Reviewed:  https://review.opendev.org/705831
Committed: https://git.openstack.org/cgit/starlingx/ansible-playbooks/commit/?id=6670caf7ceda5fe0dc46f2f82033b68abf00ed5e
Submitter: Zuul
Branch:    f/centos8

commit bf8d081a95a9b1776964960a6d9089b1449f2c58
Author: Angie Wang <email address hidden>
Date:   Thu Jan 30 17:57:05 2020 -0500

    Support k8s networking upgrade based on k8s version
    
    Update to support a set of k8s networking templates
    based on kubernetes release. The kubernetes version
    needs to be passed to the ansible playbook
    k8s-networking-upgrade.yml to determine which set
    of networking manifests should be applied for the
    current kubernetes.
    
    Story: 2006781
    Task: 37584
    Change-Id: I3a0b9f56608ddb1323b36f9ecedb8a5488c222c9
    Signed-off-by: Angie Wang <email address hidden>

commit 2b0cd43e5fa75628d8eff78be7045ba4fc82d980
Author: Jerry Sun <email address hidden>
Date:   Thu Dec 19 13:22:50 2019 -0500

    Add Dex parameters to ansible bootstrap
    
    Add oidc_groups_claim as a new parameters for ansible
    config. We now have 2 valid configs: the previous 3 parameters
    for a microsoft azure authentication deployment, and the previous
    3 in addition to oidc_groups_claim for a dex authentication
    deployment.
    
    Story: 2006711
    Task: 37850
    Change-Id: I265d2f7872eb31e2b295eeff6a3165543673497c
    Depends-On: https://review.opendev.org/702798
    Signed-off-by: Jerry Sun <email address hidden>

commit 92ca122652733805b62fc16940861ca4e83e2bb1
Author: David Sullivan <email address hidden>
Date:   Wed Jan 22 21:33:19 2020 -0500

    Install secondary controller nodes with kubeadm join
    
    Kubeadm init is no longer supported for installing secondary nodes in an
    HA kubernetes cluster. kubeadm join with the --controller-plane option
    should be used.
    
    Change-Id: I64aaf02b09053608c884149d73bc1a3f2b62d98a
    Partial-Bug: 1846829
    Depends-On: https://review.opendev.org/702797
    Signed-off-by: David Sullivan <email address hidden>

commit 393379bd7671aeec5e9852679a69bdc29577426a
Author: Angie Wang <email address hidden>
Date:   Tue Jan 28 14:01:10 2020 -0500

    Fix the image download failure on IPv6 system
    
    "crictl pull" failed to pull images on IPv6 system with
    proxy setting since Containerd doesn't work with the
    NO_PROXY environment variable that has IPv6 addresses
    with square brackets. This commit updates to strip out
    the square brackets from NO_PROXY environment variable.
    
    Verified on both IPv4 and IPv6 labs.
    
    Change-Id: I70bd00439b2cc39d2b25dd62746994a524be4998
    Partial-Bug: 1859835
    Signed-off-by: Angie Wang <email address hidden>

commit 792ea357e2b6d2bd23b441aa1657e0dc46f7ef5d
Author: Jim Somerville <email address hidden>
Date:   Mon Jan 27 16:08:48 2020 -0500

    Security: Add nospectre_v1 to the default setting
    
    Most of the v1 mitigation is baked into the kernel and not
    optional.  The swapgs barriers are, however, optional.
    They have a negative performance impact so we disable them
    by using the nospectre_v1 kernel bootarg.
    
    Change-Id: Idd806e76f3204c6bce7aae9dfdcd455566fdc795
    Partial-Bug: 1860193
    Depends-On: https://review.opendev.org/#/c/704406
    Signed-off-by: Jim Somerville <email address hidden>

commit 342bdacdf98864d7a4265be564a30f818e96ea87
Author: Andy Ning <email address hidden>
Date:   Wed Jan 22 10:24:53 2020 -0500

    Restart Barbican after region_name is updated
    
    Restart Barbican after its region_name (among other parameters) is
    updated during bootstrap service endpoints reconfiguration to make it
    consistent with keystone service catalog.
    
    Change-Id: Id48078a4d1a429b1e6adc8d8fbcec7eac0264965
    Closes-Bug: 1859726
    Signed-off-by: Andy Ning <email address hidden>

commit 2f1476decac8da988209b5ba59d7a4381a7ed581
Author: Tao Liu <email address hidden>
Date:   Wed Jan 15 22:16:50 2020 -0500

    Add an install playbook
    
    This update adds an install playbook that leverages
    Redfish Virtual Media Controller(rvmc).
    
    The playbook creates the rvmc resource which installs
    a host via a Redfish supported Board Management Controller.
    The playbook then monitors the boot progress, changes the
    initial password once the host is installed/booted,
    and awaits the system to be ready for the bootstrapping.
    
    Story: 2006980
    Task: 37715
    
    Depends-On: https://review.opendev.org/#/c/702786/
    Change-Id: Ib8a52fc1fe582fd01400d66653a31d8c48ee7792
    Signed-off-by: Tao Liu <email address hidden>

commit 3d6483194e843c9254d58698c0eed5f68bb748ee
Author: Angie Wang <email address hidden>
Date:   Fri Jan 17 15:07:39 2020 -0500

    Remove the dependency of controllerconfig
    
    As controllerconfig is being cleaned up, remove the dependency
    of controllerconfig in Ansible playbook. This commit also copies
    over the registry cert template from puppet as it's only been
    used at bootstrap time.
    
    Change-Id: I820d968629a920dfe9846c5f855b048a6ae85e29
    Closes-Bug: 1834218
    Signed-off-by: Angie Wang <email address hidden>

commit e03b1efbaf581ab49b88397a0c9f3802d64381a6
Author: Mihnea Saracin <email address hidden>
Date:   Tue Jan 21 14:59:05 2020 +0200

    B&R: Fix backup when openstack is not installed
    
    When the stx-openstack is not installed, a variable
    is left undefined in the ansible playbook, so we fix
    this by adding a default value for that variable.
    
    Change-Id: I3a2480456074022c0a1227bc19cea92f318afb1f
    Closes-Bug: #1860357
    Signed-off-by: Mihnea Saracin <email address hidden>

commit c9db3fa3d36dcdbaaef7f399804c3ad823a72d83
Author: Lin Shuicheng <email address hidden>
Date:   Sun Jan 19 01:58:34 2020 +0000

    Revert "Revert "configure kubernetes to use containerd as CRI""
    
    This reverts commit ae1e45e00e0d684a18d1a7026e2e88f17a81295f.
    
    Depends-On: https://review.opendev.org/703263
    Change-Id: Id7defcd9aa0ef7cf23bb6b4e5b43ed60f1bb5c62
    Signed-off-by: Shuicheng Lin <email address hidden>

commit ae1e45e00e0d684a18d1a7026e2e88f17a81295f
Author: Don Penney <email address hidden>
Date:   Tue Jan 14 20:38:27 2020 +0000

    Revert "configure kubernetes to use containerd as CRI"
    
    This reverts commit c5c1699d9dcd7a997a8c4cc05df1d9189dbdac69.
    
    Reverting due to https://bugs.launchpad.net/starlingx/+bug/1859686
    
    Change-Id: I0b3b79ee1913e2386c874885a46ad141d358f69b

commit c5c1699d9dcd7a997a8c4cc05df1d9189dbdac69
Author: Shuicheng Lin <email address hidden>
Date:   Sat Sep 28 00:01:55 2019 +0800

    configure kubernetes to use containerd as CRI
    
    config kubelet to use containerd as CRI.
    create config file config.toml for containerd.
    configure containerd to support insecure registries/proxy.
    Due to containerd doesn't support push image to registry, use
    docker to pull image and push to local registry, then use crictl
    to pull image from local registry for containerd.
    
    Story: 2006145
    Task: 36836
    Depends-On: https://review.opendev.org/685211
    Change-Id: I3d8c78bd0b860e0677559a497f27dee5e8028853
    Signed-off-by: Shuicheng Lin <email address hidden>

commit f8dc7a8faf225609ebbd7f0e72e4c412898aeaaa
Author: Mihnea Saracin <email address hidden>
Date:   Wed Dec 11 15:10:18 2019 +0200

    B&R: Add backup & restore for Helm overrides
    
    Right now, if the user wants to restore only the stx-openstack,
    the Helm overrides will be regenerated at every restore procedure,
    so the Helm overrides data in the sysinv database will always change.
    On the other hand, the stx-openstack database will be unchanged
    at every restore and it contains some of the initial
    overrides data (e.g credentials).
    The issue here is that the sysinv database will be inconsistent
    with the stx-openstack database.
    
    We can fix this by adding the B&R of the Helm overrides
    in the stx-openstack B&R. This will be done by
    creating a database dump file which will
    contain the Helm overrides data.
    
    Change-Id: I3323a8500ace5e25be57dd5bd4bff51df609e968
    Story: 2006770
    Task: 37781
    Signed-off-by: Mihnea Saracin <email address hidden>