OAM IP records missing from API server certSANs

[David Sullivan]

Brief Description
-----------------
Per https://bugs.launchpad.net/starlingx/+bug/1837079 the OAM records should have been added to the apiserver_cert_sans. This was missed. Without this remote kube access is limited.

Severity
--------
Major

Steps to Reproduce
------------------
Install a system.

Expected Behavior
------------------
The OAM ip records should be added to the kubernetes apiserver certSANs

Actual Behavior
----------------
The OAM records are missing
cat /etc/kubernetes/kubeadm.yaml
apiVersion: kubeadm.k8s.io/v1beta2
...
apiServer:
  certSANs:
  - 192.168.244.1
  - 127.0.0.1
  extraArgs:

Reproducibility
---------------
Reproducible

System Configuration
--------------------
All systems

Branch/Pull Time/Commit
-----------------------
20200206T023004Z

Last Pass
---------
NA

Timestamp/Logs
--------------
NA

Test Activity
-------------
Evaluation

Workaround
----------
Manually add the OAM addresses to the apiserver_cert_sans during ansible bootstrap

[Ghada Khalil (gkhalil)]

stx.4.0 / medium priority - there is a workaround

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/710691

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/710691
Committed: https://git.openstack.org/cgit/starlingx/ansible-playbooks/commit/?id=208df05af590ab1cbdac16c94f65b29d4fac3e90
Submitter: Zuul
Branch: master

commit 208df05af590ab1cbdac16c94f65b29d4fac3e90
Author: David Sullivan <email address hidden>
Date: Sun Mar 1 21:16:04 2020 -0500

    Add OAM IP records to API server certSANs

    Add the OAM IP records to the apiserver_cert_sans. This will allow for
    remote access to the kubernetes API server.

    Change-Id: I344f59fa0b5a24633f1341e2c2fd54748d88c0af
    Closes-Bug: 1863798
    Signed-off-by: David Sullivan <email address hidden>

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: f/centos8
Review: https://review.opendev.org/716133

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/716133
Committed: https://git.openstack.org/cgit/starlingx/ansible-playbooks/commit/?id=ddcb11f4b773f4b3190663defe3ba0f3ec4201c8
Submitter: Zuul
Branch: f/centos8

commit bf103f3c54eb45c26d52a43c35339d1d863a42de
Author: Mihnea Saracin <email address hidden>
Date: Fri Mar 27 18:19:02 2020 +0200

    Fix B&R when the controller needs to be unlocked

    After running the restore playbook, all the applications
    should be in an uploaded state. But they are in an
    applied state instead, making the controller-0
    unable to unlock.

    Closes-Bug: 1869403
    Change-Id: I8bd9c51e250969cc334d52b78c616f9ad082afd8
    Signed-off-by: Mihnea Saracin <email address hidden>

commit 6e875971afeaf1378c2c8aeb845359459838ce30
Author: Stefan Dinescu <email address hidden>
Date: Sat Mar 21 16:57:57 2020 +0200

    Fix Netapp port conflict

    By default, the Trident Netapp service opens port 8443 for
    HTTPS REST api usage. This conflicts with the port the
    Horizon dashboard uses on an HTTPS enabled setup (the port
    is also 8443).

    In order to fix this, we change the default port from 8443
    to 8678, but also make it configurable through ansible
    overrides.

    The Trident service also opens port 8001 for metrics usage.
    While that doesn't currently conflict with any other service
    on the system, I also made that configurable through
    ansible overrides, in case such a conflict appears in the
    future.

    Change-Id: I08db939acac6082f82b9e12e932d8289c7cecdeb
    Closes-bug: 1868382
    Signed-off-by: Stefan Dinescu <email address hidden>

commit 5a9ba6786e393f2cd93bfae8c3a8f09f0cf9eb26
Author: Robert Church <email address hidden>
Date: Thu Mar 19 19:08:17 2020 -0400

    Upversion Multus to 3.4

    Updates the Multus configuration to align with version 3.4

    Change-Id: Ifc236ccbbe4e559987d7ef522902f638062348ca
    Depends-On: https://review.opendev.org/#/c/714024/
    Story: 2006999
    Task: 39110
    Signed-off-by: Robert Church <email address hidden>

commit 6a261463f9ac0f81d9c7f054dd3cb10a51934d4a
Author: Robert Church <email address hidden>
Date: Wed Mar 18 22:01:03 2020 -0400

    Upversion Calico from 3.6 to 3.12

    Updates the Calico configuration to align with version 3.12. This
    introduces support for a Flex Volume Driver which requires enabling the
    --volume-plugin-dir option for kubelet, the --flex-volume-plugin-dir
    option for kube-controller-manager, and pulling the pod2daemon-flexvol
    image used by calico-node pods.

    Change-Id: I74bc5c53ffcb16c8e3c06cebf20eac296b9ccc65
    Story: 2006999
    Task: 39109
    Depends-On: https://review.opendev.org/#/c/714023
    Signed-off-by: Robert Church <email address hidden>

commit b35387f8bc40714e9633e6191267284b8af8ccee
Author: Stefan Dinescu <email address hidden>
Date: Thu Mar 19 18:13:26 2020 +0200

    Netapp: Fix handling of IPv6 addresses

    Using bash process subtitution to pass the file parameter
    to the "create backend" command doesn't work as the bash
    variable expansion...