamakenjiro@gmail.com)
  - Fix wrong path to docker storage (nakayamakenjiro@gmail.com)
  - Clean up docker-storage in a reliable mannger (nakayamakenjiro@gmail.com)
  - Fixed add_container_provider.yaml so it uses openshift_management_project
    variable name instead of set name (dluong@redhat.com)
  - Allow for overriding of the elb names to support shorter endings for the
    names (staebler@redhat.com)
  - Makes redeploy-registry-certificates consistent with
    openshift_hosted_manage_registry. (jtudelag@redhat.com)
  - - Include RHPAM templates in OpenShift release (fspolti@redhat.com)
  - upgrade: storage migrations should use 'until' to properly retry migrations
    (vrutkovs@redhat.com)
  - Standardize master restart (rteague@redhat.com)
  - Enable monitoring to scrape across namespaces (ironcladlou@gmail.com)
  - Fix to pass quoted unsafe strings (with characters like *,<,%) correctly to
    kubelet (avesh.ncsu@gmail.com)
  - Bug 1584609 - Update iptablesSyncPeriod in node-config.yaml
    (rteague@redhat.com)
  - Bug 1591186 - Skip version and sanity checks for openshift_node_group.yml
    (rteague@redhat.com)
  - registry-console: limit pods to masters (vrutkovs@redhat.com)
  - Align node startup async tasks with the ExecStartTimeout value
    (sdodson@redhat.com)
  - bug 1572493. Update default logging NS in openshift_health_checker
    (jcantril@redhat.com)
  - Fix minor indentation (rteague@redhat.com)
  - azure: pass image_name into tasks/create_blob_from_vm.yml
    (jminter@redhat.com)
  - azure: tag image as valid=true, not valid=True (jminter@redhat.com)
  - azure: don't try to print deployment failure message when there isn't one
    (jminter@redhat.com)
  - Azure: use empty dict if input image has no tags (pschiffe@redhat.com)
  - No code in openshift-ansible should be using CONFIG_FILE
    (ccoleman@redhat.com)
  - Add support for hostpath persistent volume definitions (dmsimard@redhat.com)
  - Revert "Make SDN read config file from sysconfig" (ccoleman@redhat.com)
  - Sync daemonset should start after node configmaps are created to avoid race
    conditions (vrutkovs@redhat.com)
  - Switch papr to use our new composite groups (sdodson@redhat.com)
  - fix typo to leave only one (wjiang@redhat.com)
  - Fix hostname check failure message (mgugino@redhat.com)
  - Add retries to SCC check on upgrade (rteague@redhat.com)
  - mount host signature lookaside configuration (bparees@redhat.com)
  - checks for . (erj826@bu.edu)
  - Adding etcd image variables to fix azure deployments. (kwoodson@redhat.com)
  - Add master-infra and all-in-one node-configs (sdodson@redhat.com)
  - Fix the docs, add additional .parr file description (teleyic@gmail.com)
  - Move openshift_node_group to private play (mgugino@redhat.com)
  - Don't restart dnsmasq during upgrade (rteague@redhat.com)
  - Fix ansible_service_broker role, needs openshift_facts (rteague@redhat.com)
  - Migrate HPA scale target refs in storage migration (sross@redhat.com)
  - fixes (sdodson@redhat.com)
  - Add a bit of detail about how to get configmaps during upgrade
    (sdodson@redhat.com)
  - Deploy shim scripts based on the runtime in use (sdodson@redhat.com)
  - Upgrade cri-o (sdodson@redhat.com)
  - Fix quoting (sdodson@redhat.com)
  - roles: openshift_control_plane: move docker scripts to crictl
    (runcom@redhat.com)
  - Install cri-tools even when crio isn't in use (sdodson@redhat.com)
  - suggestions (sdodson@redhat.com)
  - GlusterFS: Add GlusterFS hosts to openshift-hosted/config.yml playbook
    (jarrpa@redhat.com)
  - Add some openshift_node_group and openshift_node_group_name docs
    (sdodson@redhat.com)
  - Fix sanity_checks typos (mgugino@redhat.com)
  - Upgrade router and registry only when these are managed (vrutkovs@redhat.com)
  - [WIP] Azure: calculate input image for base and node image
    (pschiffe@redhat.com)
  - Migrate hawkular metrics to a new namespace (ruben.vp8510@gmail.com)
  - Set openshift_node_group_name for AWS hosts. (abutcher@redhat.com)
  - Device_type is deprecated for block devices. Use volume_type instead.
    (abutcher@redhat.com)
  - Fix flaky use of `oc process` (ironcladlou@gmail.com)
  - Bug 1589015 - Switch to rolling deployment for web console
    (spadgett@redhat.com)
  - Move openshift_master_manage_htpasswd into openshift_facts
    (sdodson@redhat.com)
  - Bug 1586197 - Increase async timeout (rteague@redhat.com)
  - Make the number of service catalog retries configurable (dyasny@gmail.com)
  - Remove default selector from sample inventory (tomas@sedovic.cz)
  - Check for node-group configmaps during upgrades (mgugino@redhat.com)
  - Fix the flake8 and pylint errors (tomas@sedovic.cz)
  - Add kuryr label examples to the sample inventory (tomas@sedovic.cz)
  - Remove podman from install it creates problems (sdodson@redhat.com)
  - Set openshift_node_group_name in OpenStack inventory (tomas@sedovic.cz)
  - [WIP] azure - do not tag node images as valid automatically
    (pschiffe@redhat.com)
  - Add placeholder for openshift_node_group play (mgugino@redhat.com)
  - Check for undefined node_output.results (sdodson@redhat.com)
  - Updating fluentd label and wait to be in a single shell rather than running a
    script from /tmp (ewolinet@redhat.com)
  - Add Luis Tomas to Kuryr and OpenStack owners (tomas@sedovic.cz)
  - add task to import_role (davis.phillips@gmail.com)
  - remove svc creation and master config from base tasks in vsphere cloud
    provider (davis.phillips@gmail.com)
  - azure: add no_log: true to acs-engine deploy task (jminter@redhat.com)
  - allow node config sync controller to handle multiple node labels
    (jminter@redhat.com)
  - Fix multimaster OpenStack deployment failure (tomas@sedovic.cz)
  - Force openshift_node_group_name for all nodes (mgugino@redhat.com)
  - Update ansible_service_broker_node_selector to new version
    (mgugino@redhat.com)
  - azure: always build images using ssd-backed VM (jminter@redhat.com)
  - azure: ensure cloud provider config is laid down in bootstrap node config
    (jminter@redhat.com)
  - Ensure repos only run during prerequisites.yml (mgugino@redhat.com)
  - dockergc: change image name to ose-control-plane (gscrivan@redhat.com)
  - Remove openshift_dns_ip configuration, not valid in 3.10 (sdodson@redhat.com)
  - Do not force-terminate etcd (kargakis@protonmail.ch)
  - typo (faust64@gmail.com)
  - Remove unused registry-console's imagestream (nakayamakenjiro@gmail.com)
  - Ensure packages are latest (sdodson@redhat.com)
  - Install cri-tools and podman (sdodson@redhat.com)
  - Generalized storage setup for nodes (cwilkers@redhat.com)
  - azure: format data disk for docker use (jminter@redhat.com)
  - update azure OWNERS (jminter@redhat.com)
  - Added container_manage_cgroup in order for systemd to run in pods due to
    update in selinux policy (dluong@redhat.com)


author: Tim Bielawa <tbielawa@redhat.com> 3.10.20-1
changelog:
  - Adds openshift_fs_inotify_max_user_instances to the node tuned profile.
    (jtudelag@redhat.com)
  - Make fs_inotify_max_user_watches configurable. (avesh.ncsu@gmail.com)


author: Kevin Traynor <ktraynor@redhat.com> 2.6.1-1.git20161206
changelog:
  - Update to OVS 2.6.1 + branch-2.6 bugfixes (#1335865)
  - Update to use DPDK 16.11 (#1335865)
  - Enable OVN


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.9.1-18
changelog:
  - Resolves: rhbz#1286765 - set TimeoutStartSec=0 in unitfile
  - Resolves: rhbz#1298363, rhbz#1300076, rhbz#1304038, rhbz#1302418
  - built forward-journald commit#77e02a9 - other subpackage commits same as
  previous build


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.9.1-20
changelog:
  - Resolves: rhbz#1317662 - include manpage for docker run
  - Resolves: rhbz#1317627 - ensure that we join all the cgroups
  - built docker @projectatomic/rhel7-1.9 commit#0275914
  - built docker-selinux commit#69be4dc
  - built d-s-s commit#03dfc7b
  - built docker-utils commit#b851c03
  - built forward-journald commit#77e02a9


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.9.1-22
changelog:
  - Resolves: rhbz#1317991 - Set Delegate=yes for cgroup transient units
  - built docker @projectatomic/rhel7-1.9 commit#f97fb16
  - built docker-selinux commit#69be4dc
  - built d-s-s commit#03dfc7b
  - built docker-utils commit#b851c03
  - built forward-journald commit#77e02a9


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.9.1-23
changelog:
  - Resolves: rhbz#1318360 - delete bounds checking rules
  - built docker @projectatomic/rhel7-1.9 commit#f97fb16
  - built docker-selinux commit#8718b62
  - built d-s-s commit#c6f0553
  - built docker-utils commit#b851c03
  - built forward-journald commit#77e02a9


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.9.1-24
changelog:
  - built docker @projectatomic/rhel7-1.9 commit#78ee77d
  - built docker-selinux commit#8718b62
  - built d-s-s commit#c6f0553
  - built docker-utils commit#b851c03
  - built forward-journald commit#77e02a9


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.9.1-25
changelog:
  - Resolves: rhbz#1320302 - Backport fix for --cgroup-parent in docker
  - same commits as release -24, only added bug number


author: Carl George <carl@george.computer> - 2.7.0-1
changelog:
  - Latest upstream rhbz#1527712
  - Drop patch1, requirements.txt does not affect final installation
  - Drop unnecessary coverage and flake8 build requirements


author: Ralph Bean <rbean@redhat.com> - 1.15.1-2
changelog:
  - Remove broken symlinks to unbundled python3-six files
    https://bugzilla.redhat.com/show_bug.cgi?id=1295015


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.7.8-1
changelog:
  - Allow disabling authorization migration check (sdodson@redhat.com)
  - Nuke /var/lib/dockershim/sandbox/* while nodes are drained
    (sdodson@redhat.com)
  - Fix extension script for catalog (mgugino@redhat.com)
  - Regex anchors changed to match protocol start and ports.
    (kwoodson@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.7.10-1
changelog:
  - add nfs storage type (sdodson@redhat.com)
  - Update prometheus to 2.0.0 GA (zgalor@redhat.com)
  - Fix openshift_env fact creation within openshift_facts. (abutcher@redhat.com)
  - fix type in authroize (jchaloup@redhat.com)
  - inventory: Add example for service catalog vars (smilner@redhat.com)
  - Add v3.7 a-o-i upgrade version mappings (sdodson@redhat.com)
  - 3.7 quick installer support (sdodson@redhat.com)
  - GlusterFS: Remove extraneous line from glusterblock template
    (jarrpa@redhat.com)
  - Place-holder for prerequisites.yml (mgugino@redhat.com)
  - Refactor etcd image (mgugino@redhat.com)
  - Move openshift-prometheus out of openshift-hosted (rteague@redhat.com)
  - registry-console: align image and check (lmeyer@redhat.com)
  - registry-console template 3.7 consistency (lmeyer@redhat.com)
  - registry-console template 3.6 consistency (lmeyer@redhat.com)
  - Only remove empty keys from env if env exists (sdodson@redhat.com)
  - GlusterFS: Add configuration for auto creating block-hosting volumes
    (jarrpa@redhat.com)
  - Upgrade to etcd 3.2 (sdodson@redhat.com)
  - Allow cluster IP for docker-registry service to be set (hansmi@vshn.ch)
  - Bug 1510496 - logging: honor ES PVC size (jwozniak@redhat.com)
  - Fixing islnk. (kwoodson@redhat.com)
  - Fix stale data in openshift_facts for logging (mgugino@redhat.com)
  - Run registry auth after docker restart (mgugino@redhat.com)
  - Alternative method to create docker registry auth creds (mgugino@redhat.com)
  - GlusterFS: Add gluster-s3 functionality (jarrpa@redhat.com)
  - GlusterFS: Add glusterblock functionality (jarrpa@redhat.com)
  - GlusterFS: Update heketi templates for latest version (jarrpa@redhat.com)
  - GlusterFS: Specify resource requests (jarrpa@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.7.11-1
changelog:
  - papr: use new PAPR_PULL_TARGET_BRANCH (jlebon@redhat.com)
  - papr: auto-detect image tag to use and bump to f27 (jlebon@redhat.com)
  - Bug 1514417 - Adding correct advertise-client-urls (shawn.hurley21@gmail.com)
  - Bug 1512793- Fix idempotence issues in ASB deploy (fabian@fabianism.us)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.7.12-1
changelog:
  - storage_glusterfs: fix typo (lmeyer@redhat.com)
  - retry package operations (lmeyer@redhat.com)
  - Add check for gluterFS DS to stop restarts (m.judeikis@gmail.com)
  - Add support for external glusterfs as registry backend (m.judeikis@gmail.com)
  - dist.iteritems() no longer exists in Python 3. (jpazdziora@redhat.com)
  - [3.7] Correct usage of include_role (rteague@redhat.com)
  - hosted_registry: clean up tmp mount point and fstab (dusty@dustymabe.com)
  - Add role to configure project request template (hansmi@vshn.ch)
  - Removing setting prefix and version facts in openshift_logging to let the
    component roles set their defaults (ewolinet@redhat.com)
  - Fixing origin default for es proxy (ewolinet@redhat.com)
  - Addressing tox errors (ewolinet@redhat.com)
  - Addressing comments (ewolinet@redhat.com)
  - Updating logging components image defaulting pattern to match
    openshift_logging pattern (ewolinet@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.6.172-1
changelog:
  - Fixing podpresets perms for service-catalog-controller (ewolinet@redhat.com)
  - Fix log dumping on service failure (sdodson@redhat.com)
  - Fix etcd conditional check failure (admin@webresource.nl)
  - Fixing route spec caCertificate to be correctly capitalized
    (ewolinet@redhat.com)
  - Metrics: grant hawkular namespace listener role (mwringe@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.6.172.0.0-1
changelog:
  - Block etcdv3 migration for supported configurations (sdodson@redhat.com)
  - Shut down masters before taking an etcd backup (sdodson@redhat.com)
  - Updating template parameter replica to be more unique to avoid var scope
    creeping (ewolinet@redhat.com)
  - Add glusterfs_registry hosts to oo_all_hosts. (jarrpa@redhat.com)
  - Fix incorrect delegate_to in control plane upgrade (sdodson@redhat.com)
  - Allow storage migrations to be optional and/or non fatal (sdodson@redhat.com)
  - Add glusterfs hosts to oo_all_hosts so that hosts set initial facts.
    (abutcher@redhat.com)
  - Simplify generation of /etc/origin/node/resolv.conf (sdodson@redhat.com)
  - backport BZ#1422541 fix to release-3.6 (weshi@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.6.172.0.2-1
changelog:
  - Updating metrics role to create serviceaccounts and roles immediately
    (ewolinet@redhat.com)
  - Impl fluentd file buffer (nhosoi@redhat.com)
  - GlusterFS: Use default namespace when not native. (jarrpa@redhat.com)
  - Import templates will fail if user is not system:admin (jkaur@redhat.com)
  - add selector and storage class name to oc_pvc module (jcantril@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.6.173.0.0-1
changelog:
  - GlusterFS: Fix variable names in defaults. (jarrpa@redhat.com)
  - Fixes for auth_proxy, vxlan mode (srampal@cisco.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.6.173.0.2-1
changelog:
  - Use enterprise images for CFME enterprise deployments (sdodson@redhat.com)
  - Switch logging and metrics OCP image tag from 3.6.0 to v3.6
    (sdodson@redhat.com)
  - specfile tweak (jolamb@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.6.173.0.3-1
changelog:
  - GlusterFS: Copy SSH private key to master node. (jarrpa@redhat.com)
  - Fixing SA and clusterrole namespaces (ewolinet@redhat.com)
  - Remove invalid when: from vars: (rteague@redhat.com)
  - Refactor openshift_facts BIOS vendor discovery (rteague@redhat.com)
  - Resolve deprecation warnings in Contiv roles (rteague@redhat.com)


author: Kevin Fenzi <kevin@scrye.com> 0.9-6
changelog:
  - Add patch to fix http over proxy. Fixes bug #857514
  - Add patch to fix CVE-2013-2037. Fixes bug #958640
  - Add patch to fix binary headers in python3. Fixes bug #1205127


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1.10.2-1.rhaos3.10.git095e88c
changelog:
  - bump to v1.10.2
  - built commit 095e88c
  - include rhaos3.10 in release tag
  - do not compress debuginfo with dwz to support delve debugger


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1.10.4-1.rhaos3.10.gitebaa77a
changelog:
  - bump to v1.10.4
  - remove devel and unittest subpackages - unused
  - debuginfo disabled for now, complains about %files being empty


author: Justin Pierce <jupierce@redhat.com> 3.9.0-0.43.0
changelog:
  - Changing conditional_set_fact from module to action_plugin since it does not
    need to access hosts to be effective and to reduce playbook output
    (ewolinet@redhat.com)
  - Revert "Bug 1512825 - add mux pod failed for Serial number 02 has already
    been issued" (mkhan@redhat.com)
  - Fix metadata access in OpenStack inventory (tomas@sedovic.cz)
  - Adding ability to yedit json files. (kwoodson@redhat.com)
  - Simplify double upgrade version logic (mgugino@redhat.com)
  - Whenever we create a new es node ignore health checks, changing prometheus pw
    gen for increased secret idempotency (ewolinet@redhat.com)
  - oc_adm_csr: Add fail_on_timeout parameter which causes module to fail when
    timeout was reached. (abutcher@redhat.com)
  - Adding missing template (ewolinet@redhat.com)
  - Move installation of packages before container_runtime to ensure bind mounts
    are avaialable. (kwoodson@redhat.com)
  - Use curl --noproxy option for internal apiserver access (takayoshi@gmail.com)
  - Revert openshift_version to previous state (mgugino@redhat.com)
  - Add openshift_gcp_multizone bool (mgugino@redhat.com)
  - Invert logic to decide when to re-deploy certs (sdodson@redhat.com)
  - etcd_scaleup: use inventory_hostname when etcd ca host is being picked
    (vrutkovs@redhat.com)
  - Fix docker_upgrade variable (mgugino@redhat.com)
  - Fix gcp variable warnings (mgugino@redhat.com)
  - Disable console install when not 3.9 or newer (spadgett@redhat.com)
  - Fix etcd scaleup plays (mgugino@redhat.com)
  - Add playbook to install components for cluster operator (cewong@redhat.com)
  - Remove cluster_facts.yml from the install.yml (tomas@sedovic.cz)
  - Allow for blank StorageClass in PVC creation (jarrpa@redhat.com)
  - Add service catalog to be upgraded (jpeeler@redhat.com)
  - Remove node start from bootstrap.yml. (abutcher@redhat.com)
  - Restart systemd-hostnamed before restarting NetworkManager in node user-data.
    (abutcher@redhat.com)
  - additional mounts: specify 'type' in container_runtime_crio_additional_mounts
    (vrutkovs@redhat.com)
  - Fix openshift_openstack_provision_user_commands (bdobreli@redhat.com)
  - origin-dns: make sure cluster.local DNS server is listed first
    (vrutkovs@redhat.com)
  - Fix OpenStack playbooks (tomas@sedovic.cz)
  - Backport changes for glusterfs, heketi, s3 and block templates
    (sarumuga@redhat.com)
  - Fix indentation to make yamllint happy (vrutkovs@redhat.com)
  - Use r_etcd_common_etcdctl_command instead of hardcoded binary name to support
    containerized upgrade (vrutkovs@redhat.com)
  - Verify that requested services have schedulable nodes matching the selectors
    (vrutkovs@redhat.com)
  - Normalize the time we wait for pods to 5s * 60 retries (sdodson@redhat.com)
  - Pause for console rollout (spadgett@redhat.com)
  - Fix wording (bdobreli@redhat.com)
  - Fix cloud init runcmd templating (bdobreli@redhat.com)
  - Note ignored Heat user data changes for openstack (bdobreli@redhat.com)
  - Clarify the ansible playbook vs cloud-init (bdobreli@redhat.com)
  - Fix openstack cloud-init runcmd templating (bdobreli@redhat.com)
  - [openstack] custom user commands for cloud-init (bdobreli@redhat.com)
  - Limit host scope during plays (mgugino@redhat.com)
  - Fix upgrade-control plane post_control_plane.yml (mgugino@redhat.com)
  - erase data only if variable is set. fix block indentatation
    (sarumuga@redhat.com)
  - uninstall playbook for GlusterFS (sarumuga@redhat.com)
  - Removing prefix and replacing with cidr, pool_start and pool_end variables.
    (mbruzek@gmail.com)
  - Make node start options configurable (celebdor@gmail.com)
  - Support master node high availability (jihoon.o@samsung.com)


author: Justin Pierce <jupierce@redhat.com> 3.9.0-0.46.0
changelog:
  - Tolerate OVS 2.6 in 3.10 as well (sdodson@redhat.com)
  - hosts.example: openshift_dns_ip should be node-specific (vrutkovs@redhat.com)
  - Add target mount for gluster block (m.judeikis@gmail.com)
  - Allow for overriding hosted registry_url variables (rteague@redhat.com)
  - Link to etcd v3 migration docs rather than suggesting dangerous things
    (sdodson@redhat.com)
  - Run openshift_version for image prep (mgugino@redhat.com)
  - Remove redundant openshift_hosted_registry_network_default
    (mgugino@redhat.com)
  - Correct the usage of bool and str (ghuang@redhat.com)
  - kernel module loading fix (m.judeikis@gmail.com)
  - add steps in bootstrap playbook to handle updating aws.conf file
    (jdiaz@redhat.com)
  - Add cloud config variables to the sample inventory (nelluri@redhat.com)
  - Run init/facts for docker upgrade (mgugino@redhat.com)
  - quick installer: remove UPGRADE_MAPPINGS (vrutkovs@redhat.com)
  - Update quick installer to support 3.9 and 3.8 (vrutkovs@redhat.com)
  - Updating deprecation variable check to use a module for cleaner output and
    use run_once to limit to one host. Add flag to skip dep check if desired
    (ewolinet@redhat.com)
  - Patch only if the file exists, otherwise we should copy the file in
    (ewolinet@redhat.com)
  - Add vsphere section for openshift_node_kubelet_args_dict (ghuang@redhat.com)
  - Correctly comparing against the current configmap when making es configmap
    patches (ewolinet@redhat.com)
  - add uninstall playbooks for compute/infra scale groups (jdiaz@redhat.com)
  - Adding ability to pass content and create files from content.
    (kwoodson@redhat.com)
  - Bug 1541946- waiting for master reboot now works behind bastion
    (fabian@fabianism.us)


author: Justin Pierce <jupierce@redhat.com> 3.9.0-0.47.0
changelog:
  - Update API healthz check to use uri module (mkhan@redhat.com)
  - fixed an oo_filter plugin lib_utils_oo_has_no_matching_selector to do set
    comparison (mwoodson@redhat.com)
  - Grafana roles updates. (mrsiano@gmail.com)
  - add deprovision playbook for cluster-operator infrastructure
    (jdiaz@redhat.com)
  - Add tox test to check for invalid playbook include (rteague@redhat.com)
  - Change openshift.common.hostname to inventory_hostname (mgugino@redhat.com)
  - Fix openshift-webconsole version check (mgugino@redhat.com)
  - add master deprovisioning (jdiaz@redhat.com)
  - Adding file locking to yedit. (kwoodson@redhat.com)
  - Log troubleshooting info when console install fails (spadgett@redhat.com)
  - CRI-O: use /var/run/crio/crio.sock for >=3.9 (gscrivan@redhat.com)
  - Fix pvc template by replacing None by lowercase none (toj315@gmail.com)
  - GlusterFS: Fix uninstall regression (jarrpa@redhat.com)
  - Add prometheus reader role for lightweight privileges. (mrsiano@gmail.com)
  - docker_image_availability: encode error message (vrutkovs@redhat.com)
  - Tweak things based on feedback (sdodson@redhat.com)
  - Update example inventory to drive required hostgroups to the top
    (sdodson@redhat.com)


author: Justin Pierce <jupierce@redhat.com> 3.9.0-0.48.0
changelog:
  - Fix openshift_hosted_registry_storage_glusterfs_path (mgugino@redhat.com)
  - Revert openshift_portal_net (mgugino@redhat.com)
  - skip search for an ami if openshift_aws_ami_map provides one
    (jdiaz@redhat.com)
  - Adding node autoapprover. (kwoodson@redhat.com)
  - Adding ability to state absent array items with index/curr_value.
    (kwoodson@redhat.com)
  - Change image location to CF 4.6 GA from Beta (simaishi@redhat.com)
  - Update templates to mount the configmap into the directory the new image
    expects (simaishi@redhat.com)
  - Fix for support multi-cluster heketi's topology (chinacoolhacker@gmail.com)


author: Justin Pierce <jupierce@redhat.com> 3.9.0-0.50.0
changelog:
  - Fix upgrade verify_upgrade_targets (mgugino@redhat.com)
  - Ensure wire-aggregator run on 3.7 upgrades (mgugino@redhat.com)
  - Add no_log to prevent printing AWS creds (sedgar@redhat.com)
  - added ci inventory and groups for containerized (mgugino@redhat.com)


author: Justin Pierce <jupierce@redhat.com> 3.9.0-0.52.0
changelog:
  - Move journald setup to node tasks from master (nakayamakenjiro@gmail.com)
  - [BZ 1497408] delete config map, dameon set, and cluster role
    (john.sanda@gmail.com)
  - Fix aggregator relative paths (mgugino@redhat.com)
  - Fix package tasks ordering in OpenStack playbooks (tomas@sedovic.cz)
  - Change openshift_release to openshift_upgrade_target in upgrade
    (mgugino@redhat.com)
  - Normalize times we wait on pods to 10s * 60retries (sdodson@redhat.com)
  - start_api_server: service catalog healthcheck doesn't require proxy
    (vrutkovs@redhat.com)
  - Changing default of openshift_logging_public_master_url to use
    openshift_master_cluster_public_hostname if available (ewolinet@redhat.com)
  - Sync v3.8 content (sdodson@redhat.com)
  - Sync v3.7 content (sdodson@redhat.com)
  - Sync v3.9 content (sdodson@redhat.com)
  - Allow branch specific pulls from origin (sdodson@redhat.com)
  - Fixing bz1540467 docker-registry env var migration. Adding ability to oc_edit
    complex array style edits. (kwoodson@redhat.com)
  - [1537872] Adding seboolean for virt_use_samba (kwoodson@redhat.com)
  - Making patching a local_action and ensuring we become:false for local_actions
    (ewolinet@redhat.com)
  - Cast string to dict in lib_utils_oo_dict_to_keqv_list (mgugino@redhat.com)
  - refine condition for doing ami fetching (jdiaz@redhat.com)
  - Add field_selector parameter to oc_obj. (abutcher@redhat.com)
  - GlusterFS: Check for groups in template file (jarrpa@redhat.com)
  - Updating AMI copying tags to no longer default to parent AMI.
    (kwoodson@redhat.com)
  - Remove NoVolumeNodeConflict from 3.9+ (sdodson@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.8.29-1
changelog:
  - Use openshift_node_use_openshift_sdn when doing a containerized node upgrade
    (vrutkovs@redhat.com)
  - Fix: change import_role to include_role (mgugino@redhat.com)
  - docker storage setup for ami building (jdiaz@redhat.com)
  - Properly cast crio boolean variables to bool (mgugino@redhat.com)
  - Build containerized host group dynamically (mgugino@redhat.com)
  - install base_packages on oo_all_hosts (mgugino@redhat.com)
  - Fix error in variable in comment (mscherer@users.noreply.github.com)
  - Switch back to dynamic include_role in logging loops (sdodson@redhat.com)
  - Use Contiv version 1.2.0 (flamingo@2thebatcave.com)
  - Contiv multi-master and other fixes (flamingo@2thebatcave.com)
  - Add missing dependency on openshift_facts (sdodson@redhat.com)
  - upgrades: set openshift_client_binary fact when running on oo_first_master
    host (vrutkovs@redhat.com)
  - Install web console server (spadgett@redhat.com)
  - Remove become=no from various roles and tasks (mgugino@redhat.com)
  - Don't overwrite node's systemd units for containerized install
    (vrutkovs@redhat.com)
  - Fix docker_image_availability checks (mgugino@redhat.com)
  - test_oc_scale: add more scale test cases (vrutkovs@redhat.com)
  - test_oc_scale: fix test docstrings (vrutkovs@redhat.com)
  - Import prerequisites.yml for OpenStack (tomas@sedovic.cz)
  - Set the correct path to the openstack.conf file (tomas@sedovic.cz)
  - Return a openshift_node_labels as a dict (tomas@sedovic.cz)
  - Remove last of openshift_node role meta-depends (mgugino@redhat.com)
  - Fix yaml syntax error in the sample inventory (tomas@sedovic.cz)
  - Adding ability to update ami drive size. (kwoodson@redhat.com)
  - Add origin- prefix to ASB image (fabian@fabianism.us)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.8.30-1
changelog:
  - Adding logic to disable and reenable external communication to ES during full
    restart (ewolinet@redhat.com)
  - Adding logic to do a full cluster restart if we are incrementing our major
    versions of ES (ewolinet@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.8.31-1
changelog:
  - Fixing openshift_hosted variable. (kwoodson@redhat.com)
  - Don't hardcode the network interface in the openshift_logging_mux role
    (nkinder@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.8.32-1
changelog:
  - Only automatically restart if cluster is in yellow or green state
    (ewolinet@redhat.com)
  - Automatic commit of package [openshift-ansible] release [3.9.0-0.24.0].
    (smunilla@redhat.com)
  - Create swapoff module (mgugino@redhat.com)
  - Update CF 4.6 Beta templates in openshift_management directory
    (simaishi@redhat.com)
  - installer: increase content width for commands, which may output URLs
    (vrutkovs@redhat.com)
  - Only rollout console if config changed (spadgett@redhat.com)
  - Change dnsmasq Requires to Wants.
    https://bugzilla.redhat.com/show_bug.cgi?id=1532960 (rchopra@redhat.com)
  - Protect master installed version during node upgrades (mgugino@redhat.com)
  - [1506866] Update haproxy.cfg.j2 (rteague@redhat.com)
  - Split control plane and component install in deploy_cluster
    (ccoleman@redhat.com)
  - Add clusterResourceOverridesEnabled to console config (spadgett@redhat.com)
  - [1537105] Add openshift_facts to flannel role (rteague@redhat.com)
  - PyYAML is required by openshift_facts on nodes (ccoleman@redhat.com)
  - Move origin-gce roles and playbooks into openshift-ansible
    (ccoleman@redhat.com)
  - Directly select the ansible version (ccoleman@redhat.com)
  - use non-deprecated REGISTRY_OPENSHIFT_SERVER_ADDR variable to set the
    registry hostname (bparees@redhat.com)
  - update Dockerfile to add boto3 dependency (jdiaz@redhat.com)
  - Automatic commit of package [openshift-ansible] release [3.9.0-0.23.0].
    (smunilla@redhat.com)
  - Lowercase node names when creating certificates (vrutkovs@redhat.com)
  - NFS Storage: make sure openshift_hosted_*_storage_nfs_directory are quoted
    (vrutkovs@redhat.com)
  - docker_image_availability: enable skopeo to use proxies (lmeyer@redhat.com)
  - Fix etcd scaleup playbook (mgugino@redhat.com)
  - Bug 1524805- ServiceCatalog now works disconnected (fabian@fabianism.us)
  - [1506750] Ensure proper hostname check override (rteague@redhat.com)
  - failed_when lists are implicitely ANDs, not ORs (vrutkovs@redhat.com)
  - un-hardcode default subnet az (jdiaz@redhat.com)
  - Install base_packages earlier (mgugino@redhat.com)
  - allow uninstalling AWS objects created by prerequisite playbook
    (jdiaz@redhat.com)
  - Ensure that node names are lowerecased before matching (sdodson@redhat.com)
  - Bug 1534020 - Only set logging and metrics URLs if console config map exists
    (spadgett@redhat.com)
  - Bug 1536262: Default console and TSB node selector to
    openshift_hosted_infra_selector (spadgett@redhat.com)
  - Migrate master-config.yaml asset config (spadgett@redhat.com)
  - Automatic commit of package [openshift-ansible] release [3.9.0-0.22.0].
    (smunilla@redhat.com)
  - Fix master scaleup play (mgugino@redhat.com)
  - use admin credentials for tsb install operations (bparees@redhat.com)
  - Fix etcd-upgrade sanity checks (mgugino@redhat.com)
  - Bug 1536253: Pass `--config` flag on oc commands when installing console
    (spadgett@redhat.com)
  - Fix enterprise registry-console prefix (sdodson@redhat.com)
  - [release-3.7] Fix enterprise registry console image prefix
    (sdodson@redhat.com)
  - [release-3.6] Fix enterprise registry console image prefix
    (sdodson@redhat.com)
  - Bug 1512825 - add mux pod failed for Serial number 02 has already been issued
    (nhosoi@redhat.com)
  - Remove old console asset config (spadgett@redhat.com)
  - Fix OpenStack readme (tomas@sedovic.cz)
  - Add support for Amazon EC2 C5 instance types (rteague@redhat.com)
  - Add templates to v3.9 (simaishi@redhat.com)
  - Quick installer: deprecate upgrades (vrutkovs@redhat.com)
  - Use Beta repo path (simaishi@redhat.com)
  - CF 4.6 templates (simaishi@redhat.com)
  - Fix node scaleup plays (mgugino@redhat.com)
  - Rollout console after template service broker install (spadgett@redhat.com)
  - Add ability to mount volumes into system container nodes (mgugino@redhat.com)
  - Use openshift_is_containerized instead of openshift_is_atomic when installing
    etcd (vrutkovs@redhat.com)
  - Ensure we are running oc execs against running pods (ewolinet@redhat.com)
  - Setting default storage_class_names for when calling
    openshift_logging_elasticsearch role (ewolinet@redhat.com)
  - Bug 1535947: Fix missing task in metrics, logging uninstall playbooks
    (spadgett@redhat.com)
  - Make openshift_web_console_prefix defaults like other components
    (sdodson@redhat.com)
  - Allow for firewalld on atomic host (sdodson@redhat.com)
  - Drop the testing repo var from openstack readme (tomas@sedovic.cz)
  - Add Azure to support openshift_cloudprovider_kind (wehe@redhat.com)
  - Fix to master-internal elb scheme (mazzystr@gmail.com)
  - bug 1523047. Annotate ops projects with an .operation prefix
    (jcantril@redhat.com)
  - Automatic commit of package [openshift-ansible] release [3.9.0-0.21.0].
    (smunilla@redhat.com)
  - Pull openshift_image_tag from oo_masters_to_config rather oo_first_master.
    (abutcher@redhat.com)
  - Ensure atomic_proxies are configured with docker (mgugino@redhat.com)
  - Default install_result when reloading generated facts. (abutcher@redhat.com)
  - Add call to 3.8 playbook in 3.9 upgrade (sdodson@redhat.com)
  - Remove 3.8 and 3.9 specific steps right now (sdodson@redhat.com)
  - Exclude 3.9 packages during 3.8 upgrade (sdodson@redhat.com)
  - fix typos (sdodson@redhat.com)
  - Ensure openshift_client_binary is set (sdodson@redhat.com)
  - Add init/main.yml to etc-upgrade (mgugino@redhat.com)
  - health checks: update required pkg versions (lmeyer@redhat.com)
  - health checks: factor out get_required_version (lmeyer@redhat.com)
  - package_version check: reuse get_major_minor_version (lmeyer@redhat.com)
  - Rework default TSB prefix and imagename to match other services
    (vrutkovs@redhat.com)
  - Fix a typo in "Determine if growpart is installed" (vrutkovs@redhat.com)
  - Check rc for commands with openshift_client_binary and failed_when
    (vrutkovs@redhat.com)
  - Add new grafana playbook. (mrsiano@gmail.com)
  - Allow 5 etcd hosts (sdodson@redhat.com)
  - Update console config for API changes (spadgett@redhat.com)
  - Remove duplication in node acceptance playbook and setup master groups so
    that we can use the first master's ansible_ssh_user when delegating.
    (abutcher@redhat.com)
  - Setting default storage_class_names for when calling
    openshift_logging_elasticsearch role (ewolinet@redhat.com)
  - include elasticsearch container name (jvallejo@redhat.com)
  - adding check if secret auth is needed (shawn.hurley21@gmail.com)
  - adding asb auth as a secret. (shawn.hurley21@gmail.com)
  - openshift_checks: repair adhoc list-checks mode (lmeyer@redhat.com)
  - Ensure we are running oc execs against running pods (ewolinet@redhat.com)
  - Remove tuned-profiles from list of master packages upgraded
    (sdodson@redhat.com)
  - Add missing task that got dropped in a refactor (sdodson@redhat.com)
  - Web Console: use a different var for asset config (vrutkovs@redhat.com)
  - Document the inventory change (tomas@sedovic.cz)
  - Move the OpenStack dynamic inventory from sample (tomas@sedovic.cz)
  - docker_upgrade_check: skip repoquery calls on containerized setups
    (vrutkovs@redhat.com)
  - Automatic commit of package [openshift-ansible] release [3.9.0-0.20.0].
    (smunilla@redhat.com)
  - Adjust openstack provider dependencies versions (bdobreli@redhat.com)
  - Fix openstack provider playbook name in docs (bdobreli@redhat.com)
  - fix bug 1534271 (wmeng@redhat.com)
  - Remove unused symlink (sdodson@redhat.com)
  - Automatic commit of package [openshift-ansible] release [3.9.0-0.19.0].
    (smunilla@redhat.com)
  - Automatic commit of package [openshift-ansible] release [3.9.0-0.18.0].
    (smunilla@redhat.com)
  - Automatic commit of package [openshift-ansible] release [3.9.0-0.17.0].
    (smunilla@redhat.com)
  - Automatic profile setting for tuned 2.9 (jmencak@redhat.com)
  - Don't use from ansible.module_utils.six as its no longer available in Ansible
    2.4 (vrutkovs@redhat.com)
  - Install web console on upgrade (spadgett@redhat.com)
  - Add console RBAC template (spadgett@redhat.com)
  - Add var for controller to enable async bindings (jpeeler@redhat.com)
  - Update latest image streams and templates (sdodson@redhat.com)
  - Use webconsole.config.openshift.io/v1 API group (spadgett@redhat.com)
  - Add missing v3.9 gluster templates (sdodson@redhat.com)
  - Spelling and grammar changes to the advanced-configuration.md file.
    (mbruzek@gmail.com)
  - Fixing openshift_hosted variable. (kwoodson@redhat.com)
  - Add cluster-operator playbook directory. (abutcher@redhat.com)
  - Move s3 & elb provisioning into their own playbooks s.t. they are applied
    outside of the openshift_aws master provisioning tasks. (abutcher@redhat.com)
  - Update deployment and apiserver with new certs (jpeeler@redhat.com)
  - Move more plugins to lib_utils (mgugino@redhat.com)
  - Add the ability to specify a timeout for node drain operations
    (sdodson@redhat.com)
  - Add defaults for openshift_pkg_version (mgugino@redhat.com)
  - docker_creds: fix python3 exception (gscrivan@redhat.com)
  - docker_creds: fix python3 exception (gscrivan@redhat.com)
  - docker: use image from CentOS and Fedora registries (gscrivan@redhat.com)
  - crio: use Docker and CentOS registries for the image (gscrivan@redhat.com)
  - Fix typo in the advanced config docs (tomas@sedovic.cz)
  - Write guide on setting up PVs with Cinder (tomas@sedovic.cz)
  - Allow using server names in openstack dynamic inv (tomas@sedovic.cz)
  - Specify the Cinder version in the inventory (tomas@sedovic.cz)
  - Add documentation example (joel.pearson@gmail.com)
  - Add blockstorage version for openstack (joel.pearson@gmail.com)
  - logging: fix jinja filters to support py3 (vrutkovs@redhat.com)
  - Ability to specify override tolerations via the buildconfig overrider
    (cdaley@redhat.com)
  - Chmod temp dirs created on localhost (mgugino@redhat.com)
  - Bug 1532787 - Add empty node selector to openshift-web-console namespace
    (spadgett@redhat.com)
  - Remove become statements (mgugino@redhat.com)
  - Setup master groups in order to use the master group's ansible_ssh_user to
    pull bootstrap kubeconfig. (abutcher@redhat.com)
  - Bug 1527178 - installation of logging stack failed: Invalid version specified
    for Elasticsearch (nhosoi@redhat.com)
  - Limit host group scope on control-plane upgrades (mgugino@redhat.com)
  - Refactor version and move some checks into sanity_checks.py
    (mgugino@redhat.com)
  - Updating tsb image names and template (ewolinet@redhat.com)
  - Ensure that openshift_facts role is imported whenever we rely on
    openshift_client_binary (sdodson@redhat.com)
  - Add key check for facts_for_clusterrolebindings (nakayamakenjiro@gmail.com)
  - Update web console template (spadgett@redhat.com)
  - Add iptables save handler (ichavero@redhat.com)
  - ensure containerized bools are cast (mgugino@redhat.com)
  - Update to AWS EC2 root vol size so that Health Check tasks pass
    (mazzystr@gmail.com)
  - Add key existing check to collect facts for rolebidings
    (nakayamakenjiro@gmail.com)
  - Fix provider network support at openstack playbook (ltomasbo@redhat.com)
  - 3.9 upgrade: remove openshift.common.service_type (vrutkovs@redhat.com)
  - container-engine: move registry_auth.yml before pull (gscrivan@redhat.com)
  - adding ability to add network policy objects. (shawn.hurley21@gmail.com)
  - docker_upgrade_check: skip repoquery calls on containerized setups
    (vrutkovs@redhat.com)
  - Adding logic to disable and reenable external communication to ES during full
    restart (ewolinet@redhat.com)
  - Provide example on how to use osm_etcd_image in a disconnected and
    containerized installation (tkarlsso@redhat.com)
  - Install node packages in one task instead of 3 (mgugino@redhat.com)
  - Don't hardcode the network interface in the openshift_logging_mux role
    (nkinder@redhat.com)
  - failure_summary: make sure msg is always a string (vrutkovs@redhat.com)
  - Fix flake8 errors in utils/test (vrutkovs@redhat.com)
  - Adding logic to do a full cluster restart if we are incrementing our major
    versions of ES (ewolinet@redhat.com)
  - kibana checks: use six.moves instead of ImportError (vrutkovs@redhat.com)
  - add python2-boto3 package for centos-based origin-ansible container image
    (jdiaz@redhat.com)
  - Configure Kuryr CNI daemon (mdulko@redhat.com)
  - adding ability to interact with network resources. (shawn.hurley21@gmail.com)
  - The provision_install file ends in yml not yaml! Ansible requirement
    clarification. (mbruzek@gmail.com)
  - Clean up host-local IPAM data while nodes are drained (danw@redhat.com)
  - Adding .ini to inventory_ignore_extensions (bedin@redhat.com)
  - lint issues (davis.phillips@gmail.com)
  - add vsphere examples in hosts.example (davis.phillips@gmail.com)
  - add template and vsphere.conf (davis.phillips@gmail.com)
  - add vsphere cloud providers (davis.phillips@gmail.com)
  - Fix wrong indentation (ichavero@redhat.com)
  - Fix yaml indentation (ichavero@redhat.com)
  - Add iptables rules for flannel (ichavero@redhat.com)


author: Justin Pierce <jupierce@redhat.com> 3.8.37-1
changelog:
  - Bump pyOpenSSL to 17.5.0 (rteague@redhat.com)
  - package_version check: stop looking for docker (lmeyer@redhat.com)


