# changelog

author: Troy Dawson <tdawson@redhat.com> 1.1.6-1.git.9999.9c5694f
changelog:
  - Bug 1323710: fix deploy --cancel message on subsequent calls
    (mkargaki@redhat.com)
  - Updates to the 503 application unavailable page. (sgoodwin@redhat.com)
  - Improve display of logs in web console (spadgett@redhat.com)
  - bump(github.com/openshift/source-to-image):
    641b22d0a5e7a77f7dab2b1e75f563ba59a4ec96 (rhcarvalho@gmail.com)
  - elevate privilegs when removing etcd binary store (skuznets@redhat.com)
  - Show pulling / terminated status in pods donut (spadgett@redhat.com)
  - Update the postCommit hook godoc to reflect API (ccoleman@redhat.com)
  - do not error on adding app label to objects if it exists (bparees@redhat.com)
  - Add the openshift/origin-egress-router image (danw@redhat.com)
  - remove credentials arg (aweiteka@redhat.com)
  - remove atomic registry quickstart from images dir, also hack test script
    (aweiteka@redhat.com)
  - Allow multiple routers to update route status (sross@redhat.com)
  - change default volume size (gmontero@redhat.com)
  - Bug 1322587 - NotFound error (404) when deleting layers is logged but we'll
    be continuing the execution. (maszulik@redhat.com)
  - Separate out new-app code for reuse (ccoleman@redhat.com)
  - Refactor new app and new build to use options struct (ccoleman@redhat.com)
  - use restart sec to avoid default rate limit (pweil@redhat.com)
  - Refactor start-build to use options style (ccoleman@redhat.com)
  - Tolerate local Git repositories without an origin set (ccoleman@redhat.com)
  - Add unique suffix to build post-hook containers (rhcarvalho@gmail.com)
  - The router command should keep support for hostPort (ccoleman@redhat.com)
  - UPSTREAM: 23586: don't sync deployment when pod selector is empty
    (jliggitt@redhat.com)
  - UPSTREAM: 23586: validate that daemonsets don't have empty selectors on
    creation (jliggitt@redhat.com)
  - no commit id in img name and add openshift org to image name for openshift-
    pipeline plugin extended test (gmontero@redhat.com)
  - Set service account correctly in oadm registry, deprecate --credentials
    (jliggitt@redhat.com)
  - Add tests for multiple IDPs (sgallagh@redhat.com)
  - Encode provider name when redirecting to login page (jliggitt@redhat.com)
  - Allow multiple web login methods (sgallagh@redhat.com)
  - allow pvc by default (pweil@redhat.com)
  - UPSTREAM: 23007: Kubectl shouldn't print throttling debug output
    (jliggitt@redhat.com)
  - Resolve api groups in resolveresource (jliggitt@redhat.com)
  - Improve provider selection page (jliggitt@redhat.com)
  - fix a forgotten modification : 'sti->s2i' (qilin.wang@huawei.com)
  - sort volumes for reconciliation (pweil@redhat.com)
  - Fixed string formatting for glog.Infof in image prunning
    (maszulik@redhat.com)
  - Set charset with content type (jliggitt@redhat.com)
  - bump(github.com/openshift/source-to-image):
    48e62fd57bebba14e1d0f7a40a15b65dafa5458c (cewong@redhat.com)
  - Fix 8162: project settings layout issues (admin@benjaminapetersen.me)
  - UPSTREAM: 23456: don't sync daemonsets or controllers with selectors that
    match all pods (jliggitt@redhat.com)
  - UPSTREAM: 23457: Do not track resource usage for host path volumes. They can
    contain loops. (jliggitt@redhat.com)
  - UPSTREAM: 23325: Fix hairpin mode (jliggitt@redhat.com)
  - UPSTREAM: 23019: Add a rate limiter to the GCE cloudprovider
    (jliggitt@redhat.com)
  - UPSTREAM: 23141: kubelet: send all recevied pods in one update
    (jliggitt@redhat.com)
  - UPSTREAM: 23143: Make kubelet default to 10ms for CPU quota if limit < 10m
    (jliggitt@redhat.com)
  - UPSTREAM: 23034: Fix controller-manager race condition issue which cause
    endpoints flush during restart (jliggitt@redhat.com)


author: Troy Dawson <tdawson@redhat.com> 1.2.0-1
changelog:
  - F5: Cleanup mockF5.close() calls in tests (miciah.masters@gmail.com)
  - o Add locking around ops that change state. Its better to go   lockless
    eventually and use a "shadow" (cloned) copy of the   config when we do a
    reload. o Fixes as per @smarterclayton review comments. (smitram@gmail.com)
  - policy unsafe proxy requests separately (jliggitt@redhat.com)
  - Add login csrf prompts (jliggitt@redhat.com)
  - Limit queryparam auth to websockets (jliggitt@redhat.com)
  - UPSTREAM: 24924: fix PrepareForUpdate bug for HPA (jliggitt@redhat.com)
  - UPSTREAM: 24924: fix PrepareForUpdate bug for PV and PVC
    (jliggitt@redhat.com)
  - UPSTREAM: 25369: Return 'too old' errors from watch cache via watch stream
    (jliggitt@redhat.com)
  - Import from repository doesn't panic (miminar@redhat.com)
  - All image references should be using full semantic version
    (ccoleman@redhat.com)
  - debug for ext test failures on jenkins (gmontero@redhat.com)
  - Revert "Retry import to the docker hub on 401" (ccoleman@redhat.com)
  - debug for failures on jenkins (gmontero@redhat.com)
  - force pull fixes / debug (gmontero@redhat.com)
  - Change the context being used when Stat-ing remote registry
    (maszulik@redhat.com)
  - Update 1 - run to the entire interval (ccoleman@redhat.com)
  - Retry 401 unauthorized responses from registries within a window
    (ccoleman@redhat.com)
  - Exclude deployment tests and set a perf test to serial (ccoleman@redhat.com)
  - Add client debugging for legacy dockerregistry code (ccoleman@redhat.com)
  - moved jUnit report for test-cmd to be consistent (skuznets@redhat.com)
  - remove trailing = from set trigger example (bparees@redhat.com)
  - haproxy obfuscated internal IP in routing cookie (pcameron@redhat.com)
  - Example CLI command (ccoleman@redhat.com)
  - Add summary status message to network test runner (marun@redhat.com)
  - Revert "oc status must show monopods" (ccoleman@redhat.com)
  - Refactor build strategy permissions into distinct roles (jliggitt@redhat.com)
  - dind: Clean up check for ready nodes (marun@redhat.com)
  - Cleanup network test runner's use of conditionals (marun@redhat.com)
  - Copy config to dev cluster master's local storage (marun@redhat.com)
  - Cleanup network test runner error handling (marun@redhat.com)
  - Minimize image builds by the network test runner (marun@redhat.com)
  - Improve network test runner error handling (marun@redhat.com)
  - Reduce log verbosity of network test runner (marun@redhat.com)
  - Remove redundant extended networking sanity tests (marun@redhat.com)
  - Make /etc/origin /etc/origin/master /etc/origin/node 0700
    (sdodson@redhat.com)
  - Fix precision of cpu to millicore and memory to bytes (decarr@redhat.com)
  - UPSTREAM: 24208: Honor starting resourceVersion in watch cache
    (agoldste@redhat.com)
  - [RPMS] Switch requires from docker-io to docker (sdodson@redhat.com)
  - extended: Allow to focus on particular tests (miminar@redhat.com)
  - Abuse deployments with extended test (ccoleman@redhat.com)
  - UPSTREAM: 23435: Fixed mounting with containerized kubelet
    (jsafrane@redhat.com)
  - dind: only wait for Ready non-sdn nodes (marun@redhat.com)
  - Ensure stable route admission (marun@redhat.com)
  - UPSTREAM: 23769: Ensure volume GetCloudProvider code uses cloud config
    (jliggitt@redhat.com)
  - UPSTREAM: 21140: e2e test for dynamic provisioning. (jliggitt@redhat.com)
  - UPSTREAM: 23463: add an event for when a daemonset can't place a pod due to
    insufficent resource or port conflict (jliggitt@redhat.com)
  - UPSTREAM: 23929: only include running and pending pods in daemonset should
    place calculation (jliggitt@redhat.com)
  - Update atomic registry quickstart artifacts (aweiteka@redhat.com)
  - Update font-awesome bower dependency (spadgett@redhat.com)
  - UPSTREAM: 23746: A pod never terminated if a container image registry was
    unavailable (agoldste@redhat.com)
  - fix push path in log message (bparees@redhat.com)
  - Bump fontawesome to 4.6.1 (jforrest@redhat.com)
  - Fix unit tests (ironcladlou@gmail.com)
  - Prevent concurrent deployer pod creation (ironcladlou@gmail.com)
  - Enforce overview scaling rules for deployments without a service
    (spadgett@redhat.com)
  - Added provisioning flag and refactored VolumeConfig struct names
    (mturansk@redhat.com)
  - Fix bindata diff for new font-awesome release (spadgett@redhat.com)
  - bump(github.com/openshift/openshift-sdn):
    9f1f60258fcef6f0ef647a75a8754bc80779c065 (rpenta@redhat.com)
  - Fix e2e scc race (agoldste@redhat.com)
  - UPSTREAM: 23894: Should not fail containers on OOM score adjust
    (ccoleman@redhat.com)
  - Add ability to specify allowed CNs for RequestHeader proxy client cert
    (jliggitt@redhat.com)
  - bump(k8s.io/kubernetes): 114a51dfbc43a8bcf07db1774a20e05d560e34b0
    (deads@redhat.com)
  - Modify pullthrough import-image use case to use our cli framework
    (maszulik@redhat.com)
  - add system:image-auditor (deads@redhat.com)
  - deployer controller: ensure phase direction (mkargaki@redhat.com)
  - Improve wording in sample-app README (rhcarvalho@gmail.com)
  - Wrap login requests to clear in-memory session (jliggitt@redhat.com)
  - Grant use of the NFS plugin in hostmount-anyuid SCC, to enable NFS recycler
    pods to run (pmorie@gmail.com)
  - made hack/test-go handle compilation errors better (skuznets@redhat.com)
  - Enable etcd cache for k8s resources (jliggitt@redhat.com)
  - UPSTREAM: 24048: Use correct defaults when binding apiserver flags
    (jliggitt@redhat.com)
  - UPSTREAM: 24008: Make watch cache behave like uncached watch
    (jliggitt@redhat.com)
  - Getting docker logs always to debug issue 8399 (maszulik@redhat.com)
  - deployment controller: cancel deployers on new cancelled deployments
    (mkargaki@redhat.com)
  - Travis can't install go vet anymore (ccoleman@redhat.com)
  - Add debugs for CPU Quota flake (mrunalp@gmail.com)
  - UPSTREAM: 23793: Make ConfigMap volume readable as non-root
    (pmorie@gmail.com)
  - Getting docker logs always to debug issue 8399 (maszulik@redhat.com)
  - ProjectRequestLimit plugin: ignore projects in terminating state
    (cewong@redhat.com)
  - Support focus arguments on both conformance and core (ccoleman@redhat.com)
  - Bug 1324437: show cancel as subordinate to non-terminating phases
    (mkargaki@redhat.com)
  - BZ_1324273: Make BC edit form dirty when deleting Key-Value pair
    (jhadvig@redhat.com)
  - Add a conformance test for extended (ccoleman@redhat.com)
  - Always set the Cmd for source Docker image (mfojtik@redhat.com)
  - stylistic/refactoring changes for test/extended/cmd to use os::cmd
    (skuznets@redhat.com)
  - UPSTREAM: 23445: Update port forward e2e for go 1.6 (agoldste@redhat.com)
  - Naming inconsistancy fix (jhadvig@redhat.com)
  - added jUnit XML publishing step to exit trap (skuznets@redhat.com)
  - added support for os::cmd parsing to junitreport (skuznets@redhat.com)
  - refactored nested suites builder (skuznets@redhat.com)
  - configure test-cmd to emit parsable output for jUnit (skuznets@redhat.com)
  - install iproute since the origin-base image dose not contain ip command
    (bmeng@redhat.com)
  - Change RunOnce duration plugin to act as a limit instead of override
    (cewong@redhat.com)
  - Make infra and shared resource namespaces immortal (jliggitt@redhat.com)
  - UPSTREAM: 23883: Externalize immortal namespaces (jliggitt@redhat.com)
  - add conformance tag to some extended build tests (bparees@redhat.com)
  - add slow tag to jenkins plugin extended test (gmontero@redhat.com)
  - Error on node startup using perFSGroup quota, but fs mounted with noquota.
    (dgoodwin@redhat.com)


author: Troy Dawson <tdawson@redhat.com>
changelog:
  - bump inotify watches (jeder@redhat.com)
  - Use scale subresource for DC scaling in web console (spadgett@redhat.com)
  - Fixing typos (dmcphers@redhat.com)
  - Disambiguate origin generators (jliggitt@redhat.com)
  - Add explicit emptyDir volumes where possible (ironcladlou@gmail.com)
  - Resource discovery integration test (jliggitt@redhat.com)
  - UPSTREAM: <carry>: v1beta3: ensure only v1 appears in discovery for legacy
    API group (jliggitt@redhat.com)
  - Use strategy proxy setting for script download (cewong@redhat.com)
  - bump(github.com/openshift/source-to-image):
    2c0fc8ae6150b27396dc00907cac128eeda99b09 (cewong@redhat.com)
  - Deployment tests should really be disabled in e2e (ccoleman@redhat.com)
  - fix useragent for SA (deads@redhat.com)
  - Fix e2e test's check for determining that the router is up - wait for the
    healthz port to respond with success - HTTP status code 200. Still need to
    check for router pod to be born. (smitram@gmail.com)
  - tweak jenkins job to test unrelased versions of the plugin
    (gmontero@redhat.com)
  - Fix oadm diagnostic (master-node check for ovs plugin) to retrieve the list
    of nodes running on the same machine as master. (avagarwa@redhat.com)
  - E2e deployments filter is incorrect (ccoleman@redhat.com)
  - scc volumes support (pweil@redhat.com)
  - UPSTREAM: <carry>: scc volumes support (pweil@redhat.com)
  - UPSTREAM: <carry>: v1beta3 scc volumes support (pweil@redhat.com)
  - Reorder the debug pod name (ccoleman@redhat.com)
  - use a first class field definition to identify scratch images
    (bparees@redhat.com)
  - Remove project admin/edit ability to create daemonsets (jliggitt@redhat.com)
  - Bug 1314270: force dc reconcilation on canceled deployments
    (mkargaki@redhat.com)
  - controller: refactor deployer controller interfaces (mkargaki@redhat.com)
  - cli: oc process should print errors to stderr (stefw@redhat.com)
  - use emptydir for sample-app volumes (bparees@redhat.com)
  - fix extended cmd.sh to handle faster importer (deads@redhat.com)
  - #7976 : Initialize Binary source to an empty default state if type but no
    value set (for API v1) (roland@jolokia.org)
  - Atomic registry quickstart image (aweiteka@redhat.com)
  - Fix bug where router reload fails to run lsof - insufficient permissions with
    the hostnetwork scc. Reduce the lsof requirement since we now check for error
    codes [non zero means bind errors] and have a healthz check as a sanity
    check. Plus fixes as per @smarterclayton review comments. (smitram@gmail.com)
  - Include branded header within <noscript> message. (sgoodwin@redhat.com)
  - Better error message when JavaScript is disabled (jawnsy@redhat.com)
  - Simplify synthetic skips so that no special chars are needed Isolate the
    package skipping into a single function. (jay@apache.org)
  - add volume prereq to db template descriptions (bparees@redhat.com)
  - Fix new-app template search with multiple matches (cewong@redhat.com)
  - UPSTREAM: <carry>: Suppress aggressive output of warning
    (ccoleman@redhat.com)
  - hardcode build name to expect instead of getting it from start-build output
    (bparees@redhat.com)
  - New skips in extended tests (ccoleman@redhat.com)
  - removed binary etcd store from test-cmd artfacts (skuznets@redhat.com)
  - Fix resolver used for --image-stream param, annotation searcher output
    (cewong@redhat.com)
  - UPSTREAM: 23065: Remove gce provider requirements from garbage collector test
    (tiwillia@redhat.com)
  - Bindata change for error with quotes on project 404 (jforrest@redhat.com)
  - Fixed error with quotes (jlam@snaplogic.com)
  - Escape ANSI color codes in web console logs (spadgett@redhat.com)
  - refactor to not use dot imports for heredoc (skuznets@redhat.com)
  - Bug 1320335: Fix quoting for mysql probes (mfojtik@redhat.com)
  - Add client utilities for iSCSI and Ceph. (jsafrane@redhat.com)
  - loosen exec to allow SA checks for privileges (deads@redhat.com)
  - Allow perFSGroup local quota in config on first node start.
    (dgoodwin@redhat.com)
  - Ensure ingress host matches route host (marun@redhat.com)
  - use a max value of 92233720368547 for cgroup values (bparees@redhat.com)
  - Revert "temporarily disable cgroup limits on builds" (bparees@redhat.com)
  - Enable extensions storage for batch/autoscaling (jliggitt@redhat.com)
  - Add navbar-utility-mobile to error.html Fixes
    https://github.com/openshift/origin/issues/8198 (sgoodwin@redhat.com)
  - Add /dev to node volumes (sdodson@redhat.com)
  - Install e2fsprogs and xfsprogs into base image (sdodson@redhat.com)
  - oc debug is not defaulting to TTY (ccoleman@redhat.com)
  - UPSTREAM: revert: d54ed4e: 21373: kubelet: reading cloudinfo from cadvisor
    (deads@redhat.com)
  - temporarily disable cgroup limits on builds (bparees@redhat.com)
  - test/extended/images/mongodb_replica: add tests for mongodb replication
    (vsemushi@redhat.com)
  - update generated code and docs (pweil@redhat.com)
  - UPSTREAM: 22857: partial - ensure DetermineEffectiveSC retains the container
    setting for readonlyrootfs (pweil@redhat.com)
  - UPSTREAM: <carry>: v1beta3 scc - read only root file system support
    (pweil@redhat.com)
  - UPSTREAM: <carry>: scc - read only root file system support
    (pweil@redhat.com)
  - UPSTREAM: 23279: kubectl: enhance podtemplate describer (mkargaki@redhat.com)
  - oc: add volume info on the dc describer (mkargaki@redhat.com)
  - Fix typo (tdawson@redhat.com)
  - oc status must show monopods (ffranz@redhat.com)
  - Verify yum installed rpms (tdawson@redhat.com)
  - remove dead cancel code (bparees@redhat.com)
  - Integration tests should use docker.ClientFromEnv() (ccoleman@redhat.com)
  - Move upstream (ccoleman@redhat.com)
  - hack/test-cmd.sh races against deployment controller (ccoleman@redhat.com)
  - Enable the pod garbage collector (tiwillia@redhat.com)
  - make who-can use resource arg format (deads@redhat.com)
  - Bug in Kube API version group ordering (ccoleman@redhat.com)
  - Fix precision displaying percentages in quota chart tooltip
    (spadgett@redhat.com)
  - updated artifacts to contain docker log and exlucde etcd data dir
    (skuznets@redhat.com)
  - Mount /var/log into node container (sdodson@redhat.com)
  - Hide extra close buttons for task lists (spadgett@redhat.com)
  - Test refactor (ccoleman@redhat.com)
  - Disable failing upstream test (ccoleman@redhat.com)
  - In the release target, only build linux/amd64 (ccoleman@redhat.com)
  - Pod diagnostic check is not correct in go 1.6 (ccoleman@redhat.com)
  - Update Dockerfile for origin-release to use Go 1.6 (ccoleman@redhat.com)
  - Update build-go.sh to deal with Go 1.6 (ccoleman@redhat.com)
  - Suppress Go 1.6 error on -X flag (ccoleman@redhat.com)
  - Bug 1318537 - Add warning when trying to import non-existing tag
    (maszulik@redhat.com)
  - Bug 1310062 - Fallback to http if status code is not 2xx/3xx when deleting
    layers. (maszulik@redhat.com)
  - Log the reload output for admins in the router logs (ccoleman@redhat.com)
  - Add RunOnceDuration and ProjectRequestLimit plugins to default plugin chains
    (cewong@redhat.com)
  - Add kube component config tests, disable /logs on master, update kube-proxy
    init (jliggitt@redhat.com)
  - Set terminal max-width to 100% for mobile (spadgett@redhat.com)
  - Hide the java link if the container is not ready (slewis@fusesource.com)
  - Support limit quotas and scopes in UI (spadgett@redhat.com)
  - Add test for patch+conflicts (jliggitt@redhat.com)
  - Removed the stray line that unconditionally forced on the SYN eater.
    (bbennett@redhat.com)
  - Remove large, unnecessary margin from bottom of create forms
    (spadgett@redhat.com)
  - Use smaller log font size for mobile (spadgett@redhat.com)
  - Adjust -webkit-scrollbar width and log-scroll-top affixed position. Fixes
    https://github.com/openshift/origin/issues/7963 (sgoodwin@redhat.com)
  - UPSTREAM: 23145: Use versioned object when computing patch
    (jliggitt@redhat.com)
  - Handle new volume source types on web console (ffranz@redhat.com)
  - Show consistent pod status in web console as CLI (spadgett@redhat.com)
  - PVCs should not be editable once bound (ffranz@redhat.com)
  - bump(github.com/openshift/source-to-image):
    625b58aa422549df9338fdaced1b9444d2313a15 (rhcarvalho@gmail.com)
  - bump(github.com/openshift/openshift-sdn):
    72d9ab84f4bf650d1922174e6a90bd06018003b4 (dcbw@redhat.com)
  - Reworked image quota (miminar@redhat.com)
  - Fix certificate display on mobile (spadgett@redhat.com)
  - Don't show chromeless log link if log not available (spadgett@redhat.com)
  - Include container ID in glog message (rhcarvalho@gmail.com)
  - Ignore default security context constraints when running on kube
    (decarr@redhat.com)
  - UPSTREAM: 21373: kubelet: reading cloudinfo from cadvisor (deads@redhat.com)
  - fix typo in db template readme (bparees@redhat.com)
  - oc: more status fixes (mkargaki@redhat.com)
  - use transport defaults (deads@redhat.com)
  - UPSTREAM: 23003: support CIDRs in NO_PROXY (deads@redhat.com)
  - Don't autofocus catalog filter input (spadgett@redhat.com)
  - Add e2fsprogs to base image (sdodson@redhat.com)
  - pkg: cmd: cli: cmd: startbuild: close response body (runcom@redhat.com)
  - UPSTREAM: 22852: Set a missing namespace on objects to admit
    (miminar@redhat.com)
  - Bump kubernetes-container-terminal to 0.0.11 (spadgett@redhat.com)
  - Handle fallback to docker.io for 1.9 docker, which uses docker.io in
    .docker/config.json (maszulik@redhat.com)
  - oc: plumb error writer in oc edit (mkargaki@redhat.com)
  - UPSTREAM: 22634: kubectl: print errors that wont be reloaded in the editor
    (mkargaki@redhat.com)
  - Include all extended tests in a single binary (marun@redhat.com)
  - Update swagger spec (jliggitt@redhat.com)
  - bump(k8s.io/kubernetes): 4a3f9c5b19c7ff804cbc1bf37a15c044ca5d2353
    (jliggitt@redhat.com)
  - bump(github.com/google/cadvisor): 546a3771589bdb356777c646c6eca24914fdd48b
    (jliggitt@redhat.com)
  - add debug when extended build tests fail (bparees@redhat.com)
  - clean up jenkins master/slave parameters (bparees@redhat.com)
  - Web console: fix problem balancing create flow columns (spadgett@redhat.com)
  - Tooltip for multiple ImageSources in BC editor (jhadvig@redhat.com)
  - fix two broken extended tests (bparees@redhat.com)
  - Bug fix so that table-mobile will word-wrap: break-word (rhamilto@redhat.com)
  - Add preliminary quota support for emptyDir volumes on XFS.
    (dgoodwin@redhat.com)
  - Bump unit test timeout (jliggitt@redhat.com)
  - updated tmpdir for e2e-docker (skuznets@redhat.com)
  - Load environment files in containerized systemd units (sdodson@redhat.com)
  - Interesting changes for rebase (jliggitt@redhat.com)
  - Extended test namespace creation fixes (jliggitt@redhat.com)
  - Mechanical changes for rebase (jliggitt@redhat.com)
  - fix credential lookup for authenticated image stream import
    (jliggitt@redhat.com)
  - Generated docs, conversions, copies, completions (jliggitt@redhat.com)
  - UPSTREAM: <carry>: Allow overriding default generators for run
    (jliggitt@redhat.com)
  - UPSTREAM: 22921: Fix job selector validation and tests (jliggitt@redhat.com)
  - UPSTREAM: 22919: Allow starting test etcd with http (jliggitt@redhat.com)
  - Stack definition lists only at narrower widths (spadgett@redhat.com)
  - Disable externalIP by default (ccoleman@redhat.com)
  - oc: warn about missing stream when deleting a tag (mkargaki@redhat.com)
  - Revert "platformmanagement_public_425 - add quota information to oc describe
    is" (miminar@redhat.com)
  - implemented miscellaneous iprovements for test-cmd (skuznets@redhat.com)
  - Handle env vars that use valueFrom (jhadvig@redhat.com)
  - UPSTREAM: 22917: Decrease verbosity of namespace controller trace logging
    (jliggitt@redhat.com)
  - UPSTREAM: 22916: Correctly identify namespace subresources in GetRequestInfo
    (jliggitt@redhat.com)
  - UPSTREAM: 22914: Move TestRuntimeCache into runtime_cache.go file
    (jliggitt@redhat.com)
  - UPSTREAM: 22913: register internal types with scheme for reference unit test
    (jliggitt@redhat.com)
  - UPSTREAM: 22910: Decrease parallelism in deletecollection test, lengthen test
    etcd certs (jliggitt@redhat.com)
  - UPSTREAM: 22875: Tolerate multiple registered versions in a single group
    (jliggitt@redhat.com)
  - UPSTREAM: 22877: mark filename flags for completions (ffranz@redhat.com)


author: Troy Dawson <tdawson@redhat.com> 1.2.1
changelog:
  - UPSTREAM: 28966: Fix watch cache filtering (jliggitt@redhat.com)
  - Document things, remove /usr/bin/docker mount from contrib systemd unit
    (sdodson@redhat.com)
  - chroot docker to the rootfs (sdodson@redhat.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.48-1
changelog:
  - Ensure dnsmasq is restarted during upgrades (mgugino@redhat.com)
  - GCP upgrade: don't exclude nodes with tag_ocp-bootstrap (vrutkovs@redhat.com)
  - GCP upgrade: don't exclude nodes with tag_ocp-bootstrap (vrutkovs@redhat.com)
  - GlusterFS: Fix registry.yml playbook (jarrpa@redhat.com)
  - make sure `openshift_use_nsx` is always defined during 3.9 -> 3.10 upgrade
    (vrutkovs@redhat.com)
  - Add EAP 7.2.beta to v3.10 add [Tech Preview] to template names drop AMQ 7
    until an image is available (ken@zaptillion.net)
  - openshift_storage_nfs_lvm: fix with_sequence (jfchevrette@gmail.com)
  - Refactor image health checks (mgugino@redhat.com)
  - [3.10] ensure atomic and skopeo are installed (mgugino@redhat.com)
  - Refactor csr approval for client certs ignore ready (mgugino@redhat.com)
  - Update openshift ca redeploy to use correct node client-ca
    (rteague@redhat.com)
  - Retry our etcd health check (sdodson@redhat.com)
  - Collect provider facts only if cloudprovider is set (vrutkovs@redhat.com)
  - [release-3.10]Do not stop and delete openvswitch when NSX is used #8015 and
    - Set etcd facts necessary for etcd scaleup (rteague@redhat.com)
  - Filter openshift_cloudprovider_openstack_blockstorage_ignore_volume_az to
    bool (alberto.rodriguez.peon@cern.ch)
  - Use true/false instead of yes/no (alberto.rodriguez.peon@cern.ch)
  - Allow to configure BlockStorage.ignore-volume-az for Openstack Cloud Provider
    (alberto.rodriguez.peon@cern.ch)
  - GlusterFS: Tweak groups for external config (jarrpa@redhat.com)
  - Configure repositories if RHEL (e.minguez@gmail.com)
  - Run the kube-proxy once per cluster for Calico (mleung975@gmail.com)
  - Add separate Calico etcd (mleung975@gmail.com)
  - Update playbooks for Calico in OpenShift 3.10 (mleung975@gmail.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.50-1
changelog:
  - Update main.yml (sheldyakov@tutu.ru)
  - Ensure glusterfs host groups are correct for registry play
    (mgugino@redhat.com)
  - Ensure atomic hosts prepull node image during pre-upgrade
    (mgugino@redhat.com)
  - Switch openshift_crio_enable_docker_gc default to False (rteague@redhat.com)
  - Add default node groups to support running cri-o runtime (rteague@redhat.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.51-1
changelog:
  - Fix for recent az changes. (kwoodson@redhat.com)
  - Fix S3 storage class path (sarumuga@redhat.com)
  - Move the cluster-cidr assignment to the correct configs (mleung975@gmail.com)
  - fix ca cert deploy for 3.10. addresses
    https://bugzilla.redhat.com/show_bug.cgi?id=1585978 (judd@newgoliath.com)
  - Don't install NM on atomic systems (vrutkovs@redhat.com)
  - test/ci: setup network manager (vrutkovs@redhat.com)
  - test ci: add an option to terminate VMs instead of stopping
    (vrutkovs@redhat.com)
  - Rework test CI (vrutkovs@redhat.com)
  - Bump Data Grid to version 1.1.1 (osni.oliveira@redhat.com)
  - lib_utils_oo_oreg_image preserve path component (jkupfere@redhat.com)
  - Fix etcd scaleup playbook (rteague@redhat.com)
  - Add 3 retries around all image stream create/replace (sdodson@redhat.com)
  - Add support for ak/orgid at uninstall (e.minguez@gmail.com)
  - Support ak/orgid and user/password (e.minguez@gmail.com)
  - Add calico-pull-secret (mleung975@gmail.com)
  - Add retry to openstack heat stack create (tzumainn@redhat.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.52-1
changelog:
  - Replace 'command chmod' with 'file mode=...' (vrutkovs@redhat.com)
  - Add CI scripts in hack/ (vrutkovs@redhat.com)
  - Start only the ovsdb so we can add the config safely (bbennett@redhat.com)
  - Remove blank space from Openstack uninstall playbook (juriarte@redhat.com)
  - Add a new dockerfile to use in CI (vrutkovs@redhat.com)
  - Add new package which contains test playbooks (vrutkovs@redhat.com)
  - Bug 1554293 - logging-eventrouter event not formatted correctly in
    Elasticsearch when using MUX (nhosoi@redhat.com)
  - test/ci: set expirationDate flag for CI namespace garbage collector
    (vrutkovs@redhat.com)
  - Annotate nodes with md5sum of the applied config (vrutkovs@redhat.com)
  - Use `oo_first_master` when copying admin.kubeconfig (vrutkovs@redhat.com)
  - Fix default mapping of infra nodes (vrutkovs@redhat.com)
  - Backport setup_scale_group_facts changes from master (vrutkovs@redhat.com)
  - Add proper liveness and readiness checks for Calico 3.2 (mleung975@gmail.com)
  - openshift_prometheus: don't try to install node exporter when uninstalling
    prom (pgier@redhat.com)
  - Update openshift_master.py (crmarquesjc@gmail.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.53-1
changelog:
  - Move etcdctlv2 fact setting to its own include (rteague@redhat.com)
  - Remove exclude-bootstrapped logic (mgugino@redhat.com)
  - Remove r_etcd_common_skip_command_shim reference (rteague@redhat.com)
  - Update installer_checkpoint plugin to handle empty stats (rteague@redhat.com)
  - Fix etcd scaleup on standalone hosts (rteague@redhat.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.54-1
changelog:
  - Dockerfile: install ansible 2.6 (vrutkovs@redhat.com)
  - Modify sync pod to check for KUBELET_HOSTNAME_OVERRIDE (mgugino@redhat.com)
  - Replace openshift.node.nodename with l_kubelet_node_name (mgugino@redhat.com)
  - Fail on openshift_hostname defined; add openshift_kubelet_name_override
    (mgugino@redhat.com)
  - Atomic upgrade: ensure /etc/origin/kubelet-plugins exists
    (vrutkovs@redhat.com)
  - Dockerfile: install ansible 2.4 (vrutkovs@redhat.com)
  - Place openshift_kubelet_name_override file (mgugino@redhat.com)
  - Add missing option in Openstack documentation and sample file.
    (juriarte@redhat.com)
  - unmount just before removing (rmeggins@redhat.com)
  - Update Fuse templates with 7.1 release (antonin@stefanutti.fr)
  - test/ci: ensure AWS instances have public hostname (vrutkovs@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.4.38-1
changelog:
  - Make both backup and upgrade optional (sdodson@redhat.com)
  - [upgrades] Upgrade etcd by default (sdodson@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.4.39-1
changelog:
  - Add master config hook for 3.4 upgrade and fix facts ordering for config hook
    run. (abutcher@redhat.com)
  - The next registry.access.redhat.com/rhel7/etcd image will be 3.0.15
    (sdodson@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.4.42-1
changelog:
  - Don't upgrade etcd on atomic host, ever. (sdodson@redhat.com)
  - Update CFME template to point to GA build (simaishi@redhat.com)
  - Don't upgrade etcd on atomic host, ever. (sdodson@redhat.com)
  - Add templates for CFME Beta pod images (simaishi@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.4.53-1
changelog:
  - Revert "Deprecate node 'evacuation' with 'drain'" (sdodson@redhat.com)
  - Re-add when condition which was removed mistakenly in #3036
    (maszulik@redhat.com)
  - Fix jsonpath expected output when checking registry volume secrets
    (maszulik@redhat.com)
  - logging-deployer pull fixes from origin-aggregated-logging/#317
    (sdodson@redhat.com)
  - Don't upgrade etcd on atomic host, ever. (sdodson@redhat.com)
  - Fix jsonpath expected output when checking registry volume secrets
    (maszulik@redhat.com)
  - Enable repos defined in openshift_additional_repos by default
    (sdodson@redhat.com)
  - Hush the sudo privs check in oo-installer (tbielawa@redhat.com)
  - Add future versions to openshift_facts (ccoleman@redhat.com)
  - Cast openshift_enable_origin_repo to bool. (abutcher@redhat.com)
  - Update CFME template to point to GA build (simaishi@redhat.com)
  - Add templates for CFME Beta pod images (simaishi@redhat.com)
  - Add osnl_volume_reclaim_policy variable to nfs_lvm role
    (ando.roots@bigbank.ee)
  - remove duplicate filter name and oo_pdb (jdetiber@redhat.com)
  - remove old Ops tooling (jdetiber@redhat.com)
  - enable pip cache for travis (jdetiber@redhat.com)
  - python3 support, add tox for better local testing against multiple python
    versions (jdetiber@redhat.com)
  - modify_yaml: handle None value during update. (abutcher@redhat.com)
  - Update the openshift-certificate-expiry README to reflect latest changes
    (tbielawa@redhat.com)
  - Deprecate node 'evacuation' with 'drain' (tbielawa@redhat.com)
  - Add master config hook for 3.4 upgrade and fix facts ordering for config hook
    run. (abutcher@redhat.com)
  - The next registry.access.redhat.com/rhel7/etcd image will be 3.0.15
    (sdodson@redhat.com)
  - [uninstall] Remove excluder packages (sdodson@redhat.com)
  - Check embedded etcd certs now, too (tbielawa@redhat.com)
  - Include 'total' and 'ok' in check results (tbielawa@redhat.com)
  - Fix access_modes initialization (luis.fernandezalvarez@epfl.ch)
  - Updated OpenShift Master iptables rules (rteague@redhat.com)
  - YAML Linting (rteague@redhat.com)
  - Make both backup and upgrade optional (sdodson@redhat.com)
  - [upgrades] Upgrade etcd by default (sdodson@redhat.com)
  - upgrades - Fix logic error about when to backup etcd (sdodson@redhat.com)
  - Limit node certificate SAN to node hostnames/ips. (abutcher@redhat.com)
  - Make 'cover-erase' a config file setting. Move VENT target to pre-req for all
    ci-* targets (tbielawa@redhat.com)
  - Fixes to 'make ci' (tbielawa@redhat.com)
  - Resolved lint issues (rteague@redhat.com)
  - Minimum Ansible version check (rteague@redhat.com)
  - Removed verify_ansible_version playbook refs (rteague@redhat.com)
  - Fix coverage not appending new data (tbielawa@redhat.com)
  - Drop 3.2 upgrade playbooks. (dgoodwin@redhat.com)
  - Silence warnings when using rpm directly (dag@wieers.com)
  - Silence warnings when using rpm directly (dag@wieers.com)
  - Silence warnings when using rpm directly (dag@wieers.com)
  - Remove Hostname from 1.1 and 1.2 predicates (jdetiber@redhat.com)
  - Properly handle x.y.z formatted versions for openshift_release
    (jdetiber@redhat.com)
  - etcd_upgrade: Simplify package installation (sdodson@redhat.com)
  - Speed up 'make ci' and trim the output (tbielawa@redhat.com)
  - add comments and remove debug code (jdetiber@redhat.com)
  - Pre-pull master/node/ovs images during upgrade. (dgoodwin@redhat.com)
  - Handle updating of scheduler config during upgrade (jdetiber@redhat.com)
  - Fix templating (jdetiber@redhat.com)
  - test updates (jdetiber@redhat.com)
  - Always install latest etcd for containerized hosts (sdodson@redhat.com)
  - etcd_upgrade : Use different variables for rpm vs container versions
    (sdodson@redhat.com)
  - Switch back to using etcd rather than etcd3 (sdodson@redhat.com)
  - node_dnsmasq - restart dnsmasq if it's not currently running
    (sdodson@redhat.com)
  - Conditionalize master config update for admission_plugin_config.
    (abutcher@redhat.com)
  - upgrade_control_plane.yml: systemd_units.yaml nees the master facts
    (mchappel@redhat.com)
  - openshift-master/restart : use openshift.common.hostname instead of
    inventory_hostname (mchappel@redhat.com)
  - Update scheduler predicate/priorities vars (jdetiber@redhat.com)
  - fix tags (jdetiber@redhat.com)
  - openshift_node_dnsmasq - Remove strict-order option from dnsmasq
    (sdodson@redhat.com)
  - Fix metricsPublicURL only being set correctly on first master.
    (dgoodwin@redhat.com)
  - Explictly set etcd vars for byo scaleup (smunilla@redhat.com)
  - Cleanup ovs file and restart docker on every upgrade. (dgoodwin@redhat.com)
  - Sync latest image stream and templates for v1.3 and v1.4 (sdodson@redhat.com)
  - xpaas v1.3.5 (sdodson@redhat.com)
  - Ansible version check update (tbielawa@redhat.com)
  - allow 'latest' origin_image_tag (sjenning@redhat.com)
  - Remove duplicate when key (rteague@redhat.com)
  - refactor handling of scheduler defaults (jdetiber@redhat.com)
  - update tests and flake8/pylint fixes (jdetiber@redhat.com)
  - fix tagging (jdetiber@redhat.com)
  - do not report changed for group mapping (jdetiber@redhat.com)
  - fix selinux issues with etcd container (dusty@dustymabe.com)
  - etcd upgrade playbook is not currently applicable to embedded etcd installs
    (sdodson@redhat.com)
  - Fix invalid embedded etcd fact in etcd upgrade playbook.
    (dgoodwin@redhat.com)
  - Gracefully handle OpenSSL module absence (misc@redhat.com)
  - Refactored to use Ansible systemd module (rteague@redhat.com)
  - Updating docs for Ansible 2.2 requirements (rteague@redhat.com)
  - Fix the list done after cluster creation on libvirt and OpenStack
    (lhuard@amadeus.com)
  - Set nameservers on DHCPv6 event (alexandre.lossent@cern.ch)
  - Systemd `systemctl show` workaround (rteague@redhat.com)
  - Verify the presence of dbus python binding (misc@redhat.com)
  - Update README.md (jf.cron0@gmail.com)
  - Reference master binaries when delegating from node hosts which may be
    containerized. (abutcher@redhat.com)
  - Merge kube_admission_plugin_config with admission_plugin_config
    (smunilla@redhat.com)
  - Added a BYO playbook for configuring NetworkManager on nodes
    (skuznets@redhat.com)
  - Make the role work on F25 Cloud (misc@redhat.com)
  - Make os_firewall_manage_iptables run on python3 (misc@redhat.com)
  - Modified the error message being checked for (vishal.patil@nuagenetworks.net)
  - Only run tuned-adm if tuned exists. (dusty@dustymabe.com)
  - Delegate openshift_manage_node tasks to master host. (abutcher@redhat.com)
  - Fix rare failure to deploy new registry/router after upgrade.
    (dgoodwin@redhat.com)
  - Refactor os_firewall role (rteague@redhat.com)
  - Allow ansible to continue when a node is unaccessible or fails.
    (abutcher@redhat.com)
  - Create the file in two passes, atomicly copy it over (sdodson@redhat.com)
  - Escape LOGNAME variable according to GCE rules (jacek.suchenia@ocado.com)
  - node_dnsmasq -- Set dnsmasq as our only nameserver (sdodson@redhat.com)
  - Refactor to use Ansible package module (rteague@redhat.com)
  - Allow users to disable the origin repo creation (sdodson@redhat.com)
  - Fix yum/subman version check on Atomic. (dgoodwin@redhat.com)
  - Check for bad versions of yum and subscription-manager. (dgoodwin@redhat.com)
  - Corrected syntax and typos (rteague@redhat.com)
  - Fix GCE cluster creation (lhuard@amadeus.com)
  - Optimize the cloud-specific list.yml playbooks (lhuard@amadeus.com)
  - Added ip forwarding for nuage (vishal.patil@nuagenetworks.net)
  - Add view permissions to hawkular sa (sdodson@redhat.com)
  - Use multiple '-v's when creating the metrics deployer command
    (tbielawa@redhat.com)
  - Change to allow cni deployments without openshift SDN (yfauser@vmware.com)
  - [openstack] allows timeout option for heat create stack
    (douglaskippsmith@gmail.com)
  - Add hawkular admin cluster role to management admin (fsimonce@redhat.com)
  - Prevent useless master by reworking template for master service enf file
    (jkhelil@gmail.com)
  - support 3rd party scheduler (jannleno1@gmail.com)
  - Add nuage rest server port to haproxy firewall rules. (abutcher@redhat.com)
  - storage/nfs_lvm: Also export as ReadWriteOnce (walters@verbum.org)


author: Scott Dodson <sdodson@redhat.com> 3.4.54-1
changelog:
  - Update example sync script (sdodson@redhat.com)
  - Update v1.4 content, add api-gateway (sdodson@redhat.com)
  - Support openshift_node_port_range for configuring service NodePorts
    (ccoleman@redhat.com)
  - Move role dependencies out of playbooks for openshift_master, openshift_node
    and openshift_hosted. (abutcher@redhat.com)
  - should be libvirt. :-) (zhang.wanmin@zte.com.cn)
  - Fix repo defaults (sdodson@redhat.com)
  - Use registry.access.redhat.com/rhel7/etcd instead of etcd3
    (sdodson@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.4.55-1
changelog:
  - Automatic commit of package [openshift-ansible] release [3.4.54-1].
    (sdodson@redhat.com)
  - Ensure serial certificate generation for node and master certificates.
    (abutcher@redhat.com)
  - Create individual serving cert and loopback kubeconfig for additional
    masters. (abutcher@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.4.56-1
changelog:
  - g_master_mktemp in openshift-master conflicts with
    openshift_master_certificates (rmeggins@redhat.com)
  - Use openshift.common.hostname when verifying API port available.
    (abutcher@redhat.com)
  - Add a fact to select --evacuate or --drain based on your OCP version
    (tbielawa@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.2.19-1
changelog:
  - Set become=no for etcd server certificates temporary directory.
    (abutcher@redhat.com)
  - BUILD.md lies (jmainguy@redhat.com)
  - Migrate ca.crt to ca-bundle.crt (sdodson@redhat.com)
  - Upgrade configs for protobuf support. (dgoodwin@redhat.com)
  - Fixed a bug in modify_yaml module. (dgoodwin@redhat.com)
  - Convert ansible facts callback to v2. (abutcher@redhat.com)
  - Automatic commit of package [openshift-ansible] release [3.3.8-1].
    (tdawson@redhat.com)
  - Fix little mistake in openshift_master_htpasswd_users value .
    (jmferrer@paradigmatecnologico.com)
  - Automatic commit of package [openshift-ansible] release [3.3.7-1].
    (tdawson@redhat.com)
  - Call relocated openshift-loadbalancer playbook in master scaleup.
    (abutcher@redhat.com)
  - [openshift_ca] correct check for missing CA. (abutcher@redhat.com)
  - Upgrade configs for protobuf support. (dgoodwin@redhat.com)
  - Fixed a bug in modify_yaml module. (dgoodwin@redhat.com)
  - Add 3.3 protobuf config stanzas for master/node config. (dgoodwin@redhat.com)
  - Introduce 1.3/3.3 upgrade path. (dgoodwin@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.2.20-1
changelog:
  - Enable 'NoVolumeZoneConflict' policy for scheduler (abutcher@redhat.com)
  - a-o-i: Update nosetests for ansible_ssh_user (smunilla@redhat.com)
  - move ansible_ssh_user to deployment, remove ansible_config and
    ansible_log_path (ghuang@redhat.com)
  - Labeling nodes only (ghuang@redhat.com)
  - Move storage includes up to main. (abutcher@redhat.com)
  - Support gathering ansible 2.1/2.2 system facts (abutcher@redhat.com)
  - Try/except urlparse calls. (abutcher@redhat.com)
  - with_fileglob no longer supports wildcard prefixes. (abutcher@redhat.com)
  - make the improved log formatter work with ansible 2.1 (rmeggins@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.2.21-1
changelog:
  - Support for redeploying certificates. (abutcher@redhat.com)
  - qps typo (deads@redhat.com)
  - a-o-i: Automatically Label Nodes as Infra (smunilla@redhat.com)
  - Improvements for Docker 1.10+ upgrade image nuking. (dgoodwin@redhat.com)
  - a-o-i: Restrict installed host check (smunilla@redhat.com)
  - Automatic commit of package [openshift-ansible] release [3.3.9-1].
    (tdawson@redhat.com)
  - Shutdown Docker before upgrading the rpm. (dgoodwin@redhat.com)
  - Restrict the middleware stanza contains 'registry' and 'storage' at least on
    3.3 (ghuang@redhat.com)
  - docker-registry's middleware stanza should contain 'registry' and 'storage'
    by default (ghuang@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.2.23-1
changelog:
  - a-o-i: Fix broken tests from installed hosts check (smunilla@redhat.com)
  - Update 3.2 upgrade mappings, remove 3.0 -> 3.1 mappings (sdodson@redhat.com)
  - a-o-i: fix bz#1329455 (ghuang@redhat.com)
  - Add nfs group to OSEv3:vars (sdodson@redhat.com)
  - Ensure etcd user exists in etcd_server_certificates by installing etcd.
    (abutcher@redhat.com)
  - a-o-i: Fix broken upgrades (smunilla@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.2.25-1
changelog:
  - Preserve AWS options in sysconfig files. (dgoodwin@redhat.com)
  - Fix padding on registry config (sdodson@redhat.com)
  - Mount /sys rw (sdodson@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.2.27-1
changelog:
  - Reload docker facts after upgrading docker (sdodson@redhat.com)
  - Reload units after node container service modified. (dgoodwin@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.2.28-1
changelog:
  - Fix review comments (mkumatag@in.ibm.com)
  - Remove duplicate flannel registration (mkumatag@in.ibm.com)
  - Correct flannel cert variables. (abutcher@redhat.com)
  - Link ca to ca-bundle when ca-bundle does not exist. (abutcher@redhat.com)
  - Fix flannel check (mkumatag@in.ibm.com)


author: Jenkins CD Merge Bot <tdawson@redhat.com> 3.5.51-1
changelog:
  - Copy v3 data dir when performing backup (sdodson@redhat.com)
  - unexclude excluder if it is to be upgraded and already installed
    (jchaloup@redhat.com)
  - Add external provisioners playbook starting with aws efs (mawong@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.5.53-1
changelog:
  - Cleanup comments and remove extraneous tasks (sdodson@redhat.com)
  - Store backups in /var/lib/etcd/openshift-backup (sdodson@redhat.com)
  - Updating kibana-proxy secret key for server-tls entry (ewolinet@redhat.com)


author: Jenkins CD Merge Bot <tdawson@redhat.com> 3.5.54-1
changelog:
  - tox tests: pin test requirement versions (lmeyer@redhat.com)
  - master-api: add mount for /var/log (gscrivan@redhat.com)
  - master: add mount for /var/log (gscrivan@redhat.com)


author: Jenkins CD Merge Bot <tdawson@redhat.com> 3.5.55-1
changelog:
  - Fix indentation (sdodson@redhat.com)
  - Stop all services prior to upgrading, start all services after
    (sdodson@redhat.com)
  - Adding a query for the existing docker-registry route. (kwoodson@redhat.com)
  - Removing docker-registry route from cockpit-ui. (kwoodson@redhat.com)
  - Add evaluate_groups to openshift_logging (rteague@redhat.com)
  - Updating image logic (ewolinet@redhat.com)
  - Remove check for httpd-tools and update to use docker run to build htpasswd
    file (ewolinet@redhat.com)
  - make htpasswd tasks remote actions instead of local (ewolinet@redhat.com)
  - Also fix logging (sdodson@redhat.com)
  - Fix trailing ) (sdodson@redhat.com)
  - tox tests: pin test requirement versions (lmeyer@redhat.com)
  - Fix default image tag for enterprise (sdodson@redhat.com)
  - Deleting fluentd pods after DS patching to ensure pods are updated
    (ewolinet@redhat.com)
  - making yammlint happy (ewolinet@redhat.com)
  - Updating to only create PVC when necessary and attach to the DS, otherwise
    leave it be (ewolinet@redhat.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.21-1
changelog:
  - glusterfs: bind created volume to the claim (vrutkovs@redhat.com)
  - Wait for existing nodes to go Ready before approval (sdodson@redhat.com)
  - Fix ordering of etcd stop and mask (mgugino@redhat.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.23-1
changelog:
  - add firewall rules for node exporter (m.judeikis@gmail.com)
  - AWS: use vpc name instead of cluster id when creating security groups
    (cewong@redhat.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.24-1
changelog:
  - Avoid undefined variable glusterfs_heketi_user_key (sdodson@redhat.com)
  - When the node process is down, don't exit (ccoleman@redhat.com)
  - Add scaleup playbook and docs for OpenStack (tomas@sedovic.cz)
  - Fix the Neutron DNS docs (tomas@sedovic.cz)
  - Add support for OpenStack internal DNS (tomas@sedovic.cz)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.26-1
changelog:
  - Allow to autoname scale group instances (jchaloup@redhat.com)
  - re-enable 3.10 repos (m.judeikis@gmail.com)


author: Scott Dodson <sdodson@redhat.com> 3.10.27-2
changelog:
  - Disable papr on pull requests (sdodson@redhat.com)
  - Add step to remove all k8s_ containers (mgugino@redhat.com)
  - Add boolean to uninstall for docker (mgugino@redhat.com)
  - Add doc note that kuryr requires openstack cloud provider
    (tzumainn@redhat.com)
  - Add containerized glusterfs cluster health check (mgugino@redhat.com)
  - Cleanup node bootstrap / scaleup code (mgugino@redhat.com)
  - adding unmount task below the backup task (bysnupy@hotmail.com)
  - Allow user to specify local openstack.conf (tzumainn@redhat.com)
  - Remove sections of kuryr documentation that tell user to disable registry
    creation (tzumainn@redhat.com)
  - Added OpenStack security group requirements section (tzumainn@redhat.com)
  - Allow disabling Network Manager managed dns (arun.neelicattu@gmail.com)
  - Add bool filter to all instances of openshift_use_crio (rteague@redhat.com)
  - Allow shared_non_ops as kibana index mode (farandac@redhat.com)
  - ignore failing dns clean errors when running openstack uninstall playbook
    (tzumainn@redhat.com)
  - Remove unused variables (spasquie@redhat.com)
  - Added node selector option for CFME role and fixed formatting issues
    (dluong@redhat.com)
  - Support tabs in resolv.conf (vrutkovs@redhat.com)
  - Upgrade Prometheus and AlertManager image versions (spasquie@redhat.com)
  - Fix order for invoking the hostpath storage task for registry
    (ngompa@datto.com)
  - Add a components public playbook (sdodson@redhat.com)
  - Cope with OpenShift returning no value when an environment variable is an
    empty string (mchappel@redhat.com)
  - Update Calico versions to the latest (v3.1.3) (mleung975@gmail.com)
  - bug 1597282. Quote selector to make it valid json (jcantril@redhat.com)
  - Add Prometheus scrape config for openshift-logging (lukas.vlcek@gmail.com)
  - bug 1590920. Bump fluent default memory to 756M (jcantril@redhat.com)
  - oreg url fix (m.judeikis@gmail.com)
  - Defining a default for logging_elasticsearch_rollout_override var in es
    handler (ewolinet@redhat.com)
  - Allow the 9k-10k port range for Prometheus (spasquie@redhat.com)
  - Setup logrotate on nodes once (vrutkovs@redhat.com)
  - google-cloud-sdk is x86_64 only (sdodson@redhat.com)
  - bug 1575546. Fix logging eventrouter cpu requests (jcantril@redhat.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.28-1
changelog:
  - add conditional clauses for handling cnx versions (derekmcquay@gmail.com)
  - apply the container_runtime for calico (derekmcquay@gmail.com)
  - Require -hyperkube RPMs instead of -master (vrutkovs@redhat.com)
  - Don't require etcd RPM to be installable on masters (vrutkovs@redhat.com)
  - Don't require fast-datapath channel on RHEL (vrutkovs@redhat.com)
  - No longer require SDN to be installed on nodes (vrutkovs@redhat.com)
  - node restart: check that all vars are defined (vrutkovs@redhat.com)
  - Change multipath prio from const to alua (jarrpa@redhat.com)
  - Adding min-port to dnsmasq configuration (rhowe@redhat.com)
  - Ensure kernel-modules not installed on atomic (mgugino@redhat.com)
  - Fedora: Install kernel-modules (mgugino@redhat.com)
  - Conditionally skip node approval for incremental 3.10 upgrades
    (rteague@redhat.com)
  - Update openshift_release version in sample inventory file
    (dani_comnea@yahoo.com)
  - 'Wait for node to be ready' task should check that all vars are defined
    (vrutkovs@redhat.com)
  - Fix prometheus annotations typo (vrutkovs@redhat.com)
  - Fix master env migrate module comments (mgugino@redhat.com)
  - move from latest to versioned repo (m.judeikis@gmail.com)
  - router-redeploy: don't check that annotations are missing
    (vrutkovs@redhat.com)
  - Fix master config migration module (mgugino@redhat.com)
  - oc_obj should correctly identify 'results': [{}] as 'Object not found'
    (mchappel@redhat.com)
  - updating doc for SSL cert (dcritch@redhat.com)
  - Adding support for an SSL certificate signed by the OpenStack cluster
    (dcritch@redhat.com)
  - Don't get file checksum, attributes and mime type in stat module calls
    (vrutkovs@redhat.com)
  - Sanity check htpasswd respect default (mgugino@redhat.com)
  - Fix glusterfs cluster check when condition (mgugino@redhat.com)
  - Ensure that monitoring operator has nodes to run (vrutkovs@redhat.com)
  - BZ-1608216 Set timeoutSeconds for readinessProbe on Cassandra RCs
    (ruben.vp8510@gmail.com)
  - Reorganized OpenStack cloud provider documentation (tzumainn@redhat.com)
  - Set log-path = ~/openshift-ansible.log (sdodson@redhat.com)
  - Add atomic package to base and debug package lists
    (nakayamakenjiro@gmail.com)
  - Remove callback plugin, artifact of a quick installer (vrutkovs@redhat.com)
  - Migrate old master env files to new location (mgugino@redhat.com)
  - Add configmap-generator templates (simaishi@redhat.com)
  - Disable the wifi collector in node_exporter (spasquie@redhat.com)
  - Fix openshift_logging on Python3 (christoffer.reijer@basalt.se)
  - check_htpasswd_provider: throw error if openshift_master_identity_providers
    is not parsed into a list (vrutkovs@redhat.com)
  - Change the order of template_var calls in check_htpasswd_provider
    (vrutkovs@redhat.com)
  - Make regex for the openshift_pkg_version simpler (nakayamakenjiro@gmail.com)
  - Add unit tests for check_pkg_version_format and check_release_format
    (nakayamakenjiro@gmail.com)
  - Add format check of openshift_pkg_version and openshift_release
    (nakayamakenjiro@gmail.com)
  - Sync grafana deployment. to openshift-monitoring. (mrsiano@gmail.com)
  - default_storage: configure rolebindings for azure-file storage backend
    (arun.neelicattu@gmail.com)
  - default_storage: allow configuring mountOptions and reclaimPolicy
    (arun.neelicattu@gmail.com)
  - lib_openshift/oc_storageclass: support mountOptions and reclaimPolicy
    (arun.neelicattu@gmail.com)
  - Use ansible systemd module to check service status
    (nakayamakenjiro@gmail.com)
  - Confirm iptables service status by checking command status
    (nakayamakenjiro@gmail.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.29-1
changelog:
  - CFME: set default value for openshift_hosted_infra_selector
    (vrutkovs@redhat.com)
  - vgchange before vgremove update. (sarumuga@redhat.com)
  - To avoid I/O errors, carry out vg deactivate (using vgchange -an) and dmsetup
    remove device. (sarumuga@redhat.com)
  - Update glusterfs README about uninstall playbook (sarumuga@redhat.com)
  - Add CentoOS Origin repo for 310 release (dani_comnea@yahoo.com)
  - SCC recouncilation has to run with older oc, before node upgrade
    (vrutkovs@redhat.com)


author: Flavio Leitner - 2.3.1-3.git20150327
changelog:
  - updated to 2.3.1-git4750c96 (#1208230)
  - commented out kernel requires
  - added requires to procps-ng (testsuite #84)


author: Flavio Leitner - 2.3.2-1
changelog:
  - updated to 2.3.2 (#1233862)
  - fixed to own /var/run/openvswitch directory (#1200887)
  - disabled testsuite on build by default


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.30-1
changelog:
  - Remove atomic-openshift-master package during upgrade (rteague@redhat.com)
  - Added support for ak when registering hosts (e.minguez@gmail.com)
  - The l_glusterfs_count is a string need to cast to int for comparison.
    (mbruzek@gmail.com)
  - Default CFME nodeselector should be a list of str, not a dict
    (vrutkovs@redhat.com)
  - The file name has changed to heketi_get_key.yml (mbruzek@gmail.com)
  - vgchange before vgremove update. (sarumuga@redhat.com)
  - To avoid I/O errors, carry out vg deactivate (using vgchange -an) and dmsetup
    remove device. (sarumuga@redhat.com)
  - Remove system container cri-o during 3.10 upgrade (rteague@redhat.com)
  - Adding documentation in hosts.example (jcallen@redhat.com)
  - Add a license parameter to gcloud command (jcallen@redhat.com)
  - Fix audit config interpolation (denis@gladkikh.email)
  - Remove unused/broken node cert plays (mgugino@redhat.com)
  - Add quotes to node selector (rteague@redhat.com)
  - GlusterFS: Upgrade playbook (jarrpa@redhat.com)
  - Refactor glusterfs for scaleup (mgugino@redhat.com)
  - Remove hyperkube package (norito.agetsuma@gmail.com)
  - re-order and required values (rcook@redhat.com)
  - matching the name values (rcook@redhat.com)
  - adding parameters to allow for load balancer creation (rcook@redhat.com)
  - set the external url of prometheus (pgier@redhat.com)
  - re-enable GA repos for 3.10 (Mangirdas@Judeikis.LT)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.35-1
changelog:
  - python-scandir was renamed in EPEL (vrutkovs@redhat.com)
  - cluster monitoring operator: add nodeselector (vrutkovs@redhat.com)
  - Use openshift_image_tag for registry-console upgrade (rteague@redhat.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.36-1
changelog:
  - Move filters (mateus.caruccio@getupcloud.com)
  - Overwrite grafana datasource and dashboards (mateus.caruccio@getupcloud.com)
  - Dont fail when datasource or dashboard already exists
    (mateus.caruccio@getupcloud.com)
  - Adding build info to image. (#9760) (kwoodson@redhat.com)
  - Add support to static pods for etcd helpers (sdodson@redhat.com)
  - Refactor csr approvals: oc_csr_approve (mgugino@redhat.com)
  - fix error in cnx conditional regex (derekmcquay@gmail.com)
  - If the cluster's arch is power (ppc64le) don't install default catalog.
    Create v3.10 imagestreams, quickstart, and db-templates that support ppc64le
    (jeyoung@redhat.com)
  - Log driver for JSON should be json-file (umohnani@redhat.com)
  - GlusterFS: Run kernel_modules.yml once on all nodes (jarrpa@redhat.com)
  - control plane upgrade: don't remove -master package on Atomic
    (vrutkovs@redhat.com)
  - Update search string for registry console (mgugino@redhat.com)
  - Increase maximum number of open file descriptors for dnsmasq
    (ichavero@redhat.com)
  - Refactor registry-console template and vars (mgugino@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.4.57-1
changelog:
  - Wait for nodes to be ready before proceeding with upgrade.
    (dgoodwin@redhat.com)
  - Add 10 second wait after disabling firewalld (sdodson@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.4.58-1
changelog:
  - More reliable wait for master after full host reboot. (dgoodwin@redhat.com)
  - Backport latest openshift-cert-expiry role updates to 1.4
    (tbielawa@redhat.com)
  - increase test coverage (jdetiber@redhat.com)
  - add test for utils to bump coverage (jdetiber@redhat.com)
  - update travis to use tox for utils (jdetiber@redhat.com)
  - Correct tox to run on Travis (rteague@redhat.com)
  - flake8 mccabe dependency fix (rteague@redhat.com)
  - Temporary work-around for flake8 vs maccabe version conflict
    (tbielawa@redhat.com)
  - More toxification (jdetiber@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.4.59-1
changelog:
  - Make use of AnsibleDumper in openshift_master filters s.t. we can represent
    AnsibleUnsafeText when dumping yaml. (abutcher@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.3.28-1
changelog:
  - Always deduplicate detected certificate names (elyscape@gmail.com)
  - Fix deployer template for enterprise (sdodson@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.3.30-1
changelog:
  - Check if openshift_master_ingress_ip_network_cidr is defined
    (Mathias.Merscher@dg-i.net)
  - allow networkConfig.ingressIPNetworkCIDRs to be configured
    (Mathias.Merscher@dg-i.net)
  - a-o-i: Force option should allow reinstall (smunilla@redhat.com)
  - a-o-i: Fix openshift_node_labels (smunilla@redhat.com)
  - Enable registry support for image pruning (andrew@andrewklau.com)
  - Default openshift_hosted_{logging,metrics}_deploy to false.
    (abutcher@redhat.com)
  - README_CONTAINERIZED_INSTALLATION: fixed link markdown
    (jakub.kramarz@freshmail.pl)
  - README_AWS: makes links consistent and working again
    (jakub.kramarz@freshmail.pl)
  - a-o-i: Allow better setting of host level variables (smunilla@redhat.com)
  - Further secure registry improvements (abutcher@redhat.com)
  - Delgate handlers to first master (smunilla@redhat.com)
  - Secure registry improvements. (abutcher@redhat.com)
  - Install Registry by Default (smunilla@redhat.com)
  - Update play names for consistency. (abutcher@redhat.com)
  - Configure ops cluster storage to match normal cluster storage
    (sdodson@redhat.com)
  - Fix bug with service signer cert on upgrade. (dgoodwin@redhat.com)
  - Add messages to let the user know if some plays were skipped, but it's ok.
    Also, remove the final 'press a key to continue' prompt.
    (tbielawa@redhat.com)
  - Set named certificate destinations as basenames of provided paths.
    (abutcher@redhat.com)
  - 'fix' unittests by removing the users ability to specify an ansible config
    (tbielawa@redhat.com)
  - Copy and paste more methods (tbielawa@redhat.com)
  - Silence/dot-print more actions in the callback (tbielawa@redhat.com)
  - Fix conflicts in spec file (tbielawa@redhat.com)
  - Use pre_upgrade tag instread of a dry run variable. (dgoodwin@redhat.com)
  - Move etcd backup from pre-upgrade to upgrade itself. (dgoodwin@redhat.com)
  - Allow a couple retries when unscheduling/rescheduling nodes in upgrade.
    (dgoodwin@redhat.com)
  - Skip the docker role in early upgrade stages. (dgoodwin@redhat.com)
  - Allow filtering nodes to upgrade by label. (dgoodwin@redhat.com)
  - Allow customizing node upgrade serial value. (dgoodwin@redhat.com)
  - Split upgrade for control plane/nodes. (dgoodwin@redhat.com)
  - Set the DomainName or DomainID in the OpenStack cloud provider
    (lhuard@amadeus.com)
  - Use ansible.module_utils._text.to_text instead of
    ansible.utils.unicode.to_unicode. (abutcher@redhat.com)
  - Suppress more warnings. (abutcher@redhat.com)
  - Add gitHTTPProxy and gitHTTPSProxy to advanced config json option
    (sdodson@redhat.com)
  - Don't set IMAGE_PREFIX if openshift_cockpit_deployer_prefix is empty
    (Robert.Bohne@ConSol.de)
  - Update spec file to install manpage (tbielawa@redhat.com)
  - Verify masters are upgraded before proceeding with node only upgrade.
    (dgoodwin@redhat.com)
  - Attempt to tease apart pre upgrade for masters/nodes. (dgoodwin@redhat.com)
  - Split upgrade entry points into control plane/node. (dgoodwin@redhat.com)
  - Reunite upgrade reconciliation gating with the play it gates on.
    (dgoodwin@redhat.com)
  - Drop atomic-enterprise as a valid deployment type in upgrade.
    (dgoodwin@redhat.com)
  - Stop guarding against pacemaker in upgrade, no longer necessary.
    (dgoodwin@redhat.com)
  - Support openshift_upgrade_dry_run=true for pre-upgrade checks only.
    (dgoodwin@redhat.com)
  - Make rhel_subscribe role default to OpenShift Container Platform 3.3
    (lhuard@amadeus.com)
  - Addresses most comments from @adellape (tbielawa@redhat.com)
  - Fix deployer template for enterprise (sdodson@redhat.com)
  - Add a manpage for atomic-openshift-installer (tbielawa@redhat.com)
  - Remove the DNS VM on OpenStack (lhuard@amadeus.com)
  - tweak logic (jdetiber@redhat.com)
  - test fix for systemd changes (sdodson@redhat.com)
  - Set default_subdomain properly for logging (sdodson@redhat.com)
  - Adjust wait for loops (sdodson@redhat.com)
  - Add storage for logging (sdodson@redhat.com)
  - Fix some bugs in OpenShift Hosted Logging role (contact@stephane-klein.info)
  - Add some sample inventory stuff, will update this later (sdodson@redhat.com)
  - Label all nodes for fluentd (sdodson@redhat.com)
  - Rename openshift_hosted_logging_image_{prefix,version} to match metrics
    (sdodson@redhat.com)
  - Fix deployer template for enterprise (sdodson@redhat.com)
  - Add logging to install playbooks (sdodson@redhat.com)
  - Fix OpenStack cloud provider (lhuard@amadeus.com)
  - Add rhaos-3.4-rhel-7 releaser to tito (sdodson@redhat.com)
  - Fix the nodeName of the OpenShift nodes on OpenStack (lhuard@amadeus.com)
  - Add an issue template (sdodson@redhat.com)
  - Add openshift_hosted_router_name (andrew@andrewklau.com)
  - Fix master service status changed fact. (abutcher@redhat.com)
  - Clarify openshift_hosted_metrics_public_url (sdodson@redhat.com)
  - Add GCE cloud provider kind. (abutcher@redhat.com)
  - add documentation about the openshift_hosted_metrics_public_url option
    (kobi.zamir@gmail.com)
  - Split openshift_builddefaults_no_proxy if it's not a list
    (sdodson@redhat.com)
  - Fix references to openshift.master.sdn_cluster_network_cidr in node roles
    (sdodson@redhat.com)
  - Update the OpenStack dynamic inventory script (lhuard@amadeus.com)
  - move LICENSE to /usr/share/licenses/openshift-ansible-VERSION/
    (nakayamakenjiro@gmail.com)
  - [uninstall] Stop services on all hosts prior to removing files.
    (abutcher@redhat.com)
  - Do not create volume claims for hosted components when storage type is
    object. (abutcher@redhat.com)
  - Add portal_net and sdn_cluster_network_cidr to node NO_PROXY
    (sdodson@redhat.com)
  - Add origin-node.service.wants to uninstall (andrew@andrewklau.com)
  - Update README.md (sdodson@redhat.com)
  - Add 'MaxGCEPDVolumeCount' to default scheduler predicates.
    (abutcher@redhat.com)
  - Switch to origin-1.x branch names (sdodson@redhat.com)
  - Open ports for vxlan and Nuage monitor (vishal.patil@nuagenetworks.net)
  - Add role to manageiq to allow creation of projects (azellner@redhat.com)
  - Add 'MaxEBSVolumeCount' to default scheduler predicates.
    (abutcher@redhat.com)
  - a-o-i: Don't set unschedulable nodes as infra (smunilla@redhat.com)
  - [redeploy-certificates] Set default value for
    openshift_master_default_subdomain as workaround. (abutcher@redhat.com)
  - [redeploy-certificates] Correct etcd service name. (abutcher@redhat.com)
  - [upgrade] Create/configure service signer cert when missing.
    (abutcher@redhat.com)
  - get quickstarts from origin, not upstream example repos (bparees@redhat.com)
  - Define proxy settings for node services (sdodson@redhat.com)
  - Check for use_openshift_sdn when restarting openvswitch.
    (abutcher@redhat.com)
  - Move delegated_serial_command module to etcd_common. (abutcher@redhat.com)
  - Fix README links. (abutcher@redhat.com)
  - Check for is_atomic when uninstalling flannel package. (abutcher@redhat.com)
  - Add atomic-guest tuned profile (andrew.lau@newiteration.com)
  - Pause after restarting openvswitch in containerized upgrade.
    (dgoodwin@redhat.com)
  - Add acceptschema2 and enforcequota settings for hosted registry
    (andrew.lau@newiteration.com)
  - Always deduplicate detected certificate names (elyscape@gmail.com)
  - Add option for specifying s3 registry storage root directory.
    (abutcher@redhat.com)
  - Set config/namespace where missing for secure registry deployment.
    (abutcher@redhat.com)
  - Flush handlers before marking a node schedulable after upgrade.
    (dgoodwin@redhat.com)
  - Iterate over node inventory hostnames instead of openshift.common.hostname
    within openshift_manage_node role. (abutcher@redhat.com)
  - a-o-i: Do not display version number in quick installer (smunilla@redhat.com)
  - Explain our branching strategy (sdodson@redhat.com)
  - Fix warnings (mkumatag@in.ibm.com)
  - Don't loop over hostvars when setting node schedulability.
    (abutcher@redhat.com)
  - Copy admin kubeconfig in openshift_manage_node role. (abutcher@redhat.com)
  - Adjust to_padded_yaml transformation to use the AnsibleDumper
    (tbielawa@redhat.com)
  - Secure registry for atomic registry deployment (deployment_subtype=registry).
    (abutcher@redhat.com)
  - Record schedulability of node prior to upgrade and re-set it to that
    (sdodson@redhat.com)
  - Fix string substitution error in the to_padded_yaml filter
    (tbielawa@redhat.com)
  - Update image stream data (sdodson@redhat.com)
  - Fix ops/qps typo (jliggitt@redhat.com)
  - initial support for v1.3 with logging v1.3 (rmeggins@redhat.com)
  - Only prompt for proxy vars if none are set and our version recognizes them
    (tbielawa@redhat.com)
  - Don't advise people to use additional registries over oreg_url
    (sdodson@redhat.com)
  - Persist net.ipv4.ip_forward sysctl entry for openshift nodes
    (tbielawa@redhat.com)
  - Add flannel package removal in uninstallation playbook (mkumatag@in.ibm.com)
  - This fixes an issue in AWS where the master node was not part of the nodes in
    an unschedulable way (mdanter@gmail.com)
  - Don't attempt to create retry files (tbielawa@redhat.com)
  - Fix nuage check. (abutcher@redhat.com)
  - Change test requirements file name (tbielawa@redhat.com)
  - Fix review comments (mkumatag@in.ibm.com)
  - Try installing setuptools before the rest of the requirements
    (tbielawa@redhat.com)
  - Switch to using a requirements.txt file and ensure that setuptools is pinned
    to the latest version available on RHEL7 (tbielawa@redhat.com)
  - Try using parse_version from pkg_resources instead (tbielawa@redhat.com)
  - Add missing pip requirement to virtualenv (tbielawa@redhat.com)
  - Fix PyLint errors discovered when upgrading to newer version
    (tbielawa@redhat.com)
  - Bug 1369410 - uninstall fail at task [restart docker] on atomic-host
    (bleanhar@redhat.com)
  - Fix typo (mkumatag@in.ibm.com)
  - Fix errors in docker role (mkumatag@in.ibm.com)
  - Allow overriding the Docker 1.10 requirement for upgrade.
    (dgoodwin@redhat.com)
  - skip if the objects already exist (rmeggins@redhat.com)
  - create and process the logging deployer template in the current project,
    logging (rmeggins@redhat.com)
  - do not create logging project if it already exists (rmeggins@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.3.31-1
changelog:
  - note different product versions (jeder@redhat.com)
  - Error out if containerized=true for lb host. (dgoodwin@redhat.com)
  - Removes an unused file (jtslear@gmail.com)
  - Update v1.3 content (sdodson@redhat.com)
  - Add v1.4 content (sdodson@redhat.com)
  - Set master facts for first master in node scaleup. (abutcher@redhat.com)
  - Fix default port typo. (abutcher@redhat.com)
  - Add example openid/request header providers and explain certificate
    variables. (abutcher@redhat.com)
  - Move openshift.common.debug.level to openshift_facts. (abutcher@redhat.com)
  - Don't secure registry or deploy registry console when infra replics == 0
    (abutcher@redhat.com)
  - Filterize haproxy frontends/backends and add method for providing additional
    frontends/backends. (abutcher@redhat.com)
  - Addressed review comments (vishal.patil@nuagenetworks.net)
  - Changes for Nuage HA (vishal.patil@nuagenetworks.net)
  - the example line fails on releases prior to 3.3, so put a comment there.
    (jeder@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.3.33-1
changelog:
  - Apply same pattern to HA master services (sdodson@redhat.com)
  - Improve how we handle containerized node failure on first startup
    (sdodson@redhat.com)
  - Retry failed master startup once (ironcladlou@gmail.com)
  - [logging] Fix openshift_hosted_logging_fluentd_nodeselector
    (sdodson@redhat.com)
  - Changes for etcd servers (vishal.patil@nuagenetworks.net)
  - Check that OpenStack hostnames are resolvable (lhuard@amadeus.com)


author: Scott Dodson <sdodson@redhat.com> 3.3.35-1
changelog:
  - Stop restarting node after upgrading master rpms. (dgoodwin@redhat.com)
  - Fix upgrade mappings in quick installer (smunilla@redhat.com)
  - set defaults for debug_level in template and task (jhcook@gmail.com)
  - Fix config and namespace for registry volume detection (sdodson@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.3.36-1
changelog:
  - formatting updates in template (tobias@tobru.ch)
  - Do not error on node labels set too non-string values. (manuel@hutter.io)
  - Use inventory variables rather than facts (sdodson@redhat.com)
  - Resume restarting node after upgrading node rpms. (dgoodwin@redhat.com)
  - upgrade: Don't check avail docker version if not already installed.
    (dgoodwin@redhat.com)
  - Automatic commit of package [openshift-ansible] release [3.4.8-1].
    (tdawson@redhat.com)
  - revise docs (tobias@tobru.ch)
  - update handling of use_dnsmasq (jdetiber@redhat.com)
  - Fix standalone docker upgrade playbook skipping nodes. (dgoodwin@redhat.com)
  - Fix missing play assignment in a-o-i callback plugin (tbielawa@redhat.com)
  - adjustments in docs and j2 template (tobias@tobru.ch)
  - add regionendpoint parameter for registry s3 (tobias.brunner@vshn.ch)
  - nfs: Handle seboolean aliases not just in Fedora (walters@verbum.org)


author: Scott Dodson <sdodson@redhat.com> 3.3.37-1
changelog:
  - Get rid of openshift_node_config_file entirely (sdodson@redhat.com)
  - [logging] Fix NFS volume binding (sdodson@redhat.com)
  - Build full node config path in systemd_units tasks. (abutcher@redhat.com)
  - Default [] (abutcher@redhat.com)
  - Template with_items for upstream ansible-2.2 compat. (abutcher@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.5.44-1
changelog:
  - Correct a typo in metrics role (sdodson@redhat.com)
  - Fix overriding openshift_{logging,metrics}_image_prefix (sdodson@redhat.com)
  - Revert "fix quoting issues in logging es template" (ewolinet@redhat.com)
  - also missing quotes for number_of_shards and number_of_replicas
    (rmeggins@redhat.com)
  - es_min_masters must be quoted (rmeggins@redhat.com)
  - Make linter happy (sdodson@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.5.46-1
changelog:
  - Correct copy task to use remote source (rteague@redhat.com)
  - Removing initial setting of metrics image prefix/version
    (ewolinet@redhat.com)
  - Make atomic-openshift-utils require playbooks of the same version
    (sdodson@redhat.com)
  - Make the OCP available version detection excluder free (jchaloup@redhat.com)


author: Flavio Leitner - 2.3.1-3.git20150327
changelog:
  - updated to 2.3.1-git4750c96
  - commented out kernel requires
  - added requires to procps-ng (testsuite #84)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.42-1
changelog:
  - Add support for ak/orgid for RHEL (e.minguez@gmail.com)
  - Update the value of 'openshift_grafana_prometheus_serviceaccount' Fix
    openshift_grafana prometheus serviceaccount default value in README,The
    default value is 'promethus','promethus' missed a letter, and there should be
    an e after the h,so it should be 'prometheus' (3168582@qq.com)
  - openshift-prometheus: improve uninstall process (pgier@redhat.com)
  - Fix incorrect formatting for ca file (vrutkovs@redhat.com)
  - _idp['name'] not availabe (github@st0ne.at)
  - Move openshift_crio_pause_image to openshift_facts (rteague@redhat.com)
  - Renames CRI-O pause_image to openshift_crio_pause_image.
    (jtudelag@redhat.com)
  - Remove docker excluder from image prep packages (rteague@redhat.com)
  - kube_proxy_and_dns: add role that runs standalone kube-proxy + DNS
    (dcbw@redhat.com)
  - Ensure sebool container_manage_cgroup on upgrade (mgugino@redhat.com)
  - Fix cpu_limit check in eventrouter template (vrutkovs@redhat.com)
  - openshift-control-plane: check whether the sync pods are ready before
    selecting nodes (pgier@redhat.com)
  - make azure load balancer creation parameters as options (weshi@redhat.com)
  - Update pause image value in crio.conf after upgrade (umohnani@redhat.com)
  - Prefix identity provider's CA files with identity provider names
    (vrutkovs@redhat.com)
  - Dissalow custom CA file path for providers with CA path (vrutkovs@redhat.com)
  - GlusterFS: Replace heketi Route with Service URL (jarrpa@redhat.com)
  - Be more accuracy for getting def_route_int and def_route_ip
    (bysnupy@hotmail.com)
  - Don't collect node facts on master - these are set during bootstrap
    (vrutkovs@redhat.com)
  - rollback node ports (m.judeikis@gmail.com)
  - fix metrics become syntax (eduardas@redhat.com)
  - change become syntax (m.judeikis@gmail.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.43-1
changelog:
  - Fix etcdctl aliases on etcd hosts (vrutkovs@redhat.com)
  - Don't reset os_firewall_use_firewalld if iptables is inactive during upgrade
    (vrutkovs@redhat.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.44-1
changelog:
  - Use first_master_client_binary from hostvars[groups.oo_first_master.0]
    (nakayamakenjiro@gmail.com)
  - Ensure master image is pre-pulled on upgrade (mgugino@redhat.com)
  - Fixing a typo s/Cound/Could/g noticed with an error getting CSR's approved
    (roxenham@redhat.com)
  - Configure a list of etcd cipher suites via `etcd_cipher_suites`
    (vrutkovs@redhat.com)
  - Add failed_when to 'Remove the image stream tag' tasks (mgugino@redhat.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.45-1
changelog:
  - Don't fetch provider facts if openshift_cloud_provider_kind is not set
    (vrutkovs@redhat.com)
  - GlusterFS: External uninstall (jarrpa@redhat.com)
  - GlusterFS: Ignore external nodes (jarrpa@redhat.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.46-1
changelog:
  - GlusterFS: Fix heketi_pod check (jarrpa@redhat.com)
  - Add oc_get_nodes to debug csr output (mgugino@redhat.com)
  - Add extra debug info to csr module (mgugino@redhat.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.47-1
changelog:
  - Revert "[release-3.10] Don't fetch provider openshift_facts if
    openshift_cloud_provider_kind is not set" (roignac@gmail.com)


author: Scott Dodson <sdodson@redhat.com> 3.2.15-1
changelog:
  - Disable too many branches pylint (sdodson@redhat.com)
  - a-o-i: write missing openshift_node_labels (dkorn@redhat.com)
  - a-o-i: Support for arbitrary host-level variables (smunilla@redhat.com)
  - a-o-i: Move inventory vars to the correct location (smunilla@redhat.com)
  - a-o-i: Persist Roles Variables (smunilla@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.2.16-1
changelog:
  - a-o-i: Set roles on standalone storage (smunilla@redhat.com)
  - Fix xpaas_templates_base (sdodson@redhat.com)
  - Add dotnet image stream to enterprise installs (sdodson@redhat.com)
  - Fix haproxy logs (sdodson@redhat.com)
  - Fix registry/router being created despite no infra nodes.
    (dgoodwin@redhat.com)
  - xPaaS v1.3.2 release (sdodson@redhat.com)
  - Remove old sso70-basic templates (sdodson@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.2.17-1
changelog:
  - a-o-i: Better inventory group handling (smunilla@redhat.com)
  - Add knobs for disabling router/registry management. (abutcher@redhat.com)
  - a-o-i: Allow Arbitrary Deployment Variables (smunilla@redhat.com)
  - a-o-i: Fix broken uninstall (smunilla@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.2.18-1
changelog:
  - a-o-i: Rename OSE in Install Menu (smunilla@redhat.com)
  - a-o-i: Allow Arbitrary Deployment Variables (smunilla@redhat.com)
  - Add knobs for disabling router/registry management. (abutcher@redhat.com)
  - Restore missing etcd_image fact. (abutcher@redhat.com)
  - Rename router and registry node list variables. (abutcher@redhat.com)
  - a-o-i: Fix broken uninstall (smunilla@redhat.com)
  - Refactor etcd certificates roles. (abutcher@redhat.com)
  - Add options for specifying named ca certificates to be added to the openshift
    ca bundle. (abutcher@redhat.com)
  - oo_collect can be ran against dicts where key isn't present.
    (abutcher@redhat.com)
  - Update for issue#2244 (kunallimaye@gmail.com)
  - Update for issue-2244 (kunallimaye@gmail.com)
  - a-o-i: Remove AEP, OSE 3.0, and OSE 3.2 choices (smunilla@redhat.com)
  - Move role dependencies to playbooks. (abutcher@redhat.com)
  - Fix xpaas_templates_base (sdodson@redhat.com)
  - a-o-i: Better inventory group handling (smunilla@redhat.com)
  - Add dotnet image stream to enterprise installs (sdodson@redhat.com)
  - Don't set a networkPluginName in 3.3 installs (sdodson@redhat.com)
  - Fix haproxy logs (sdodson@redhat.com)
  - update bootstrap-fedora playbook with new python crypto deps
    (maxamillion@fedoraproject.org)
  - a-o-i: Set roles on standalone storage (smunilla@redhat.com)
  - Disable too many branches pylint (sdodson@redhat.com)
  - a-o-i: write missing openshift_node_labels (dkorn@redhat.com)
  - a-o-i: Support for arbitrary host-level variables (smunilla@redhat.com)
  - Beautiful -v output from ansible (jamespic@gmail.com)
  - a-o-i: Move inventory vars to the correct location (smunilla@redhat.com)
  - Automatic commit of package [openshift-ansible] release [3.3.3-1].
    (tdawson@redhat.com)
  - Fix registry/router being created despite no infra nodes.
    (dgoodwin@redhat.com)
  - Document openshift_portal_net (sdodson@redhat.com)
  - Remove old sso70-basic templates (sdodson@redhat.com)
  - xPaaS v1.3.2 release (sdodson@redhat.com)
  - Template named certificates with_items. (abutcher@redhat.com)
  - Replace master_cert_config_dir with common config_base fact.
    (abutcher@redhat.com)
  - remove outdated openshift_cluster_metrics role (jdetiber@redhat.com)
  - Fix "deloyment" typo in deployment types doc (lxia@redhat.com)
  - Stagger the start of master services. (abutcher@redhat.com)
  - Add missing nuke_images.sh symlink. (dgoodwin@redhat.com)
  - a-o-i: Persist Roles Variables (smunilla@redhat.com)
  - Default nodes matching selectors when not collected. (abutcher@redhat.com)
  - Copy openshift binaries instead of using wrapper script.
    (dgoodwin@redhat.com)
  - Correct relative include for ansible version check. (abutcher@redhat.com)
  - Fix libvirt provider for Ansible 2.1.0.0 (lhuard@amadeus.com)
  - Re-arrange master and node role dependencies. (abutcher@redhat.com)
  - Refactor openshift certificates roles. (abutcher@redhat.com)
  - Check ansible version prior to evaluating cluster hosts and groups.
    (abutcher@redhat.com)
  - Stop reporting changes when docker pull is already up to date.
    (dgoodwin@redhat.com)
  - a-o-i: Write Role variable groups (smunilla@redhat.com)
  - Slight modification to error when using mismatched openshift_release.
    (dgoodwin@redhat.com)
  - fix "databcase" typo in example roles (lxia@redhat.com)
  - Secure router only when openshift.hosted.router.certificate.contents exists.
    (abutcher@redhat.com)
  - Add jenkinstemplate (sdodson@redhat.com)
  - Fix bugs with origin 1.2 rpm based upgrades. (dgoodwin@redhat.com)
  - Sync latest image streams and templates (sdodson@redhat.com)
  - Ensure 'oo_nfs_to_config' in groups prior to checking group length when nfs
    host unset. (abutcher@redhat.com)
  - We have proper ansible support and requirements in place now, de-revert this
    commit (tbielawa@redhat.com)
  - Skip docker upgrades on Atomic. (dgoodwin@redhat.com)
  - Resolve some deprecation warnings. (abutcher@redhat.com)
  - a-o-i: Looser facts requirements for unattended (smunilla@redhat.com)
  - make rpm-q module pylint warning-free (tob@butter.sh)
  - add rpm_q module to query rpm database (tob@butter.sh)
  - Require ansible-2.1 (abutcher@redhat.com)


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.0.0.1-1
changelog:
  - Ansible 2.0.0.1 from upstream.  Rewrite with many bugfixes, rewritten code,
    and new features. See the upstream changelog for details:
    https://github.com/ansible/ansible/blob/devel/CHANGELOG.md


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.0.1.0-2
changelog:
  - Patch control_path to be not hit path length limitations (RH BZ #1311729)
  - Version the test tarball


author: Kevin Fenzi <kevin@scrye.com> - 2.0.2.0-1
changelog:
  - Update to 2.0.2.0. https://github.com/ansible/ansible/blob/stable-2.0/CHANGELOG.md
  - Fixes CVE-2016-3096
  - Fix for failed to resolve remote temporary directory issue. bug #1328359


author: Troy Dawson <tdawson@redhat.com> - 2.2.0-0.50.prerelease
changelog:
  - Update to e8897a9b917be47431df68141c3977f3ab57942e ansible
    bf5b3de83eae72e0602ce2418a1a547c023ed3fe lib/ansible/modules/core
    f83aa9fff3574f621609e2bded2f604cabda38e1 lib/ansible/modules/extras


author: Scott Dodson <sdodson@redhat.com> 3.3.38-1
changelog:
  - Override __init__ in default callback to avoid infinite loop.
    (abutcher@redhat.com)
  - Switch from "oadm" to "oc adm" and fix bug in binary sync.
    (dgoodwin@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.3.39-1
changelog:
  - Bump enterprise logging and metrics to 3.3.1 (sdodson@redhat.com)
  - Enable dnsmasq service (sdodson@redhat.com)
  - Revert "Fix the nodeName of the OpenShift nodes on OpenStack"
    (sdodson@redhat.com)
  - Revert "Fix OpenStack cloud provider" (sdodson@redhat.com)
  - Revert "Check that OpenStack hostnames are resolvable" (sdodson@redhat.com)


author: Jenkins CD Merge Bot <tdawson@redhat.com> 3.5.62-1
changelog:
  - add .redhat-ci.yml for release-1.5 branch (jlebon@redhat.com)
  - Updating logic for generating pvcs and their counts to prevent reuse when
    looping (ewolinet@redhat.com)
  - Replace original router cert variable names. (abutcher@redhat.com)


author: Jenkins CD Merge Bot <tdawson@redhat.com> 3.5.63-1
changelog:
  - Compatibility updates to openshift_logging role for ansible 2.2.2.0+
    (esauer@redhat.com)
  - Adding defaults for es_indices (ewolinet@redhat.com)


author: Jenkins CD Merge Bot <tdawson@redhat.com> 3.5.64-1
changelog:
  - Updating htpasswd logic to not mount a volume for creating file
    (ewolinet@redhat.com)
  - Differentiate between service serving router certificate and custom
    openshift_hosted_router_certificate when replacing the router certificate.
    (abutcher@redhat.com)
  - Updating logging and metrics to restart api, ha and controllers when updating
    master config (ewolinet@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.5.66-1
changelog:
  - Upgrade specific rpms instead of just master/node. (dgoodwin@redhat.com)
  - Updating openshift_metrics to use htpasswd module instead of making a docker
    call. Updating requirement to include python-passlib (ewolinet@redhat.com)
  - move excluder upgrade validation tasks under openshift_excluder role
    (jchaloup@redhat.com)
  - Remove jinja delimeters and double quotes from when conditions
    (sdodson@redhat.com)
  - Use openshift_ca_host's hostnames to sign the CA (sdodson@redhat.com)
  - Bump ansible rpm dependency to 2.2.2.0 (sdodson@redhat.com)


author: Jenkins CD Merge Bot <tdawson@redhat.com> 3.5.68-1
changelog:
  - Adding signed router cert and fixing server_cert bug. (kwoodson@redhat.com)
  - Allow oc_ modules to pass unicode results (rteague@redhat.com)
  - Correctly setting the primary and replica shard count settings
    (ewolinet@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.5.69-1
changelog:
  - byo: correct option name (gscrivan@redhat.com)
  - Bumping up default_ose_version for registering a 3.5 system
    (ewolinet@redhat.com)
  - Fix issue with Travis-CI using old pip version (rteague@redhat.com)
  - Perform package upgrades in one transaction (sdodson@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.5.71-1
changelog:
  - Updating base64 decode switch for OSX (ewolinet@redhat.com)
  - Use v3.5 images on the release-1.5 branch (sdodson@redhat.com)
  - Fix Origin version variant (rteague@redhat.com)
  - Reserve kubernetes and 'kubernetes-' prefixed namespaces
    (jliggitt@redhat.com)
  - redhat-ci: use requirements.txt (jlebon@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.5.74-1
changelog:
  - [JMAN4-161] Add templates and pv example for cloudforms jboss middleware
    manager (pgier@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.5.75-1
changelog:
  - Skip router/registry cert redeploy when
    openshift_hosted_manage_{router,registry}=false (abutcher@redhat.com)
  - AMP 2.0 (sdodson@redhat.com)
  - Removing logging and metrics hosted templates (ewolinet@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.5.78-1
changelog:
  - inventory: rename certificates->certificate in router example
    (smilner@redhat.com)
  - Updating image for registry_console (ewolinet@redhat.com)
  - backport #4321 verify upgrade targets separately for each group
    (jchaloup@redhat.com)
  - disable docker-excluder during its upgrade (jchaloup@redhat.com)
  - replace repoquery command with module (jchaloup@redhat.com)
  - backport #4176 'Rework openshift_excluders role' to 1.5 (rteague@redhat.com)
  - backport #4065 'Extend repoquery command (of lib_utils role) to ignore
    excluders' to 1.5 (jchaloup@redhat.com)
  - backport #3879 'run excluders over selected set of hosts during
    control_plane/node upgrade' to 1.5 (jchaloup@redhat.com)
  - backport #4038 'Upgrade Refactor' to 1.5 (jchaloup@redhat.com)
  - Refactor initialize groups tasks (backport for 1.5) (rteague@redhat.com)


author: Jenkins CD Merge Bot <tdawson@redhat.com> 3.5.80-1
changelog:
  - skip installation of base package in openshift_ca when scalling up master
    (jchaloup@redhat.com)
  - Metrics: update the imagePullPolicy to be always (mwringe@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.5.81-1
changelog:
  - Remove supported/implemented barrier for registry object storage providers.
    (abutcher@redhat.com)
  - Disable excluder only on nodes that are not masters (jchaloup@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.5.82-1
changelog:
  - Skip service restarts within ca redeployment playbook when expired
    certificates are detected. (abutcher@redhat.com)


author: Kevin Fenzi <kevin@scrye.com> 1.9.3-1
changelog:
  - Update to 1.9.3
  - Patch dnf as package manager. Fixes bug #1258080
  - Fixes bug #1251392 (in 1.9.3 release)
  - Add requires for sshpass package. Fixes bug #1258799


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 1.9.1-11
changelog:
  - built docker @projectatomic/rhel7-1.9 commit#2dbcc37
  - built docker-selinux commit#e2e1f22
  - built d-s-s commit#1c2b95b
  - built docker-utils commit#dab51ac


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 1.9.1-14
changelog:
  - built docker @projectatomic/rhel7-1.9 commit#fe0b590
  - built docker-selinux commit#e2e1f22
  - built d-s-s commit#1c2b95b
  - built docker-utils commit#dab51ac


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 1.9.1-15
changelog:
  - Resolves: rhbz#1302411
  - built docker @projectatomic/rhel7-1.9 commit#50e78a0
  - built docker-selinux commit#e2e1f22
  - built d-s-s commit#1c2b95b
  - built docker-utils commit#dab51ac


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.9.1-17
changelog:
  - built docker @projectatomic/rhel7-1.9 commit#185277d
  - built docker-selinux commit#e2e1f22
  - built d-s-s commit#03dfc7b
  - built docker-utils commit#b851c03
  - built forward-journald commit#48b9599


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.9.1-18
changelog:
  - Resolves: rhbz#1286765 - set TimeoutStartSec=0 in unitfile
  - Resolves: rhbz#1298363, rhbz#1300076, rhbz#1304038, rhbz#1302418
  - built forward-journald commit#77e02a9 - other subpackage commits same as
  previous build


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.39-1
changelog:
  - Fix etcd helper function template error (sdodson@redhat.com)
  - Fix server csr while loop oc_csr_approve (mgugino@redhat.com)
  - Add support for ak/orgid (e.minguez@gmail.com)
  - Remove unnecessary passlib check (jkr@adorsys.de)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.40-1
changelog:
  - Ensure default StorageClass reclaimPolicy is set to nil instead of
    emptystring when reclaim_policy undefined (mawong@redhat.com)
  - Don't set reclaim policy to empty string (mawong@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.3.45-1
changelog:
  - Restart API service always as well. (dgoodwin@redhat.com)
  - Bump etcd_ca_default_days to 5 years. (abutcher@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.3.47-1
changelog:
  - [upgrades] Use etcd3 to backup embedded etcd if possible (sdodson@redhat.com)
  - Add missing symlink for node openvswitch oom fix. (dgoodwin@redhat.com)
  - Bump example release to 3.3. (dgoodwin@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.3.48-1
changelog:
  - Always add local dns domain to no_proxy (jawed.khelil@amadeus.com)
  - Install flannel RPM on containerized but not atomic (sdodson@redhat.com)
  - Bump ansible requirement to 2.2.0.0-1 (GA) (sdodson@redhat.com)
  - Fix etcd backup failure due to corrupted facts. (dgoodwin@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.3.49-1
changelog:
  - Default groups.oo_etcd_to_config when setting embedded_etcd in control plane
    upgrade. (abutcher@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.3.54-1
changelog:
  - Create the file in two passes, atomicly copy it over (sdodson@redhat.com)
  - node_dnsmasq -- Set dnsmasq as our only nameserver (sdodson@redhat.com)
  - Only restart dnsmasq if the DNS servers have changed (tbielawa@redhat.com)


author: Carl George <carl@george.computer> - 2.7.0-1
changelog:
  - Latest upstream rhbz#1527712
  - Drop patch1, requirements.txt does not affect final installation
  - Drop unnecessary coverage and flake8 build requirements


author: Justin Pierce <jupierce@redhat.com> 3.9.0-0.41.0
changelog:
  - Allow OVS 2.7 in OCP 3.10 (sdodson@redhat.com)
  - GlusterFS: Minor documentation update (jarrpa@redhat.com)
  - Make sure to include upgrade_pre when upgrading master nodes
    (sdodson@redhat.com)


author: Justin Pierce <jupierce@redhat.com> 3.9.0-0.42.0
changelog:
  - xPaaS v1.4.8 for v3.7 (sdodson@redhat.com)
  - xPaaS v1.4.8-1 for v3.8 (sdodson@redhat.com)
  - xPaaS v1.4.8-1 for v3.9 (sdodson@redhat.com)
  - Bump xpaas version (sdodson@redhat.com)
  - Bug 1524805- CFME example now works disconnected (fabian@fabianism.us)
  - Only try to yaml.load a file if it ends in .yml or .yaml in logging facts
    (ewolinet@redhat.com)
  - Set default image tag to openshift_image_tag for services
    (vrutkovs@redhat.com)
  - Redeploy router certificates during upgrade only when secure.
    (kwoodson@redhat.com)
  - GlusterFS: Fix block StorageClass heketi route (jarrpa@redhat.com)
  - changed oc to {{ openshift_client_binary }} (datarace101@gmail.com)
  - Use v3.9 web-console image for now (sdodson@redhat.com)
  - Adding ability to provide additional mounts to crio system container.
    (kwoodson@redhat.com)
  - Remove spaces introduced at the start of the line
    (geoff.newson@googlemail.com)
  - Changing the check for the number of etcd nodes (geoff.newson@gmail.com)
  - aws ami: make it so the tags from the orinal AMI are used with the newly
    created AMI (mwoodson@redhat.com)
  - Setup docker excluder if requested before container_runtime is installed
    (vrutkovs@redhat.com)
  - openshift_node: Remove master from aws node building (smilner@redhat.com)
  - Use wait_for_connection to validate ssh transport is alive
    (sdodson@redhat.com)
  - Bug 1541625- properly cast provided ip address to unicode
    (fabian@fabianism.us)
  - Add base package installation to upgrade playbooks (rteague@redhat.com)
  - 3.9 upgrade: fix typos in restart masters procedure (vrutkovs@redhat.com)
  - quick installer: disable broken test_get_hosts_to_run_on6 test
    (vrutkovs@redhat.com)
  - Quick installer: run prerequistes first and update path to main playbook
    (vrutkovs@redhat.com)
  - Fix uninstall using openshift_prometheus_state=absent (zgalor@redhat.com)
  - Detect config changes in console liveness probe (spadgett@redhat.com)
  - Fix master and node system container variables (mgugino@redhat.com)
  - Correct the list of certificates checked in openshift_master_certificates
    s.t. masters do not incorrectly report that master certs are missing.
    (abutcher@redhat.com)
  - tag fix without ose- (rcook@redhat.com)
  - lib_utils_oo_collect: Allow filtering on dot separated keys.
    (abutcher@redhat.com)
  - Determine which etcd host is the etcd_ca_host rather than assume it is the
    first host in the etcd host group. (abutcher@redhat.com)
  - Attempt to back up generated certificates on every etcd host.
    (abutcher@redhat.com)
  - Remove pre upgrade verification step re: etcd ca host. (abutcher@redhat.com)
  - Revert "GlusterFS: Remove image option from heketi command" (hansmi@vshn.ch)


author: Justin Pierce <jupierce@redhat.com> 3.9.0-0.43.0
changelog:
  - Changing conditional_set_fact from module to action_plugin since it does not
    need to access hosts to be effective and to reduce playbook output
    (ewolinet@redhat.com)
  - Revert "Bug 1512825 - add mux pod failed for Serial number 02 has already
    been issued" (mkhan@redhat.com)
  - Fix metadata access in OpenStack inventory (tomas@sedovic.cz)
  - Adding ability to yedit json files. (kwoodson@redhat.com)
  - Simplify double upgrade version logic (mgugino@redhat.com)
  - Whenever we create a new es node ignore health checks, changing prometheus pw
    gen for increased secret idempotency (ewolinet@redhat.com)
  - oc_adm_csr: Add fail_on_timeout parameter which causes module to fail when
    timeout was reached. (abutcher@redhat.com)
  - Adding missing template (ewolinet@redhat.com)
  - Move installation of packages before container_runtime to ensure bind mounts
    are avaialable. (kwoodson@redhat.com)
  - Use curl --noproxy option for internal apiserver access (takayoshi@gmail.com)
  - Revert openshift_version to previous state (mgugino@redhat.com)
  - Add openshift_gcp_multizone bool (mgugino@redhat.com)
  - Invert logic to decide when to re-deploy certs (sdodson@redhat.com)
  - etcd_scaleup: use inventory_hostname when etcd ca host is being picked
    (vrutkovs@redhat.com)
  - Fix docker_upgrade variable (mgugino@redhat.com)
  - Fix gcp variable warnings (mgugino@redhat.com)
  - Disable console install when not 3.9 or newer (spadgett@redhat.com)
  - Fix etcd scaleup plays (mgugino@redhat.com)
  - Add playbook to install components for cluster operator (cewong@redhat.com)
  - Remove cluster_facts.yml from the install.yml (tomas@sedovic.cz)
  - Allow for blank StorageClass in PVC creation (jarrpa@redhat.com)
  - Add service catalog to be upgraded (jpeeler@redhat.com)
  - Remove node start from bootstrap.yml. (abutcher@redhat.com)
  - Restart systemd-hostnamed before restarting NetworkManager in node user-data.
    (abutcher@redhat.com)
  - additional mounts: specify 'type' in container_runtime_crio_additional_mounts
    (vrutkovs@redhat.com)
  - Fix openshift_openstack_provision_user_commands (bdobreli@redhat.com)
  - origin-dns: make sure cluster.local DNS server is listed first
    (vrutkovs@redhat.com)
  - Fix OpenStack playbooks (tomas@sedovic.cz)
  - Backport changes for glusterfs, heketi, s3 and block templates
    (sarumuga@redhat.com)
  - Fix indentation to make yamllint happy (vrutkovs@redhat.com)
  - Use r_etcd_common_etcdctl_command instead of hardcoded binary name to support
    containerized upgrade (vrutkovs@redhat.com)
  - Verify that requested services have schedulable nodes matching the selectors
    (vrutkovs@redhat.com)
  - Normalize the time we wait for pods to 5s * 60 retries (sdodson@redhat.com)
  - Pause for console rollout (spadgett@redhat.com)
  - Fix wording (bdobreli@redhat.com)
  - Fix cloud init runcmd templating (bdobreli@redhat.com)
  - Note ignored Heat user data changes for openstack (bdobreli@redhat.com)
  - Clarify the ansible playbook vs cloud-init (bdobreli@redhat.com)
  - Fix openstack cloud-init runcmd templating (bdobreli@redhat.com)
  - [openstack] custom user commands for cloud-init (bdobreli@redhat.com)
  - Limit host scope during plays (mgugino@redhat.com)
  - Fix upgrade-control plane post_control_plane.yml (mgugino@redhat.com)
  - erase data only if variable is set. fix block indentatation
    (sarumuga@redhat.com)
  - uninstall playbook for GlusterFS (sarumuga@redhat.com)
  - Removing prefix and replacing with cidr, pool_start and pool_end variables.
    (mbruzek@gmail.com)
  - Make node start options configurable (celebdor@gmail.com)
  - Support master node high availability (jihoon.o@samsung.com)


author: Justin Pierce <jupierce@redhat.com> 3.9.0-0.46.0
changelog:
  - Tolerate OVS 2.6 in 3.10 as well (sdodson@redhat.com)
  - hosts.example: openshift_dns_ip should be node-specific (vrutkovs@redhat.com)
  - Add target mount for gluster block (m.judeikis@gmail.com)
  - Allow for overriding hosted registry_url variables (rteague@redhat.com)
  - Link to etcd v3 migration docs rather than suggesting dangerous things
    (sdodson@redhat.com)
  - Run openshift_version for image prep (mgugino@redhat.com)
  - Remove redundant openshift_hosted_registry_network_default
    (mgugino@redhat.com)
  - Correct the usage of bool and str (ghuang@redhat.com)
  - kernel module loading fix (m.judeikis@gmail.com)
  - add steps in bootstrap playbook to handle updating aws.conf file
    (jdiaz@redhat.com)
  - Add cloud config variables to the sample inventory (nelluri@redhat.com)
  - Run init/facts for docker upgrade (mgugino@redhat.com)
  - quick installer: remove UPGRADE_MAPPINGS (vrutkovs@redhat.com)
  - Update quick installer to support 3.9 and 3.8 (vrutkovs@redhat.com)
  - Updating deprecation variable check to use a module for cleaner output and
    use run_once to limit to one host. Add flag to skip dep check if desired
    (ewolinet@redhat.com)
  - Patch only if the file exists, otherwise we should copy the file in
    (ewolinet@redhat.com)
  - Add vsphere section for openshift_node_kubelet_args_dict (ghuang@redhat.com)
  - Correctly comparing against the current configmap when making es configmap
    patches (ewolinet@redhat.com)
  - add uninstall playbooks for compute/infra scale groups (jdiaz@redhat.com)
  - Adding ability to pass content and create files from content.
    (kwoodson@redhat.com)
  - Bug 1541946- waiting for master reboot now works behind bastion
    (fabian@fabianism.us)


author: Justin Pierce <jupierce@redhat.com> 3.9.0-0.47.0
changelog:
  - Update API healthz check to use uri module (mkhan@redhat.com)
  - fixed an oo_filter plugin lib_utils_oo_has_no_matching_selector to do set
    comparison (mwoodson@redhat.com)
  - Grafana roles updates. (mrsiano@gmail.com)
  - add deprovision playbook for cluster-operator infrastructure
    (jdiaz@redhat.com)
  - Add tox test to check for invalid playbook include (rteague@redhat.com)
  - Change openshift.common.hostname to inventory_hostname (mgugino@redhat.com)
  - Fix openshift-webconsole version check (mgugino@redhat.com)
  - add master deprovisioning (jdiaz@redhat.com)
  - Adding file locking to yedit. (kwoodson@redhat.com)
  - Log troubleshooting info when console install fails (spadgett@redhat.com)
  - CRI-O: use /var/run/crio/crio.sock for >=3.9 (gscrivan@redhat.com)
  - Fix pvc template by replacing None by lowercase none (toj315@gmail.com)
  - GlusterFS: Fix uninstall regression (jarrpa@redhat.com)
  - Add prometheus reader role for lightweight privileges. (mrsiano@gmail.com)
  - docker_image_availability: encode error message (vrutkovs@redhat.com)
  - Tweak things based on feedback (sdodson@redhat.com)
  - Update example inventory to drive required hostgroups to the top
    (sdodson@redhat.com)


author: Justin Pierce <jupierce@redhat.com> 3.9.0-0.48.0
changelog:
  - Fix openshift_hosted_registry_storage_glusterfs_path (mgugino@redhat.com)
  - Revert openshift_portal_net (mgugino@redhat.com)
  - skip search for an ami if openshift_aws_ami_map provides one
    (jdiaz@redhat.com)
  - Adding node autoapprover. (kwoodson@redhat.com)
  - Adding ability to state absent array items with index/curr_value.
    (kwoodson@redhat.com)
  - Change image location to CF 4.6 GA from Beta (simaishi@redhat.com)
  - Update templates to mount the configmap into the directory the new image
    expects (simaishi@redhat.com)
  - Fix for support multi-cluster heketi's topology (chinacoolhacker@gmail.com)


author: Justin Pierce <jupierce@redhat.com> 3.9.0-0.50.0
changelog:
  - Fix upgrade verify_upgrade_targets (mgugino@redhat.com)
  - Ensure wire-aggregator run on 3.7 upgrades (mgugino@redhat.com)
  - Add no_log to prevent printing AWS creds (sedgar@redhat.com)
  - added ci inventory and groups for containerized (mgugino@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.6.172-1
changelog:
  - Fixing podpresets perms for service-catalog-controller (ewolinet@redhat.com)
  - Fix log dumping on service failure (sdodson@redhat.com)
  - Fix etcd conditional check failure (admin@webresource.nl)
  - Fixing route spec caCertificate to be correctly capitalized
    (ewolinet@redhat.com)
  - Metrics: grant hawkular namespace listener role (mwringe@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.6.172.0.0-1
changelog:
  - Block etcdv3 migration for supported configurations (sdodson@redhat.com)
  - Shut down masters before taking an etcd backup (sdodson@redhat.com)
  - Updating template parameter replica to be more unique to avoid var scope
    creeping (ewolinet@redhat.com)
  - Add glusterfs_registry hosts to oo_all_hosts. (jarrpa@redhat.com)
  - Fix incorrect delegate_to in control plane upgrade (sdodson@redhat.com)
  - Allow storage migrations to be optional and/or non fatal (sdodson@redhat.com)
  - Add glusterfs hosts to oo_all_hosts so that hosts set initial facts.
    (abutcher@redhat.com)
  - Simplify generation of /etc/origin/node/resolv.conf (sdodson@redhat.com)
  - backport BZ#1422541 fix to release-3.6 (weshi@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.6.172.0.2-1
changelog:
  - Updating metrics role to create serviceaccounts and roles immediately
    (ewolinet@redhat.com)
  - Impl fluentd file buffer (nhosoi@redhat.com)
  - GlusterFS: Use default namespace when not native. (jarrpa@redhat.com)
  - Import templates will fail if user is not system:admin (jkaur@redhat.com)
  - add selector and storage class name to oc_pvc module (jcantril@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.6.173.0.0-1
changelog:
  - GlusterFS: Fix variable names in defaults. (jarrpa@redhat.com)
  - Fixes for auth_proxy, vxlan mode (srampal@cisco.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.6.173.0.2-1
changelog:
  - Use enterprise images for CFME enterprise deployments (sdodson@redhat.com)
  - Switch logging and metrics OCP image tag from 3.6.0 to v3.6
    (sdodson@redhat.com)
  - specfile tweak (jolamb@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.6.173.0.3-1
changelog:
  - GlusterFS: Copy SSH private key to master node. (jarrpa@redhat.com)
  - Fixing SA and clusterrole namespaces (ewolinet@redhat.com)
  - Remove invalid when: from vars: (rteague@redhat.com)
  - Refactor openshift_facts BIOS vendor discovery (rteague@redhat.com)
  - Resolve deprecation warnings in Contiv roles (rteague@redhat.com)


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.9.1-20
changelog:
  - Resolves: rhbz#1317662 - include manpage for docker run
  - Resolves: rhbz#1317627 - ensure that we join all the cgroups
  - built docker @projectatomic/rhel7-1.9 commit#0275914
  - built docker-selinux commit#69be4dc
  - built d-s-s commit#03dfc7b
  - built docker-utils commit#b851c03
  - built forward-journald commit#77e02a9


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.9.1-22
changelog:
  - Resolves: rhbz#1317991 - Set Delegate=yes for cgroup transient units
  - built docker @projectatomic/rhel7-1.9 commit#f97fb16
  - built docker-selinux commit#69be4dc
  - built d-s-s commit#03dfc7b
  - built docker-utils commit#b851c03
  - built forward-journald commit#77e02a9


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.9.1-23
changelog:
  - Resolves: rhbz#1318360 - delete bounds checking rules
  - built docker @projectatomic/rhel7-1.9 commit#f97fb16
  - built docker-selinux commit#8718b62
  - built d-s-s commit#c6f0553
  - built docker-utils commit#b851c03
  - built forward-journald commit#77e02a9


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.9.1-24
changelog:
  - built docker @projectatomic/rhel7-1.9 commit#78ee77d
  - built docker-selinux commit#8718b62
  - built d-s-s commit#c6f0553
  - built docker-utils commit#b851c03
  - built forward-journald commit#77e02a9


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.9.1-25
changelog:
  - Resolves: rhbz#1320302 - Backport fix for --cgroup-parent in docker
  - same commits as release -24, only added bug number


author: Kevin Traynor <ktraynor@redhat.com> 2.6.1-1.git20161206
changelog:
  - Update to OVS 2.6.1 + branch-2.6 bugfixes (#1335865)
  - Update to use DPDK 16.11 (#1335865)
  - Enable OVN


author: Scott Dodson <sdodson@redhat.com> 3.3.14-1
changelog:
  - a-o-i: Fix ansible_ssh_user question (smunilla@redhat.com)
  - Don't run node config upgrade hook if host is not a node.
    (dgoodwin@redhat.com)
  - Link ca to ca-bundle when ca-bundle does not exist. (abutcher@redhat.com)
  - Better error if no OpenShift RPMs are available. (dgoodwin@redhat.com)
  - Revert "Due to problems with with_fileglob lets avoid using it for now"
    (sdodson@redhat.com)
  - Replace some virsh commands by native virt_XXX ansible module
    (lhuard@amadeus.com)
  - Add warning at end of 3.3 upgrade if pluginOrderOverride is found.
    (dgoodwin@redhat.com)
  - a-o-i: Remove Legacy Config Upgrade (smunilla@redhat.com)
  - Fix etcd uninstall (sdodson@redhat.com)
  - Bug 1358951 - Error loading config, no such key: 'deployment' when using
    previously valid answers file (smunilla@redhat.com)
  - Fix standalone Docker upgrade missing symlink. (dgoodwin@redhat.com)
  - Open OpenStack security group for the service node port range
    (lhuard@amadeus.com)
  - Fix the “node on master” feature (lhuard@amadeus.com)
  - Due to problems with with_fileglob lets avoid using it for now
    (sdodson@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.3.15-1
changelog:
  - simplify repo configuration (jdetiber@redhat.com)
  - don't set virt_sandbox_use_nfs on Fedora, it was replaced by virt_use_nfs
    (maxamillion@fedoraproject.org)
  - Correct flannel cert variables. (abutcher@redhat.com)
  - Make note about ansible/install logs messing up ci tests
    (tbielawa@redhat.com)
  - remove fedora origin copr (it's in mainline fedora now), some dnf/yum clean
    up (maxamillion@fedoraproject.org)
  - Move nested print_read_config_error function into it's own function
    (tbielawa@redhat.com)
  - Makefile includes ci-pyflakes target now (tbielawa@redhat.com)
  - Fix BZ1368296 by quietly recollecting facts if the cache is removed
    (tbielawa@redhat.com)
  - Correct masterCA config typo. (abutcher@redhat.com)
  - don't gather facts when bootstrapping ansible for Fedora hosts
    (maxamillion@fedoraproject.org)
  - a-o-i: Add variant and variant_version to migration (smunilla@redhat.com)
  - Fix upgrade failure when master-config does not have pluginOrderOverride.
    (dgoodwin@redhat.com)
  - Add externalIPNetworkCIDRs to config (smunilla@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.3.16-1
changelog:
  - Sync image stream data (sdodson@redhat.com)
  - Update metrics example inventories (sdodson@redhat.com)
  - Preserve AWS options in sysconfig files. (dgoodwin@redhat.com)
  - Fix metrics for containerized installs (sdodson@redhat.com)
  - Cleanup items botched during rebase (sdodson@redhat.com)
  - add check for server and account already exist (mangirdas@judeikis.lt)
  - add run_once to repeatable actions (mangirdas@judeikis.lt)
  - Remove atomic check and cockpit.socket (smunilla@redhat.com)
  - Re-organize registry-console deployment. (abutcher@redhat.com)
  - Add registry console template (aweiteka@redhat.com)
  - Add support for Atomic Registry Installs (smunilla@redhat.com)
  - Apply indentation changes to some other lines (tbielawa@redhat.com)
  - Don't use openshift_env for cloud provider facts. (abutcher@redhat.com)
  - Enable PEP8 tests by default in the 'make ci' target now
    (tbielawa@redhat.com)
  - Fix PEP8 errors in cli_installer.py (tbielawa@redhat.com)
  - Fix PEP8 in openshift_ansible.py (tbielawa@redhat.com)
  - Fix PEP8 in oo_config.py (tbielawa@redhat.com)
  - Fix PEP8 in variants.py (tbielawa@redhat.com)
  - Fix PEP8 in facts_callback.py (tbielawa@redhat.com)
  - fix duplicate src field (jdetiber@redhat.com)
  - Refactor volume directory creation (sdodson@redhat.com)
  - Rely on IMAGE_PREFIX and IMAGE_VERSION defaults from the templates themselves
    (sdodson@redhat.com)
  - Add metrics exports to nfs role, move exports to /etc/exports.d/openshift-
    ansible.exports (sdodson@redhat.com)
  - Add ability to disable pvc creation (sdodson@redhat.com)
  - Fix registry volume (sdodson@redhat.com)
  - add selectors for metrics and logging (sdodson@redhat.com)
  - Add logic to detect existing installs (sdodson@redhat.com)
  - Deploy metrics after our router (sdodson@redhat.com)
  - Add Enterprise 3.3 template (sdodson@redhat.com)
  - Pull in keynote demo changes (sdodson@redhat.com)
  - [tags] add some support for running a subset of config via tags
    (jdetiber@redhat.com)
  - [metrics] add filter to clean up hostname for use in metrics deployment
    (jdetiber@redhat.com)
  - enable service-serving-cert-signer by default (abutcher@redhat.com)
  - Fix review comments (mkumatag@in.ibm.com)
  - Remove duplicate flannel registration (mkumatag@in.ibm.com)


author: Scott Dodson <sdodson@redhat.com> 3.3.17-1
changelog:
  - Reload units after node container service modified. (dgoodwin@redhat.com)
  - Fix flannel check (mkumatag@in.ibm.com)
  - Default to port 80 when deploying cockpit-ui (smunilla@redhat.com)
  - Set cloudprovider kind with openshift_facts. (abutcher@redhat.com)
  - Fix openstack cloudprovider template conditional. (abutcher@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.3.18-1
changelog:
  - Enable dynamic storage (sdodson@redhat.com)
  - Change how we set master's metricsPublicURL (sdodson@redhat.com)
  - update kubelet argument example with references to new pods-per-core and new
    max-pods threshold for 3.3 (jeder@redhat.com)
  - update kubelet argument example with references to new pods-per-core and new
    max-pods threshold for 3.3 (jeder@redhat.com)


author: Troy Dawson <tdawson@redhat.com> 3.3.19-1
changelog:
  - update flannel_subnet_len default value (mkumatag@in.ibm.com)
  - Reload docker facts after upgrading docker (sdodson@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.3.20-1
changelog:
  - Restore network plugin configuration (sdodson@redhat.com)
  - Remove openshift_master_metrics_public_url (abutcher@redhat.com)
  - Bug 1371836 - The variant should be Registry 3.3 (smunilla@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.3.22-1
changelog:
  - Secure registry for atomic registry deployment (deployment_subtype=registry).
    (abutcher@redhat.com)
  - Record schedulability of node prior to upgrade and re-set it to that
    (sdodson@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.7.8-1
changelog:
  - Allow disabling authorization migration check (sdodson@redhat.com)
  - Nuke /var/lib/dockershim/sandbox/* while nodes are drained
    (sdodson@redhat.com)
  - Fix extension script for catalog (mgugino@redhat.com)
  - Regex anchors changed to match protocol start and ports.
    (kwoodson@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.7.10-1
changelog:
  - add nfs storage type (sdodson@redhat.com)
  - Update prometheus to 2.0.0 GA (zgalor@redhat.com)
  - Fix openshift_env fact creation within openshift_facts. (abutcher@redhat.com)
  - fix type in authroize (jchaloup@redhat.com)
  - inventory: Add example for service catalog vars (smilner@redhat.com)
  - Add v3.7 a-o-i upgrade version mappings (sdodson@redhat.com)
  - 3.7 quick installer support (sdodson@redhat.com)
  - GlusterFS: Remove extraneous line from glusterblock template
    (jarrpa@redhat.com)
  - Place-holder for prerequisites.yml (mgugino@redhat.com)
  - Refactor etcd image (mgugino@redhat.com)
  - Move openshift-prometheus out of openshift-hosted (rteague@redhat.com)
  - registry-console: align image and check (lmeyer@redhat.com)
  - registry-console template 3.7 consistency (lmeyer@redhat.com)
  - registry-console template 3.6 consistency (lmeyer@redhat.com)
  - Only remove empty keys from env if env exists (sdodson@redhat.com)
  - GlusterFS: Add configuration for auto creating block-hosting volumes
    (jarrpa@redhat.com)
  - Upgrade to etcd 3.2 (sdodson@redhat.com)
  - Allow cluster IP for docker-registry service to be set (hansmi@vshn.ch)
  - Bug 1510496 - logging: honor ES PVC size (jwozniak@redhat.com)
  - Fixing islnk. (kwoodson@redhat.com)
  - Fix stale data in openshift_facts for logging (mgugino@redhat.com)
  - Run registry auth after docker restart (mgugino@redhat.com)
  - Alternative method to create docker registry auth creds (mgugino@redhat.com)
  - GlusterFS: Add gluster-s3 functionality (jarrpa@redhat.com)
  - GlusterFS: Add glusterblock functionality (jarrpa@redhat.com)
  - GlusterFS: Update heketi templates for latest version (jarrpa@redhat.com)
  - GlusterFS: Specify resource requests (jarrpa@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.7.11-1
changelog:
  - papr: use new PAPR_PULL_TARGET_BRANCH (jlebon@redhat.com)
  - papr: auto-detect image tag to use and bump to f27 (jlebon@redhat.com)
  - Bug 1514417 - Adding correct advertise-client-urls (shawn.hurley21@gmail.com)
  - Bug 1512793- Fix idempotence issues in ASB deploy (fabian@fabianism.us)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.7.12-1
changelog:
  - storage_glusterfs: fix typo (lmeyer@redhat.com)
  - retry package operations (lmeyer@redhat.com)
  - Add check for gluterFS DS to stop restarts (m.judeikis@gmail.com)
  - Add support for external glusterfs as registry backend (m.judeikis@gmail.com)
  - dist.iteritems() no longer exists in Python 3. (jpazdziora@redhat.com)
  - [3.7] Correct usage of include_role (rteague@redhat.com)
  - hosted_registry: clean up tmp mount point and fstab (dusty@dustymabe.com)
  - Add role to configure project request template (hansmi@vshn.ch)
  - Removing setting prefix and version facts in openshift_logging to let the
    component roles set their defaults (ewolinet@redhat.com)
  - Fixing origin default for es proxy (ewolinet@redhat.com)
  - Addressing tox errors (ewolinet@redhat.com)
  - Addressing comments (ewolinet@redhat.com)
  - Updating logging components image defaulting pattern to match
    openshift_logging pattern (ewolinet@redhat.com)


author: - Maxim Burgerhout <wzzrd@fedoraproject.org> - 0.71b-2
changelog:
  - Enable tests to be run during build
  - Remove EL5 code from specfile in order to 
  - Fix %files section to include the proper files


author: - Maxim Burgerhout <wzzrd@fedoraproject.org> - 0.71c-1
changelog:
  - Build with new upstream tarball containing fixes for hashbangs, exec bits,
    a LICENSE file and more.


author: Troy Dawson <tdawson@redhat.com> 3.3.13-1
changelog:
  - Fix warnings in OpenStack provider with ansible 2.1 (lhuard@amadeus.com)
  - Mount /sys rw (sdodson@redhat.com)
  - Update uninstall.yml (sdodson@redhat.com)
  - Fix padding on registry config (sdodson@redhat.com)


author: Troy Dawson <tdawson@redhat.com> 3.0.91-1
changelog:
  - Removed the echo line and replaced it with inline comment. To keep 99-origin-
    dns.sh from adding a new line in /etc/resolv.conf everytime the
    NetworkManager dispatcher script is executed. (jnordell@redhat.com)
  - Extend multiple login provider check to include origin. (abutcher@redhat.com)
  - Allow multiple login providers post 3.2. (abutcher@redhat.com)
  - Make rhel_subscribe role able to subscribe for OSE 3.2 (lhuard@amadeus.com)
  - Ensure yum-utils installed. (abutcher@redhat.com)
  - Remove newline from docker_options template string. (abutcher@redhat.com)
  - Use systemctl restart docker instead of ansible service.
    (dgoodwin@redhat.com)
  - Use cluster hostname while generating certificate on the master nodes
    (vishal.patil@nuagenetworks.net)
  - Fix playbooks/openshift-master/library move to symlink (sdodson@redhat.com)
  - Task "Update router image to current version" failed, if router not in
    default namespace (jkroepke@users.noreply.github.com)
  - docker-current was missing from the containerized atomic-openshift-
    node.service file (maci.stgn@gmail.com)
  - fixed issue with blank spaces instead commas as variables template separators
    (j.david.nieto@gmail.com)
  - Refactor where we compute no_proxy hostnames (sdodson@redhat.com)
  - Fix for ansible v2 (sdodson@redhat.com)
  - Fix rhel_subscribe (sdodson@redhat.com)
  - remove interpolated g_all_hosts with_items arg from upgrade playbooks
    (cboggs@rallydev.com)
  - Set openshift.common.hostname early in playbook execution.
    (abutcher@redhat.com)
  - Fix 'recursive loop detected in template string' for upgrading variable.
    (abutcher@redhat.com)
  - a-o-i: No proxy questions for 3.0/3.1 (smunilla@redhat.com)
  - Fix minor upgrades in 3.1 (sdodson@redhat.com)
  - Don't pull cli image when we're not containerized (sdodson@redhat.com)
  - Check consumed pools prior to attaching. (abutcher@redhat.com)


author: Troy Dawson <tdawson@redhat.com> 3.0.92-1
changelog:
  -  Conditionally bind mount /usr/bin/docker-current when it is present (#1941)
    (sdodson@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.0.97-1
changelog:
  - Only run node specific bits on nodes (sdodson@redhat.com)
  - Update main.yaml (detiber@gmail.com)
  - Hardcoded values in "launch_instances" - isue # 1970 (daniel@dumdan.com)
  - XPAAS v1.3.1 content for Origin 1.1 / OSE 3.1 (sdodson@redhat.com)
  - XPAAS v1.3.1 release for Origin 1.2 / OSE 3.2 (sdodson@redhat.com)
  - Configure default docker logging options. (abutcher@redhat.com)
  - Run rhel_subscribe on l_oo_all_hosts rather than all (sdodson@redhat.com)
  - Fix error with stopping services that may not exist. (dgoodwin@redhat.com)
  - Add haproxy_frontend_port to vars for openshift-loadbalancer.
    (abutcher@redhat.com)
  - Move os_firewall_allow from defaults to role dependencies.
    (abutcher@redhat.com)
  - Ensure registry url evaluated when creating router. (abutcher@redhat.com)
  - Document protocol in readme aws. (abutcher@redhat.com)
  - Revert openshift-certificates changes. (abutcher@redhat.com)
  - wait metrics-deployer complete (need to configure nodes before hosted
    services) (you@example.com)
  - switch to using sig release packages (jdetiber@redhat.com)
  - temporarily disable gpg checking until we have a way to cleanly enable it
    (jdetiber@redhat.com)
  - Switch to using CentOS SIG repos for Origin installs (jdetiber@redhat.com)
  - Separate master and haproxy config playbooks. (abutcher@redhat.com)
  - Cleanup bin, test and roles/openshift_ansible_inventory following move to
    openshift-tools (abutcher@redhat.com)
  - Catch more uninstall targets (sdodson@redhat.com)
  - Adding openshift_clock parameters to example inventory files
    (jstuever@redhat.com)
  - Enable openshift_clock role for openshift_master, openshift_node, and
    openshift_etcd (jstuever@redhat.com)
  - Add openshift_clock role to manage system clocks (jstuever@redhat.com)
  - Allow clock role in openshift_facts (jstuever@redhat.com)
  - Consolidate ca/master/node certificates roles into openshift_certificates.
    (abutcher@redhat.com)
  - allow for overriding dns_flavor for openstack provider (jdetiber@redhat.com)
  - add user-data file back to openstack provisioner (jdetiber@redhat.com)
  - g_all_hosts with templated with_items causes errors with ansible 1.9.4 under
    some conditions (jdetiber@redhat.com)
  - openstack_fixes (jdetiber@redhat.com)
  - libvirt_fixes (jdetiber@redhat.com)
  - gce fixes (jdetiber@redhat.com)
  - aws provider fixes (jdetiber@redhat.com)
  - Call evaluate_groups from update_repos_and_packages (jdetiber@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.3.0-1
changelog:
  - Restore mistakenly reverted code. (dgoodwin@redhat.com)
  - Add openshift_loadbalancer_facts role to set lb facts prior to running
    dependencies. (abutcher@redhat.com)
  - Bug 1338726 - never abort install if the latest version of docker is already
    installed (bleanhar@redhat.com)
  - Preserve proxy config if it's undefined (sdodson@redhat.com)
  - At least backup things (sdodson@redhat.com)
  - Use unique play names to make things easier to debug (sdodson@redhat.com)
  - Ansible 2.1 support. (abutcher@redhat.com)
  - add skydns port 8053 to openstack master sec group (jawed.khelil@amadeus.com)
  - fix dns openstack flavor instead of openshift flavor
    (jawed.khelil@amadeus.com)
  - Fix Docker 1.10 problems with empty tags and trailing : (dgoodwin@redhat.com)
  - ensure htpasswd file exists (tob@butter.sh)
  - Docker 1.10 Upgrade (dgoodwin@redhat.com)
  - Add flag to manage htpasswd, or not. (tob@butter.sh)


author: Scott Dodson <sdodson@redhat.com> 3.2.10-1
changelog:
  - Reset versions for 3.2 branch
  - Fix dnf variant of rpm_versions.sh (sdodson@redhat.com)
  - Make image stream munging optional (sdodson@redhat.com)
  - Add aos-3.3 to tito releasers.conf (sdodson@redhat.com)
  - Automatic commit of package [openshift-ansible] release [3.3.1-1].
    (sdodson@redhat.com)
  - Add v1.3 examples (sdodson@redhat.com)
  - Change the examples content sync directory (sdodson@redhat.com)
  - Add gte_3_3 (sdodson@redhat.com)
  - Adds quotes to gpgkey element in byo/config.yml (smerrill@covermymeds.com)
  - Restart dnsmasq encase it was already running (sdodson@redhat.com)
  - Add support for supplying a dnsmasq.conf file (sdodson@redhat.com)
  - Update image streams with SCL 2.2 components (sdodson@redhat.com)
  - Bump rhel subscribe default version. (abutcher@redhat.com)
  - Revert "Speed up copying OpenShift examples" (abutcher@afrolegs.com)
  - Switch to repoquery, enable plugins for satellite support
    (sdodson@redhat.com)
  - update conditional expression to save steps (lxia@redhat.com)
  - Enable additional 'virt_sandbox_use_nfs' seboolean as per documentation:
    (george.goh@redhat.com)
  - Set any_errors_fatal for initialize facts play. (abutcher@redhat.com)
  - Set any_errors_fatal for etcd facts play. (abutcher@redhat.com)
  - Speed up copying OpenShift examples (tbielawa@redhat.com)
  - Check if last rule is DROP when inserting iptables rules.
    (abutcher@redhat.com)
  - Don't upgrade docker on non-containerized etcd. (abutcher@redhat.com)
  - Access embedded_etcd variable from oo_first_master hostvars.
    (abutcher@redhat.com)
  - Add missing quote in metrics deployer template. (dgoodwin@redhat.com)
  - Allow flag to uninstall playbook to preserve images. (dgoodwin@redhat.com)
  - Add MODE to metrics deployer (sdodson@redhat.com)
  - NetworkManager service never changes (tbielawa@redhat.com)
  - Update the rest of the templates (sdodson@redhat.com)
  - Update logging and metrics templates (sdodson@redhat.com)
  - Block Docker 1.10 upgrade playbook when run against an Atomic OS.
    (dgoodwin@redhat.com)
  - If registry_url != registry.access.redhat.com then modify image streams
    (sdodson@redhat.com)
  - Add 30 second pause before retrying to start the node (sdodson@redhat.com)
  - Stop dumping debug output, re-try startng the node once (sdodson@redhat.com)
  - Fix uninstall.yml indentation for deamon-reload
    (florian.lambert@enovance.com)
  - Fix no proxy hostnames during upgrade. (dgoodwin@redhat.com)
  - Attempt to fix containerized node start failure with Docker 1.10.
    (dgoodwin@redhat.com)
  - also volume-mount /etc/sysconfig/docker (tob@butter.sh)
  - Separate uninstall plays by group. (abutcher@redhat.com)
  - Add per-service environment variables. (abutcher@redhat.com)
  - - Prevent the script to override n number of the time the same nameserver -
    Prevent the script to echo blank values from IP4_NAMESERVERS variable
    (william17.burton@gmail.com)
  - Make a note about Requires: docker (sdodson@redhat.com)
  - Remove Docker 1.10 requirement temporarily. (dgoodwin@redhat.com)
  - Fix docker 1.10 upgrade on embedded etcd masters. (dgoodwin@redhat.com)
  - Add lower case proxy variables (pascal.bach@siemens.com)
  - default unit in openshift_facts (you@example.com)
  - add unit in seconds for metrics resolution (you@example.com)


author: Scott Dodson <sdodson@redhat.com> 3.2.11-1
changelog:
  - Fix up some broken markdown formatting (mostly tables) (tbielawa@redhat.com)
  - Rename things to avoid conflicts with paas sig release rpms
    (sdodson@redhat.com)
  - Don't special case origin on centos (sdodson@redhat.com)
  - Various hosted component improvements (abutcher@redhat.com)
  - Clean up some deprecation warnings (tbielawa@redhat.com)
  - Add CentOS PaaS SIG repos for RHEL (sdodson@redhat.com)
  - Make /var/lib/origin mounted rslave (sdodson@redhat.com)
  - fix "hapoxy" typo in loadbalancer playbook (Mathias.Merscher@dg-i.net)
  - Fix bin/cluster libvirt related error (jdetiber@redhat.com)
  - Add libselinux-python as a dependency for the installation process
    (frederic.boulet@gmail.com)


author: Scott Dodson <sdodson@redhat.com> 3.2.12-1
changelog:
  - Convert openshift_release and openshift_version to strings for startswith
    (sdodson@redhat.com)
  - Symlink ansible 2.x locations to ansible 1.9 locations (sdodson@redhat.com)
  - Clarify message when old docker pre-installed but 1.10+ requested.
    (dgoodwin@redhat.com)
  - Fix quick install 3.2 upgrade path. (dgoodwin@redhat.com)
  - Fix upgrade with docker_version set. (dgoodwin@redhat.com)
  - Move the bash completion into the cli role. Only add when not containerized
    (tbielawa@redhat.com)
  - [master] add support for setting auditConfig (jdetiber@redhat.com)
  - Remove too recent pylint option keys. (dgoodwin@redhat.com)
  - pylint fixes (dgoodwin@redhat.com)
  - Install bash-completion package for the oc/oadm tools (tbielawa@redhat.com)
  - Fix more docker role logic. (dgoodwin@redhat.com)
  - Add checks to docker role for 1.9.1+. (dgoodwin@redhat.com)
  - Make libvirt’s VM use virtio-scsi insteal of virtio-blk
    (lhuard@amadeus.com)
  - Fix erroneous pylint error (smunilla@redhat.com)
  - Remove 3.0 and 3.1 upgrade sub-dirs. (dgoodwin@redhat.com)
  - Rename upgrade to just v3_2 as it's now major and minor.
    (dgoodwin@redhat.com)
  - Set registry replicas = 1 when no storage specified. (abutcher@redhat.com)
  - Re-align the OpenStack firewall rules with the iptables rules
    (lhuard@amadeus.com)
  - Fix bin/cluster openstack related error (lhuard@amadeus.com)
  - Fix upgrades with an openshift_image_tag set. (dgoodwin@redhat.com)
  - ops-docker-loopback-to-direct-lvm.yml: fix typo on the variable name
    "cli_name vs cli_host" (gael.lambert@redhat.com)
  - Remove cleanup code from 1.0 to 1.1 upgrade era (sdodson@redhat.com)
  - Move repoquery_cmd fact setting into a more logical place.
    (dgoodwin@redhat.com)
  - Add dependency on docker to openshift_docker role. (dgoodwin@redhat.com)
  - Enable pullthrough by default in registry config for object storage.
    (abutcher@redhat.com)
  - Fix gpg key path (sdodson@redhat.com)
  - Use proper startswith. (dgoodwin@redhat.com)
  - Sync latest image stream content (sdodson@redhat.com)
  - Role dependency cleanup (abutcher@redhat.com)
  - Remove/update TODOs. (dgoodwin@redhat.com)
  - Remove all debug used during devel of openshift_version.
    (dgoodwin@redhat.com)
  - Update quick upgrade to remove unsupported options. (dgoodwin@redhat.com)
  - Move repoquery fact definition to openshift_common. (dgoodwin@redhat.com)
  - Remove Origin 1.1 as an option (smunilla@redhat.com)
  - Add symlinks for node templates. (dgoodwin@redhat.com)
  - Fixes for Ansible 2.1. (dgoodwin@redhat.com)
  - Update repoquery_cmd definitions to match latest in master.
    (dgoodwin@redhat.com)
  - Fix unsafe bool usage. (dgoodwin@redhat.com)
  - Fix typo in example inventories. (dgoodwin@redhat.com)
  - Fixes for non-containerized separate etcd hosts. (dgoodwin@redhat.com)
  - More docker upgrade fixes. (dgoodwin@redhat.com)
  - Only nuke images when crossing the Docker 1.10 boundary in upgrade.
    (dgoodwin@redhat.com)
  - Fix node/openvswitch containers not restarting after upgrade.
    (dgoodwin@redhat.com)
  - Allow skipping Docker upgrade during OpenShift upgrade. (dgoodwin@redhat.com)
  - a-o-i: Add Origin 1.2 Installs (smunilla@redhat.com)
  - a-o-i: Add support for installing OpenShift Origin (smunilla@redhat.com)
  - Refactor 3.2 upgrade to avoid killing nodes without evac.
    (dgoodwin@redhat.com)
  - Update docker upgrade playbook to be more flexible. (dgoodwin@redhat.com)
  - Add missing defaults file. (dgoodwin@redhat.com)
  - Use common fact initialization include in upgrade. (dgoodwin@redhat.com)
  - Fix use of v3.2 format for openshift_release in upgrade.
    (dgoodwin@redhat.com)
  - Remove more legacy upgrade playbooks. (dgoodwin@redhat.com)
  - Fix docker restarts during openshift_version role. (dgoodwin@redhat.com)
  - Support setting a docker version in inventory. (dgoodwin@redhat.com)
  - Fix version facts with trailing newline. (dgoodwin@redhat.com)
  - Document the new and old version variables. (dgoodwin@redhat.com)
  - Normalize some of the version inventory vars which users might mistakenly
    enter wrong. (dgoodwin@redhat.com)
  - Check that detected version matches openshift_release in rpm installations.
    (dgoodwin@redhat.com)
  - Block attempts to install origin without specifying any release info.
    (dgoodwin@redhat.com)
  - More stable lookup of running openshift version. (dgoodwin@redhat.com)
  - Upgrade fixes. (dgoodwin@redhat.com)
  - Fix typo in facts. (dgoodwin@redhat.com)
  - Cleanup, fix 3.1 version bug in facts. (dgoodwin@redhat.com)
  - More version fixes. (dgoodwin@redhat.com)
  - Support origin alpha tags. (dgoodwin@redhat.com)
  - More stable containerized version lookup. (dgoodwin@redhat.com)
  - Remove old upgrade playbooks. (dgoodwin@redhat.com)
  - Fix performance hit in openshift_facts. (dgoodwin@redhat.com)
  - Always populate openshift_image_tag and openshift_pkg_version.
    (dgoodwin@redhat.com)
  - Remove the use of the upgrading variable. (dgoodwin@redhat.com)
  - Don't be specific about rpm version to upgrade to for now.
    (dgoodwin@redhat.com)
  - Restore 3.2 RPM version check before upgrading. (dgoodwin@redhat.com)
  - Make openshift_version role docker dep conditional. (dgoodwin@redhat.com)
  - Fix rpm installs. (dgoodwin@redhat.com)
  - Temporary fix for upgrading issue. (dgoodwin@redhat.com)
  - Remove unused docker facts tasks. (dgoodwin@redhat.com)
  - Fix version unset bug, and set common ver fact on containerized nodes.
    (dgoodwin@redhat.com)
  - Fix missing openshift.common.version fact on containerized nodes.
    (dgoodwin@redhat.com)
  - Begin major simplification of 3.2 upgrade. (dgoodwin@redhat.com)
  - Respect image tag/pkg version during upgrade. (dgoodwin@redhat.com)
  - Force version to latest 3.2 during upgrade. (dgoodwin@redhat.com)
  - Verify openshift_release is correct or absent in inventory before upgrade.
    (dgoodwin@redhat.com)
  - Drop unused and broken "when" in vars section. (dgoodwin@redhat.com)
  - Do not install rpm for version in openshift_version role.
    (dgoodwin@redhat.com)
  - Update openshift_version author info. (dgoodwin@redhat.com)
  - Fix installing release 3.1 not converting to precise version.
    (dgoodwin@redhat.com)
  - Stop requiring/using first master version fact and use openshift_version var
    instead. (dgoodwin@redhat.com)
  - Break version calc out into a role, separate yaml for containerized/rpm.
    (dgoodwin@redhat.com)
  - Drop unnecessary node playbook version calculation. (dgoodwin@redhat.com)
  - Add leading v for remaining IMAGE_VERSION templates. (dgoodwin@redhat.com)
  - Fix error restarting master service that may not be there.
    (dgoodwin@redhat.com)
  - Fix use of openshift_version in ca role. (dgoodwin@redhat.com)
  - Fix image tag to rpm version filter. (dgoodwin@redhat.com)
  - Fix error with containerized etcd install. (dgoodwin@redhat.com)
  - Refactor openshift_version behavior. (dgoodwin@redhat.com)
  - Protect installed version on subsequent masters. (dgoodwin@redhat.com)
  - Get rpm installations functional again. (dgoodwin@redhat.com)
  - Convert generic openshift_version=3.2 to specific early in install.
    (dgoodwin@redhat.com)
  - Preserve node versions on re-run. (dgoodwin@redhat.com)
  - Fix version compare with using just 3.2 or 1.2. (dgoodwin@redhat.com)
  - Hookup node configuration. (dgoodwin@redhat.com)
  - Complete installation of first master containerized. (dgoodwin@redhat.com)
  - Stop downgrading Docker because we don't know what version to install yet.
    (dgoodwin@redhat.com)
  - Work towards determining openshift_version when unspecified.
    (dgoodwin@redhat.com)
  - Remove now unnecessary pull and ver check in openshift_docker role.
    (dgoodwin@redhat.com)
  - Set openshift_version in config playbooks for first master.
    (dgoodwin@redhat.com)
  - Debug output. (dgoodwin@redhat.com)
  - cleanup broken symlinks - lookup_plugins filter_plugins (tdawson@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.2.13-1
changelog:
  - Temporarily link registry config templates for ansible 1.9.x support.
    (abutcher@redhat.com)
  - Remove relative lookup for registry config and check for skipped update in
    registry redeploy conditional. (abutcher@redhat.com)
  - Arbitrary Installer yaml (smunilla@redhat.com)
  - Check for existence of sebooleans prior to setting. (abutcher@redhat.com)
  - Automatic commit of package [openshift-ansible] release [3.3.2-1].
    (sdodson@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.8.29-1
changelog:
  - Use openshift_node_use_openshift_sdn when doing a containerized node upgrade
    (vrutkovs@redhat.com)
  - Fix: change import_role to include_role (mgugino@redhat.com)
  - docker storage setup for ami building (jdiaz@redhat.com)
  - Properly cast crio boolean variables to bool (mgugino@redhat.com)
  - Build containerized host group dynamically (mgugino@redhat.com)
  - install base_packages on oo_all_hosts (mgugino@redhat.com)
  - Fix error in variable in comment (mscherer@users.noreply.github.com)
  - Switch back to dynamic include_role in logging loops (sdodson@redhat.com)
  - Use Contiv version 1.2.0 (flamingo@2thebatcave.com)
  - Contiv multi-master and other fixes (flamingo@2thebatcave.com)
  - Add missing dependency on openshift_facts (sdodson@redhat.com)
  - upgrades: set openshift_client_binary fact when running on oo_first_master
    host (vrutkovs@redhat.com)
  - Install web console server (spadgett@redhat.com)
  - Remove become=no from various roles and tasks (mgugino@redhat.com)
  - Don't overwrite node's systemd units for containerized install
    (vrutkovs@redhat.com)
  - Fix docker_image_availability checks (mgugino@redhat.com)
  - test_oc_scale: add more scale test cases (vrutkovs@redhat.com)
  - test_oc_scale: fix test docstrings (vrutkovs@redhat.com)
  - Import prerequisites.yml for OpenStack (tomas@sedovic.cz)
  - Set the correct path to the openstack.conf file (tomas@sedovic.cz)
  - Return a openshift_node_labels as a dict (tomas@sedovic.cz)
  - Remove last of openshift_node role meta-depends (mgugino@redhat.com)
  - Fix yaml syntax error in the sample inventory (tomas@sedovic.cz)
  - Adding ability to update ami drive size. (kwoodson@redhat.com)
  - Add origin- prefix to ASB image (fabian@fabianism.us)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.8.30-1
changelog:
  - Adding logic to disable and reenable external communication to ES during full
    restart (ewolinet@redhat.com)
  - Adding logic to do a full cluster restart if we are incrementing our major
    versions of ES (ewolinet@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.8.31-1
changelog:
  - Fixing openshift_hosted variable. (kwoodson@redhat.com)
  - Don't hardcode the network interface in the openshift_logging_mux role
    (nkinder@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.8.32-1
changelog:
  - Only automatically restart if cluster is in yellow or green state
    (ewolinet@redhat.com)
  - Automatic commit of package [openshift-ansible] release [3.9.0-0.24.0].
    (smunilla@redhat.com)
  - Create swapoff module (mgugino@redhat.com)
  - Update CF 4.6 Beta templates in openshift_management directory
    (simaishi@redhat.com)
  - installer: increase content width for commands, which may output URLs
    (vrutkovs@redhat.com)
  - Only rollout console if config changed (spadgett@redhat.com)
  - Change dnsmasq Requires to Wants.
    https://bugzilla.redhat.com/show_bug.cgi?id=1532960 (rchopra@redhat.com)
  - Protect master installed version during node upgrades (mgugino@redhat.com)
  - [1506866] Update haproxy.cfg.j2 (rteague@redhat.com)
  - Split control plane and component install in deploy_cluster
    (ccoleman@redhat.com)
  - Add clusterResourceOverridesEnabled to console config (spadgett@redhat.com)
  - [1537105] Add openshift_facts to flannel role (rteague@redhat.com)
  - PyYAML is required by openshift_facts on nodes (ccoleman@redhat.com)
  - Move origin-gce roles and playbooks into openshift-ansible
    (ccoleman@redhat.com)
  - Directly select the ansible version (ccoleman@redhat.com)
  - use non-deprecated REGISTRY_OPENSHIFT_SERVER_ADDR variable to set the
    registry hostname (bparees@redhat.com)
  - update Dockerfile to add boto3 dependency (jdiaz@redhat.com)
  - Automatic commit of package [openshift-ansible] release [3.9.0-0.23.0].
    (smunilla@redhat.com)
  - Lowercase node names when creating certificates (vrutkovs@redhat.com)
  - NFS Storage: make sure openshift_hosted_*_storage_nfs_directory are quoted
    (vrutkovs@redhat.com)
  - docker_image_availability: enable skopeo to use proxies (lmeyer@redhat.com)
  - Fix etcd scaleup playbook (mgugino@redhat.com)
  - Bug 1524805- ServiceCatalog now works disconnected (fabian@fabianism.us)
  - [1506750] Ensure proper hostname check override (rteague@redhat.com)
  - failed_when lists are implicitely ANDs, not ORs (vrutkovs@redhat.com)
  - un-hardcode default subnet az (jdiaz@redhat.com)
  - Install base_packages earlier (mgugino@redhat.com)
  - allow uninstalling AWS objects created by prerequisite playbook
    (jdiaz@redhat.com)
  - Ensure that node names are lowerecased before matching (sdodson@redhat.com)
  - Bug 1534020 - Only set logging and metrics URLs if console config map exists
    (spadgett@redhat.com)
  - Bug 1536262: Default console and TSB node selector to
    openshift_hosted_infra_selector (spadgett@redhat.com)
  - Migrate master-config.yaml asset config (spadgett@redhat.com)
  - Automatic commit of package [openshift-ansible] release [3.9.0-0.22.0].
    (smunilla@redhat.com)
  - Fix master scaleup play (mgugino@redhat.com)
  - use admin credentials for tsb install operations (bparees@redhat.com)
  - Fix etcd-upgrade sanity checks (mgugino@redhat.com)
  - Bug 1536253: Pass `--config` flag on oc commands when installing console
    (spadgett@redhat.com)
  - Fix enterprise registry-console prefix (sdodson@redhat.com)
  - [release-3.7] Fix enterprise registry console image prefix
    (sdodson@redhat.com)
  - [release-3.6] Fix enterprise registry console image prefix
    (sdodson@redhat.com)
  - Bug 1512825 - add mux pod failed for Serial number 02 has already been issued
    (nhosoi@redhat.com)
  - Remove old console asset config (spadgett@redhat.com)
  - Fix OpenStack readme (tomas@sedovic.cz)
  - Add support for Amazon EC2 C5 instance types (rteague@redhat.com)
  - Add templates to v3.9 (simaishi@redhat.com)
  - Quick installer: deprecate upgrades (vrutkovs@redhat.com)
  - Use Beta repo path (simaishi@redhat.com)
  - CF 4.6 templates (simaishi@redhat.com)
  - Fix node scaleup plays (mgugino@redhat.com)
  - Rollout console after template service broker install (spadgett@redhat.com)
  - Add ability to mount volumes into system container nodes (mgugino@redhat.com)
  - Use openshift_is_containerized instead of openshift_is_atomic when installing
    etcd (vrutkovs@redhat.com)
  - Ensure we are running oc execs against running pods (ewolinet@redhat.com)
  - Setting default storage_class_names for when calling
    openshift_logging_elasticsearch role (ewolinet@redhat.com)
  - Bug 1535947: Fix missing task in metrics, logging uninstall playbooks
    (spadgett@redhat.com)
  - Make openshift_web_console_prefix defaults like other components
    (sdodson@redhat.com)
  - Allow for firewalld on atomic host (sdodson@redhat.com)
  - Drop the testing repo var from openstack readme (tomas@sedovic.cz)
  - Add Azure to support openshift_cloudprovider_kind (wehe@redhat.com)
  - Fix to master-internal elb scheme (mazzystr@gmail.com)
  - bug 1523047. Annotate ops projects with an .operation prefix
    (jcantril@redhat.com)
  - Automatic commit of package [openshift-ansible] release [3.9.0-0.21.0].
    (smunilla@redhat.com)
  - Pull openshift_image_tag from oo_masters_to_config rather oo_first_master.
    (abutcher@redhat.com)
  - Ensure atomic_proxies are configured with docker (mgugino@redhat.com)
  - Default install_result when reloading generated facts. (abutcher@redhat.com)
  - Add call to 3.8 playbook in 3.9 upgrade (sdodson@redhat.com)
  - Remove 3.8 and 3.9 specific steps right now (sdodson@redhat.com)
  - Exclude 3.9 packages during 3.8 upgrade (sdodson@redhat.com)
  - fix typos (sdodson@redhat.com)
  - Ensure openshift_client_binary is set (sdodson@redhat.com)
  - Add init/main.yml to etc-upgrade (mgugino@redhat.com)
  - health checks: update required pkg versions (lmeyer@redhat.com)
  - health checks: factor out get_required_version (lmeyer@redhat.com)
  - package_version check: reuse get_major_minor_version (lmeyer@redhat.com)
  - Rework default TSB prefix and imagename to match other services
    (vrutkovs@redhat.com)
  - Fix a typo in "Determine if growpart is installed" (vrutkovs@redhat.com)
  - Check rc for commands with openshift_client_binary and failed_when
    (vrutkovs@redhat.com)
  - Add new grafana playbook. (mrsiano@gmail.com)
  - Allow 5 etcd hosts (sdodson@redhat.com)
  - Update console config for API changes (spadgett@redhat.com)
  - Remove duplication in node acceptance playbook and setup master groups so
    that we can use the first master's ansible_ssh_user when delegating.
    (abutcher@redhat.com)
  - Setting default storage_class_names for when calling
    openshift_logging_elasticsearch role (ewolinet@redhat.com)
  - include elasticsearch container name (jvallejo@redhat.com)
  - adding check if secret auth is needed (shawn.hurley21@gmail.com)
  - adding asb auth as a secret. (shawn.hurley21@gmail.com)
  - openshift_checks: repair adhoc list-checks mode (lmeyer@redhat.com)
  - Ensure we are running oc execs against running pods (ewolinet@redhat.com)
  - Remove tuned-profiles from list of master packages upgraded
    (sdodson@redhat.com)
  - Add missing task that got dropped in a refactor (sdodson@redhat.com)
  - Web Console: use a different var for asset config (vrutkovs@redhat.com)
  - Document the inventory change (tomas@sedovic.cz)
  - Move the OpenStack dynamic inventory from sample (tomas@sedovic.cz)
  - docker_upgrade_check: skip repoquery calls on containerized setups
    (vrutkovs@redhat.com)
  - Automatic commit of package [openshift-ansible] release [3.9.0-0.20.0].
    (smunilla@redhat.com)
  - Adjust openstack provider dependencies versions (bdobreli@redhat.com)
  - Fix openstack provider playbook name in docs (bdobreli@redhat.com)
  - fix bug 1534271 (wmeng@redhat.com)
  - Remove unused symlink (sdodson@redhat.com)
  - Automatic commit of package [openshift-ansible] release [3.9.0-0.19.0].
    (smunilla@redhat.com)
  - Automatic commit of package [openshift-ansible] release [3.9.0-0.18.0].
    (smunilla@redhat.com)
  - Automatic commit of package [openshift-ansible] release [3.9.0-0.17.0].
    (smunilla@redhat.com)
  - Automatic profile setting for tuned 2.9 (jmencak@redhat.com)
  - Don't use from ansible.module_utils.six as its no longer available in Ansible
    2.4 (vrutkovs@redhat.com)
  - Install web console on upgrade (spadgett@redhat.com)
  - Add console RBAC template (spadgett@redhat.com)
  - Add var for controller to enable async bindings (jpeeler@redhat.com)
  - Update latest image streams and templates (sdodson@redhat.com)
  - Use webconsole.config.openshift.io/v1 API group (spadgett@redhat.com)
  - Add missing v3.9 gluster templates (sdodson@redhat.com)
  - Spelling and grammar changes to the advanced-configuration.md file.
    (mbruzek@gmail.com)
  - Fixing openshift_hosted variable. (kwoodson@redhat.com)
  - Add cluster-operator playbook directory. (abutcher@redhat.com)
  - Move s3 & elb provisioning into their own playbooks s.t. they are applied
    outside of the openshift_aws master provisioning tasks. (abutcher@redhat.com)
  - Update deployment and apiserver with new certs (jpeeler@redhat.com)
  - Move more plugins to lib_utils (mgugino@redhat.com)
  - Add the ability to specify a timeout for node drain operations
    (sdodson@redhat.com)
  - Add defaults for openshift_pkg_version (mgugino@redhat.com)
  - docker_creds: fix python3 exception (gscrivan@redhat.com)
  - docker_creds: fix python3 exception (gscrivan@redhat.com)
  - docker: use image from CentOS and Fedora registries (gscrivan@redhat.com)
  - crio: use Docker and CentOS registries for the image (gscrivan@redhat.com)
  - Fix typo in the advanced config docs (tomas@sedovic.cz)
  - Write guide on setting up PVs with Cinder (tomas@sedovic.cz)
  - Allow using server names in openstack dynamic inv (tomas@sedovic.cz)
  - Specify the Cinder version in the inventory (tomas@sedovic.cz)
  - Add documentation example (joel.pearson@gmail.com)
  - Add blockstorage version for openstack (joel.pearson@gmail.com)
  - logging: fix jinja filters to support py3 (vrutkovs@redhat.com)
  - Ability to specify override tolerations via the buildconfig overrider
    (cdaley@redhat.com)
  - Chmod temp dirs created on localhost (mgugino@redhat.com)
  - Bug 1532787 - Add empty node selector to openshift-web-console namespace
    (spadgett@redhat.com)
  - Remove become statements (mgugino@redhat.com)
  - Setup master groups in order to use the master group's ansible_ssh_user to
    pull bootstrap kubeconfig. (abutcher@redhat.com)
  - Bug 1527178 - installation of logging stack failed: Invalid version specified
    for Elasticsearch (nhosoi@redhat.com)
  - Limit host group scope on control-plane upgrades (mgugino@redhat.com)
  - Refactor version and move some checks into sanity_checks.py
    (mgugino@redhat.com)
  - Updating tsb image names and template (ewolinet@redhat.com)
  - Ensure that openshift_facts role is imported whenever we rely on
    openshift_client_binary (sdodson@redhat.com)
  - Add key check for facts_for_clusterrolebindings (nakayamakenjiro@gmail.com)
  - Update web console template (spadgett@redhat.com)
  - Add iptables save handler (ichavero@redhat.com)
  - ensure containerized bools are cast (mgugino@redhat.com)
  - Update to AWS EC2 root vol size so that Health Check tasks pass
    (mazzystr@gmail.com)
  - Add key existing check to collect facts for rolebidings
    (nakayamakenjiro@gmail.com)
  - Fix provider network support at openstack playbook (ltomasbo@redhat.com)
  - 3.9 upgrade: remove openshift.common.service_type (vrutkovs@redhat.com)
  - container-engine: move registry_auth.yml before pull (gscrivan@redhat.com)
  - adding ability to add network policy objects. (shawn.hurley21@gmail.com)
  - docker_upgrade_check: skip repoquery calls on containerized setups
    (vrutkovs@redhat.com)
  - Adding logic to disable and reenable external communication to ES during full
    restart (ewolinet@redhat.com)
  - Provide example on how to use osm_etcd_image in a disconnected and
    containerized installation (tkarlsso@redhat.com)
  - Install node packages in one task instead of 3 (mgugino@redhat.com)
  - Don't hardcode the network interface in the openshift_logging_mux role
    (nkinder@redhat.com)
  - failure_summary: make sure msg is always a string (vrutkovs@redhat.com)
  - Fix flake8 errors in utils/test (vrutkovs@redhat.com)
  - Adding logic to do a full cluster restart if we are incrementing our major
    versions of ES (ewolinet@redhat.com)
  - kibana checks: use six.moves instead of ImportError (vrutkovs@redhat.com)
  - add python2-boto3 package for centos-based origin-ansible container image
    (jdiaz@redhat.com)
  - Configure Kuryr CNI daemon (mdulko@redhat.com)
  - adding ability to interact with network resources. (shawn.hurley21@gmail.com)
  - The provision_install file ends in yml not yaml! Ansible requirement
    clarification. (mbruzek@gmail.com)
  - Clean up host-local IPAM data while nodes are drained (danw@redhat.com)
  - Adding .ini to inventory_ignore_extensions (bedin@redhat.com)
  - lint issues (davis.phillips@gmail.com)
  - add vsphere examples in hosts.example (davis.phillips@gmail.com)
  - add template and vsphere.conf (davis.phillips@gmail.com)
  - add vsphere cloud providers (davis.phillips@gmail.com)
  - Fix wrong indentation (ichavero@redhat.com)
  - Fix yaml indentation (ichavero@redhat.com)
  - Add iptables rules for flannel (ichavero@redhat.com)


author: Justin Pierce <jupierce@redhat.com> 3.8.37-1
changelog:
  - Bump pyOpenSSL to 17.5.0 (rteague@redhat.com)
  - package_version check: stop looking for docker (lmeyer@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.7.0-0.134.0
changelog:
  - OpenShift-Ansible Installer Checkpointing (rteague@redhat.com)
  - evaluate etcd_backup_tag variable (jchaloup@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.7.0-0.135.0
changelog:
  - fix whitespace for centos repos (jdetiber@redhat.com)
  - Fix registry auth variable (mgugino@redhat.com)
  - move health-checks and control-plane-verification before excluders
    (jchaloup@redhat.com)
  - Fix typo in files (Docker registries) (william17.burton@gmail.com)
  - Registering the broker for TSB (ewolinet@redhat.com)
  - Quick formatting updates to the logging README. (steveqtran@gmail.com)
  - openshift_facts: coerce docker_use_system_container to bool
    (smilner@redhat.com)
  - Migrate enterprise registry logic to docker role (mgugino@redhat.com)
  - minor update to README and removed dead file (steveqtran@gmail.com)
  - Added new variables for logging role for remote-syslog plugin
    (steveqtran@gmail.com)
  - Remove some reminants of Atomic Enterprise (sdodson@redhat.com)
  - Allow examples management to be disabled (sdodson@redhat.com)
  - rename vars to avoid double negatives and ensuing confusion
    (jsanda@redhat.com)
  - set prometheus endpoint properties to false by default (jsanda@redhat.com)
  - add options to disable prometheus endpoints (jsanda@redhat.com)
  - Enable JMX reporting of internal metrics (jsanda@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.7.0-0.136.0
changelog:
  - Include openshift_hosted when redeploying router certificates to handle auto-
    generated wildcard certificate or custom openshift_hosted_router_certificate.
    (abutcher@redhat.com)
  - Check for router service annotations when redeploying router certificates.
    (abutcher@redhat.com)
  - Remove oo_option symlink from specfile. (abutcher@redhat.com)
  - Add a README.md to lookup_plugins/ (abutcher@redhat.com)
  - Remove oo_option facts. (abutcher@redhat.com)
  - block 3.6->3.7 upgrade if storage backend is not set to etcd3
    (jchaloup@redhat.com)
  - Changes necessary to support AMI building (mgugino@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.7.0-0.137.0
changelog:
  - openshift_node: Add MASTER_SERVICE on system container install
    (smilner@redhat.com)
  - openshift_node: Set DOCKER_SERVICE for system container (smilner@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.7.0-0.138.0
changelog:
  - Fix typo in openshift_default_storage_class/README (hansmi@vshn.ch)
  - GlusterFS: make ServiceAccounts privileged when either glusterfs or heketi is
    native (jarrpa@redhat.com)
  - Fix some provisioning variables (mgugino@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.7.0-0.139.0
changelog:
  - Fix mispelling in error message yammlint -> yamllint (simo@redhat.com)
  - Separate certificate playbooks. (abutcher@redhat.com)
  - Reverting using uninstall variables for logging and metrics
    (ewolinet@redhat.com)
  - Add --image flag to setup-openshift-heketi-storage (ttindell@isenpai.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.7.0-0.140.0
changelog:
  - openshift_checks: Fix incorrect list cast (smilner@redhat.com)
  - lib/base: Allow for empty option value (jarrpa@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.7.0-0.141.0
changelog:
  - Restore registires to /etc/sysconfig/docker (mgugino@redhat.com)
  - Fix Prometheus byo entry point (rteague@redhat.com)
  - Update to the openshift_aws style scheme for variables (ccoleman@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.7.0-0.142.0
changelog:
  - Document that nfs_directory must conform to DNS-1123 (sdodson@redhat.com)
  - Move node aws credentials to config.yml (mgugino@redhat.com)
  - Use etcd_ip when communicating with the cluster as a peer in etcd scaleup.
    (abutcher@redhat.com)
  - Ensure openshift.common.portal_net updated during scaleup.
    (abutcher@redhat.com)
  - docker: fix some tox warnings (gscrivan@redhat.com)
  - Require openshift_image_tag in the inventory with openshift-enterprise
    (gscrivan@redhat.com)
  - crio: use the image_tag on RHEL (gscrivan@redhat.com)
  - docker: use the image_tag on RHEL (gscrivan@redhat.com)


author: Jenkins CD Merge Bot <smunilla@redhat.com> 3.7.0-0.143.0
changelog:
  - Limit base-package install during master upgrades (mgugino@redhat.com)
  - Fix provisiong scale group and elb logic (mgugino@redhat.com)


author: Iryna Shcherbina <ishcherb@redhat.com> - 2.18.4-2
changelog:
  - Fix ambiguous Python 2 dependency declarations
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.60-1
changelog:
  - Pass admin kubeconfig (sdodson@redhat.com)
  - Make sure images are prepulled when CRIO is used (vrutkovs@redhat.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.62-1
changelog:
  - Mount /etc/pki into apiserver pod (sdodson@redhat.com)
  - pin azure cli to version 2.0.47 (akalugwu@redhat.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.63-1
changelog:
  - Add permissions for the Calico CNI plugin to access namespaces
    (mleung975@gmail.com)
  - Fix incorrect until condition in servicecatalog api check
    (sdodson@redhat.com)
  - Add retries around api service discovery (sdodson@redhat.com)
  - Add a wait for aggregated APIs when restarting control plane
    (sdodson@redhat.com)
  - Remove value rather than replacing it with an empty string
    (sdodson@redhat.com)
  - Update oc_group.py in src (camabeh@gmail.com)
  - Update tests (camabeh@gmail.com)
  - Fix oc group get (camabeh@gmail.com)
  - Remove hostname override from OpenStack inventory (tomas@sedovic.cz)
  - Update master config to set CA when LDAP/RequestHeader or OpenID identity
    providers are used (vrutkovs@redhat.com)
  - Update LDAP files when upgrading from 3.9 to 3.10 (vrutkovs@redhat.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.67-1
changelog:
  - Update existing template for registry-console and make sure created objects
    are updated (vrutkovs@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.2.0-1
changelog:
  - Add openshift_loadbalancer_facts role to set lb facts prior to running
    dependencies. (abutcher@redhat.com)
  - Preserve proxy config if it's undefined (sdodson@redhat.com)
  - At least backup things (sdodson@redhat.com)
  - Use unique play names to make things easier to debug (sdodson@redhat.com)
  - ensure htpasswd file exists (tob@butter.sh)
  - Add flag to manage htpasswd, or not. (tob@butter.sh)


author: Scott Dodson <sdodson@redhat.com> 3.2.1-1
changelog:
  - Restore mistakenly reverted code. (dgoodwin@redhat.com)
  - Bug 1338726 - never abort install if the latest version of docker is already
    installed (bleanhar@redhat.com)
  - Fix Docker 1.10 problems with empty tags and trailing : (dgoodwin@redhat.com)
  - Docker 1.10 Upgrade (dgoodwin@redhat.com)
  - Ansible 2.1 support. (abutcher@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.2.3-1
changelog:
  - Fix no proxy hostnames during upgrade. (dgoodwin@redhat.com)
  - Attempt to fix containerized node start failure with Docker 1.10.
    (dgoodwin@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.2.4-1
changelog:
  - Sync metrics templates (sdodson@redhat.com)
  - Add 30 second pause before retrying to start the node (sdodson@redhat.com)
  - Stop dumping debug output, re-try startng the node once (sdodson@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.2.5-1
changelog:
  - Update the rest of the templates (sdodson@redhat.com)
  - Update logging and metrics templates (sdodson@redhat.com)
  - Separate uninstall plays by group. (abutcher@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.2.8-1
changelog:
  - Enable additional 'virt_sandbox_use_nfs' seboolean as per documentation:
    (george.goh@redhat.com)
  - Switch to repoquery, enable plugins for satellite support
    (sdodson@redhat.com)
  - Don't upgrade docker on non-containerized etcd. (abutcher@redhat.com)
  - Access embedded_etcd variable from oo_first_master hostvars.
    (abutcher@redhat.com)
  - Fix case where no version of docker is installed (sdodson@redhat.com)


author: Scott Dodson <sdodson@redhat.com> 3.2.9-1
changelog:
  - Update image streams with SCL 2.2 components (sdodson@redhat.com)
  - Set any_errors_fatal for initialize facts play. (abutcher@redhat.com)
  - Set any_errors_fatal for etcd facts play. (abutcher@redhat.com)


author: Toshio Kuratomi <toshio@fedoraproject.org> - - 2.2.2.0-0.2.rc1
changelog:
  - Add a python3 ansible package.  Note that upstream doesn't intend for the library
    to be used by third parties so this is really just for the executables.  It's not
    strictly required that the executables be built for both python2 and python3 but
    we do need to get testing of the python3 version to know if it's stable enough to
    go into the next Fedora.  We also want the python2 version available in case a user
    has to get something done and the python3 version is too buggy.
  - Fix Ansible cli scripts to handle appended python version


author: Toshio Kuratomi <toshio@fedoraproject.org> - - 2.2.2.0-0.3.rc1
changelog:
  - Add a symlink for ansible executables to be accessed via python major version
    (ie: ansible-3) in addition to python-major-minor (ansible-3.6)


author: Kevin Fenzi <kevin@scrye.com> - 2.2.2.0-3
changelog:
  - Deal with RHEL7 pytest vs python-pytest.
  - Rebase epel6 newer jinja patch.
  - Conditionalize exclude for RHEL6 rpm.


author: Toshio Kuratomi <toshio@fedoraproject.org> - 2.3.0.0-1
changelog:
  - Update to 2.3.0
  - Remove upstreamed patches
  - Remove controlpersist socket path path as a custom solution was included
    upstream
  - Run the unittests from the upstream tarball now instead of having to download
    separately
  - Build a documentation subpackage


author: Kevin Fenzi <kevin@scrye.com> - 2.2.0.0-1
changelog:
  - Update to 2.2.0. Fixes #1390564 #1388531 #1387621 #1381538 #1388113 #1390646 #1388038 #1390650
  - Fixes for CVE-2016-8628 CVE-2016-8614 CVE-2016-8628 CVE-2016-8614


author: Kevin Fenzi <kevin@scrye.com> - 2.2.0.0-3
changelog:
  - Update unit tests that will skip docker related tests if docker isn't available.
  - Drop docker BuildRequires. Fixes bug #1392918


author: Kevin Fenzi <kevin@scrye.com> - 2.2.1.0-1
changelog:
  - Update to 2.2.1.
  - Fixes: CVE-2016-9587 CVE-2016-8647 CVE-2016-9587 CVE-2016-8647
  - Fixes bug #1405110


author: Toshio Kuratomi <toshio@fedoraproject.org> - - 2.5.5-4
changelog:
  - Upstream patch to build docs with older jinja2 (Fedora 27)
  - Build changes to build only rst docs for modules and plugins when a distro
    doesn't have modern enough packages to build the documentation. (EPEL7)


author: Kevin Fenzi <kevin@scrye.com> 0.9-6
changelog:
  - Add patch to fix http over proxy. Fixes bug #857514
  - Add patch to fix CVE-2013-2037. Fixes bug #958640
  - Add patch to fix binary headers in python3. Fixes bug #1205127


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1.10.2-1.rhaos3.10.git095e88c
changelog:
  - bump to v1.10.2
  - built commit 095e88c
  - include rhaos3.10 in release tag
  - do not compress debuginfo with dwz to support delve debugger


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1.10.4-1.rhaos3.10.gitebaa77a
changelog:
  - bump to v1.10.4
  - remove devel and unittest subpackages - unused
  - debuginfo disabled for now, complains about %files being empty


author: Ralph Bean <rbean@redhat.com> - 1.15.1-2
changelog:
  - Remove broken symlinks to unbundled python3-six files
    https://bugzilla.redhat.com/show_bug.cgi?id=1295015


