# changelog

author: Iryna Shcherbina <ishcherb@redhat.com> - 2.18.4-2
changelog:
  - Fix ambiguous Python 2 dependency declarations
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Justin Pierce <jupierce@redhat.com> 3.10.0-0.63.0
changelog:
  - Bug 1586366 - Use include_tasks for dynamic task file includes
    (rteague@redhat.com)
  - Make prometheus use persistent storage by default (ironcladlou@gmail.com)
  - Make Kuryr connect to OpenShift API through LB (mdulko@redhat.com)


author: Tim Bielawa <tbielawa@redhat.com> 3.10.19-1
changelog:
  - Add max-size to docker log opts (umohnani@redhat.com)
  - Remove old service files before masking them (sdodson@redhat.com)
  - replace samples with ones from origin v3.10 (bparees@redhat.com)
  - generate_pv_pvcs_list: set claimRef for NFS volumes (vrutkovs@redhat.com)
  - Fix storageclass setting for NFS (vrutkovs@redhat.com)
  - Add openshift_docker_gc role to upgrade path (rteague@redhat.com)
  - Exclude existing masters from node list for CSR approval during node and
    master scaleup. (abutcher@redhat.com)
  - Allow installs of Node Problem Detector during upgrades (joesmith@redhat.com)
  - Increate lbaas_activation_timeout for kuryr-controller (ltomasbo@redhat.com)
  - Sync Fuse console templates (antonin@stefanutti.fr)
  - Ensure nodes created by a scale group have a Name tag (amcdermo@redhat.com)
  - Do not delete IAM cert if explicitely requested (jchaloup@redhat.com)
  - Use OPENSHIFT_CLUSTER env in OpenStack uninstall (tomas@sedovic.cz)
  - standalone etcds: make sure etcd facts are set before applying etcd config
    (vrutkovs@redhat.com)
  - Fix etcd restart commands (mgugino@redhat.com)
  - Add Fuse Console templates (antonin@stefanutti.fr)
  - Make openshift_control_plane/check_master_api_is_ready.yml generic
    (sdodson@redhat.com)
  - Wait for API availability before migrating storage, add retries
    (sdodson@redhat.com)
  - Accept client certs from node, system:admin, and bootstrap SA
    (sdodson@redhat.com)
  - Fix scalegroup upgrades so don't have to delete ASG's. (mwoodson@redhat.com)
  - Dedicated etcd nodes should not be added to oo_nodes_to_upgrade
    (vrutkovs@redhat.com)
  - Don't upgrade nodes which only have dedicated etcd (vrutkovs@redhat.com)
  - add node get-node-logs script (m.judeikis@gmail.com)
  - hardcode flexvolume path on atomic hosts (hekumar@redhat.com)
  - Sync latest content (sdodson@redhat.com)
  - Discourage use of openshift_docker_additional_registries (sdodson@redhat.com)
  - Make sure that we use rslave mount propagation (hekumar@redhat.com)
  - Update ansible code to preseve path on non-atomic hosts (hekumar@redhat.com)
  - Mark ready nodes as accepted during oc_adm_csr approval.
    (abutcher@redhat.com)
  - Add infra secgroup rules to the flat secgrp rules (ltomasbo@redhat.com)
  - Reconfigure web console after certificates were redeployed
    (vrutkovs@redhat.com)
  - Update etcd pod to 3.2.22 (sdodson@redhat.com)
  - Use openshift_is_atomic fact from delegated host (vrutkovs@redhat.com)
  - Ensure SkyDNS is enabled with Kuryr SDN (ltomasbo@redhat.com)
  - etcd: add clientAuth to server usage (rphillips@redhat.com)
  - Configure node proxy settings on bootstrapped nodes (vrutkovs@redhat.com)
  - Copying acs-engine output to know location. (kwoodson@redhat.com)
  - Add kubelet-plugins to allowed locations (hekumar@redhat.com)
  - Bug 1589134- Namespace the CRD variable to prevent collision
    (fabian@fabianism.us)
  - Gather master facts to make sure cluster_hostname gets appended to no_proxy
    list on nodes (vrutkovs@redhat.com)
  - Get acs-engine from new CI namespace (kargakis@protonmail.ch)
  - Mount kubelet plugins inside controller (hekumar@redhat.com)
  - Allowing for build artifacts to persist. (kwoodson@redhat.com)
  - Fix volume location in containarized installs (hekumar@redhat.com)
  - Add Data Grid 7.2 to OpenShift Cloud Platform (remerson@redhat.com)
  - Increase watch_retry_timeout for kuryr-daemon (mdulko@redhat.com)
  - Adding sslcacert to additional repos (craig.munro@gmail.com)
  - Update routers that are defined in openshift_hosted_routers
    (sdodson@redhat.com)
  - Correct tests used as filters (rteague@redhat.com)
  - Move os_sdn_network_plugin_name into openshift_facts (sdodson@redhat.com)
  - Fix openshift_node_config_name in bootstrap.yml. (abutcher@redhat.com)
  - Only dump oreg_url when value is defined. (kwoodson@redhat.com)
  - Variablizing vm size for azure. (kwoodson@redhat.com)
  - bug 1575903. Default ES memory to 8G (jcantril@redhat.com)
  - Add a debug statement to the image build to dump tag information.
    (kwoodson@redhat.com)
  - Remove haproxy from node package set (sdodson@redhat.com)
  - Find router pods with fully qualified prefixes during upgrade
    (sdodson@redhat.com)
  - Set `openshift_node_group_name` for the CNS nodes (tomas@sedovic.cz)
  - Persist oreg_url in node image (kargakis@protonmail.ch)
  - bump xpaas to 1.4.14 (rcernich@redhat.com)
  - Deprecate openshift_node_kubelet_args and openshift_node_labels
    (vrutkovs@redhat.com)
  - Maybe the symlink is slightly off? (sdodson@redhat.com)
  - azure: disable waagent data disk management (jminter@redhat.com)
  - Bug 1558689 - Add iproute to Dockerfile.rhel7 (rteague@redhat.com)
  - manage_node: don't add extra labels to infra/compute/master nodes
    (vrutkovs@redhat.com)
  - "Fixed ns_update var check" (erj826@bu.edu)
  - no_proxy: use 'append' to properly add a string to a list
    (vrutkovs@redhat.com)
  - openshift_aws: enabled different instance type to be used
    (mwoodson@redhat.com)
  - Updating node group mappings to use an openshift specific tag.
    (kwoodson@redhat.com)
  - Set UID,fsGroup and Linux options to cassandra RC's (ruben.vp8510@gmail.com)
  - Revert "Migrate hawkular metrics to a new namespace" (ruben.vp8510@gmail.com)
  - change from none to len of the string (davis.phillips@gmail.com)
  - Fully qualify all openshift/origin and openshift3/ose images
    (sdodson@redhat.com)
  - Add node_group_checks to openshift_node_group.yml (rteague@redhat.com)
  - Add openshift-node entry-point playbooks (rteague@redhat.com)
  - Fix invalid openshift_master_audit_config in hosts.example
    (vrutkovs@redhat.com)
  - Record etcd static pod version only if master-exec has stdout
    (vrutkovs@redhat.com)
  - upgrade: init facts on nodes so that NO_PROXY would include nodes
    (vrutkovs@redhat.com)
  - Enable container_manage_crgroup sebool (sdodson@redhat.com)
  - master config: join bootstrap settings and sync DS tasks
    (vrutkovs@redhat.com)
  - Add openshift_master_cluster_hostname to no_proxy list (vrutkovs@redhat.com)
  - Remove umount /var/lib/docker as docker-storage-setup --reset umount it
    (nakayamakenjiro@gmail.com)
  - Fix wrong path to docker storage (nakayamakenjiro@gmail.com)
  - Clean up docker-storage in a reliable mannger (nakayamakenjiro@gmail.com)
  - Fixed add_container_provider.yaml so it uses openshift_management_project
    variable name instead of set name (dluong@redhat.com)
  - Allow for overriding of the elb names to support shorter endings for the
    names (staebler@redhat.com)
  - Makes redeploy-registry-certificates consistent with
    openshift_hosted_manage_registry. (jtudelag@redhat.com)
  - - Include RHPAM templates in OpenShift release (fspolti@redhat.com)
  - upgrade: storage migrations should use 'until' to properly retry migrations
    (vrutkovs@redhat.com)
  - Standardize master restart (rteague@redhat.com)
  - Enable monitoring to scrape across namespaces (ironcladlou@gmail.com)
  - Fix to pass quoted unsafe strings (with characters like *,<,%) correctly to
    kubelet (avesh.ncsu@gmail.com)
  - Bug 1584609 - Update iptablesSyncPeriod in node-config.yaml
    (rteague@redhat.com)
  - Bug 1591186 - Skip version and sanity checks for openshift_node_group.yml
    (rteague@redhat.com)
  - registry-console: limit pods to masters (vrutkovs@redhat.com)
  - Align node startup async tasks with the ExecStartTimeout value
    (sdodson@redhat.com)
  - bug 1572493. Update default logging NS in openshift_health_checker
    (jcantril@redhat.com)
  - Fix minor indentation (rteague@redhat.com)
  - azure: pass image_name into tasks/create_blob_from_vm.yml
    (jminter@redhat.com)
  - azure: tag image as valid=true, not valid=True (jminter@redhat.com)
  - azure: don't try to print deployment failure message when there isn't one
    (jminter@redhat.com)
  - Azure: use empty dict if input image has no tags (pschiffe@redhat.com)
  - No code in openshift-ansible should be using CONFIG_FILE
    (ccoleman@redhat.com)
  - Add support for hostpath persistent volume definitions (dmsimard@redhat.com)
  - Revert "Make SDN read config file from sysconfig" (ccoleman@redhat.com)
  - Sync daemonset should start after node configmaps are created to avoid race
    conditions (vrutkovs@redhat.com)
  - Switch papr to use our new composite groups (sdodson@redhat.com)
  - fix typo to leave only one (wjiang@redhat.com)
  - Fix hostname check failure message (mgugino@redhat.com)
  - Add retries to SCC check on upgrade (rteague@redhat.com)
  - mount host signature lookaside configuration (bparees@redhat.com)
  - checks for . (erj826@bu.edu)
  - Adding etcd image variables to fix azure deployments. (kwoodson@redhat.com)
  - Add master-infra and all-in-one node-configs (sdodson@redhat.com)
  - Fix the docs, add additional .parr file description (teleyic@gmail.com)
  - Move openshift_node_group to private play (mgugino@redhat.com)
  - Don't restart dnsmasq during upgrade (rteague@redhat.com)
  - Fix ansible_service_broker role, needs openshift_facts (rteague@redhat.com)
  - Migrate HPA scale target refs in storage migration (sross@redhat.com)
  - fixes (sdodson@redhat.com)
  - Add a bit of detail about how to get configmaps during upgrade
    (sdodson@redhat.com)
  - Deploy shim scripts based on the runtime in use (sdodson@redhat.com)
  - Upgrade cri-o (sdodson@redhat.com)
  - Fix quoting (sdodson@redhat.com)
  - roles: openshift_control_plane: move docker scripts to crictl
    (runcom@redhat.com)
  - Install cri-tools even when crio isn't in use (sdodson@redhat.com)
  - suggestions (sdodson@redhat.com)
  - GlusterFS: Add GlusterFS hosts to openshift-hosted/config.yml playbook
    (jarrpa@redhat.com)
  - Add some openshift_node_group and openshift_node_group_name docs
    (sdodson@redhat.com)
  - Fix sanity_checks typos (mgugino@redhat.com)
  - Upgrade router and registry only when these are managed (vrutkovs@redhat.com)
  - [WIP] Azure: calculate input image for base and node image
    (pschiffe@redhat.com)
  - Migrate hawkular metrics to a new namespace (ruben.vp8510@gmail.com)
  - Set openshift_node_group_name for AWS hosts. (abutcher@redhat.com)
  - Device_type is deprecated for block devices. Use volume_type instead.
    (abutcher@redhat.com)
  - Fix flaky use of `oc process` (ironcladlou@gmail.com)
  - Bug 1589015 - Switch to rolling deployment for web console
    (spadgett@redhat.com)
  - Move openshift_master_manage_htpasswd into openshift_facts
    (sdodson@redhat.com)
  - Bug 1586197 - Increase async timeout (rteague@redhat.com)
  - Make the number of service catalog retries configurable (dyasny@gmail.com)
  - Remove default selector from sample inventory (tomas@sedovic.cz)
  - Check for node-group configmaps during upgrades (mgugino@redhat.com)
  - Fix the flake8 and pylint errors (tomas@sedovic.cz)
  - Add kuryr label examples to the sample inventory (tomas@sedovic.cz)
  - Remove podman from install it creates problems (sdodson@redhat.com)
  - Set openshift_node_group_name in OpenStack inventory (tomas@sedovic.cz)
  - [WIP] azure - do not tag node images as valid automatically
    (pschiffe@redhat.com)
  - Add placeholder for openshift_node_group play (mgugino@redhat.com)
  - Check for undefined node_output.results (sdodson@redhat.com)
  - Updating fluentd label and wait to be in a single shell rather than running a
    script from /tmp (ewolinet@redhat.com)
  - Add Luis Tomas to Kuryr and OpenStack owners (tomas@sedovic.cz)
  - add task to import_role (davis.phillips@gmail.com)
  - remove svc creation and master config from base tasks in vsphere cloud
    provider (davis.phillips@gmail.com)
  - azure: add no_log: true to acs-engine deploy task (jminter@redhat.com)
  - allow node config sync controller to handle multiple node labels
    (jminter@redhat.com)
  - Fix multimaster OpenStack deployment failure (tomas@sedovic.cz)
  - Force openshift_node_group_name for all nodes (mgugino@redhat.com)
  - Update ansible_service_broker_node_selector to new version
    (mgugino@redhat.com)
  - azure: always build images using ssd-backed VM (jminter@redhat.com)
  - azure: ensure cloud provider config is laid down in bootstrap node config
    (jminter@redhat.com)
  - Ensure repos only run during prerequisites.yml (mgugino@redhat.com)
  - dockergc: change image name to ose-control-plane (gscrivan@redhat.com)
  - Remove openshift_dns_ip configuration, not valid in 3.10 (sdodson@redhat.com)
  - Do not force-terminate etcd (kargakis@protonmail.ch)
  - typo (faust64@gmail.com)
  - Remove unused registry-console's imagestream (nakayamakenjiro@gmail.com)
  - Ensure packages are latest (sdodson@redhat.com)
  - Install cri-tools and podman (sdodson@redhat.com)
  - Generalized storage setup for nodes (cwilkers@redhat.com)
  - azure: format data disk for docker use (jminter@redhat.com)
  - update azure OWNERS (jminter@redhat.com)
  - Added container_manage_cgroup in order for systemd to run in pods due to
    update in selinux policy (dluong@redhat.com)


author: Tim Bielawa <tbielawa@redhat.com> 3.10.20-1
changelog:
  - Adds openshift_fs_inotify_max_user_instances to the node tuned profile.
    (jtudelag@redhat.com)
  - Make fs_inotify_max_user_watches configurable. (avesh.ncsu@gmail.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.21-1
changelog:
  - glusterfs: bind created volume to the claim (vrutkovs@redhat.com)
  - Wait for existing nodes to go Ready before approval (sdodson@redhat.com)
  - Fix ordering of etcd stop and mask (mgugino@redhat.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.23-1
changelog:
  - add firewall rules for node exporter (m.judeikis@gmail.com)
  - AWS: use vpc name instead of cluster id when creating security groups
    (cewong@redhat.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.24-1
changelog:
  - Avoid undefined variable glusterfs_heketi_user_key (sdodson@redhat.com)
  - When the node process is down, don't exit (ccoleman@redhat.com)
  - Add scaleup playbook and docs for OpenStack (tomas@sedovic.cz)
  - Fix the Neutron DNS docs (tomas@sedovic.cz)
  - Add support for OpenStack internal DNS (tomas@sedovic.cz)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.26-1
changelog:
  - Allow to autoname scale group instances (jchaloup@redhat.com)
  - re-enable 3.10 repos (m.judeikis@gmail.com)


author: Carl George <carl@george.computer> - 2.7.0-1
changelog:
  - Latest upstream rhbz#1527712
  - Drop patch1, requirements.txt does not affect final installation
  - Drop unnecessary coverage and flake8 build requirements


author: Ralph Bean <rbean@redhat.com> - 1.15.1-2
changelog:
  - Remove broken symlinks to unbundled python3-six files
    https://bugzilla.redhat.com/show_bug.cgi?id=1295015


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1.10.2-1.rhaos3.10.git095e88c
changelog:
  - bump to v1.10.2
  - built commit 095e88c
  - include rhaos3.10 in release tag
  - do not compress debuginfo with dwz to support delve debugger


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1.10.4-1.rhaos3.10.gitebaa77a
changelog:
  - bump to v1.10.4
  - remove devel and unittest subpackages - unused
  - debuginfo disabled for now, complains about %files being empty


author: Jakub Čajka <jcajka@redhat.com> - 1.8.3-1
changelog:
  - bump to 1.8.3
  - fix CVE-2017-8932
  - Resolves: rhbz#1452616, rhbz#1452241, rhbz#1457169, rhbz#1448346


author: Jakub Čajka <jcajka@redhat.com> - 1.9.1-1
changelog:
  - Rebase to 1.9.1
  - fix CVE-2017-15041 and CVE-2017-15042
  - Resolves: rhbz#1500591, rhbz#1499827, rhbz#1500587, rhbz#1448494


