The origin.spec file defines two variants of tuned rpm packages:
tuned-profiles-atomic-openshift-node and tuned-profiles-origin-node.
Uninstall them both.

Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1509129

Add external_svc_subnet field for k8s loadbalancer type service
in kuryr-kubernetes code support external service subnet
but openshift does not support yet

Signed-off-by: jihoon.o <jihoon.o@samsung.com>

The role is looking for the usernames, passwords, etc. first in the
shell environment and then in the Ansible vars.

When the environment is empty, however, the lookup returns an empty
string not an undefined variable, so the `default` fallback is never
used and the ansible variables end up being ignored.

By adding `True` to the end of the filter, it will work with any falsey
value (including an empty string) not just undefined variables.

When attempting to run openshift-ansible in a kubernetes pod, we
attempted to use a configmap to mount in our inventory to run against.
However kubernetes mounts configmaps/secrets volumes through the use of
relative symlinks. The use of "cp -a" in this script then copies a
relative symlink to /tmp which is now dangling, and ansible will fail to
run.

This patch changes to just copy the file regularly resulting in a value
temp file that is not a symlink.

The rhel_subscribe role used to read the shell environment variables for
its input with a broken fallback to Ansible variables.

This updates the role to only use Ansible vars. If the user wants to do
an env lookup, they can do so when calling the role.

The rhel_subscribe role fixes will be done in a separate pull request.

This reverts commit 6911792.

The rhel_subscribe fixes will be done in a separate pull request.

This reverts commit e05e4d3.

Add v3.9 support

Remove references for bastion, ssh UI tunnek and static inventory.
Update docs.

Signed-off-by: Bogdan Dobrelya <bdobreli@redhat.com>

Use testing openshift repos to sidestep packaging issues for 3.6 clients being
used in 3.7 deployments or something.
Poke host requirements Centos 7.4 as 7.3 can't see that testing repo.

Signed-off-by: Bogdan Dobrelya <bdobreli@redhat.com>

…e-retries

Allow number of retries in openshift_management to be configurable

…-certificates

Automatic merge from submit-queue.

Playbook Consolidation - Redeploy Certificates

This PR moves the certificate redeploy playbooks out of {byo,common}/openshift-cluster and into their respective component areas.

- playbooks/openshift-etcd (redeploy-certificates.yml, redeploy-ca.yml)
- playbooks/openshift-master (redeploy-certificates.yml, redeploy-openshift-ca.yml)
- playbooks/openshift-node (redeploy-certificates.yml)
- playbooks/openshift-hosted (redeploy-registry-certificates.yml, redeploy-router-certificates.yml)

playbooks/byo/openshift-cluster/redeploy-certificates.yml was moved to
playbooks/redeploy-certificates.yml

Trello: https://trello.com/c/zCz6RIHM/578-2-playbook-consolidation-openshift-cluster-redeploy-certificates

This appears to be no longer used.

Implement container runtime role

Signed-off-by: Bogdan Dobrelya <bdobreli@redhat.com>

would get timeouts during master node installation without this setting

Copying upstream fix for ansible 2.4 ec2_group module.

Automatic merge from submit-queue.

Add missing dependencies on openshift_facts role

All of these roles call the openshift_facts module but didn't include
the role in their dependencies which can lead to errors in Ansible 2.4.

Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1524102

Created by command:

/usr/bin/tito tag --debug --accept-auto-changelog --keep-version --debug

…embedded-etcd

Automatic merge from submit-queue.

Remove unneeded embedded etcd logic

Removing some remaining embedded etcd facts except
for the migration plays.

Created by command:

/usr/bin/tito tag --debug --accept-auto-changelog --keep-version --debug

…ster-port

Automatic merge from submit-queue.

add openshift_master_api_port var to example inventory

Automatic merge from submit-queue.

Allow 2 sets of hostnames for openstack provider

Support private/public hostnames suffixes for DNS records.
Real hostnames, Inventory variables, Nova servers and ansible
hostnames will ignore the custom suffixes. Those are only for
nsupdates sent to external DNS servers.

Related change: add openshift_openstack_public_dns_domain to
the role defaults to not rely on the group vars example only.

Signed-off-by: Bogdan Dobrelya <bdobreli@redhat.com>
Co-authored-by: Tomas Sedovic <tsedovic@redhat.com>

Created by command:

/usr/bin/tito tag --debug --accept-auto-changelog --keep-version --debug

Node group management update.

This commit refactors some upgrade code paths.

Touched areas are:

1) Reduces usage of 'oo_all_hosts' in various places,
especially when running upgrade_control_plane.

2) Reuses common code across the various upgrade*
playbooks.

3) Moves docker upgrade checks into container_runtime_role.

4) Combines smaller playbooks and plays to reduce file sprawl.

…readme

Clarify version selection in README

Bump ansible RPM version req to 2.4.1

Remove bad openshift_examples symlink

Created by command:

/usr/bin/tito tag --debug --accept-auto-changelog --keep-version --debug

…rades

Refactor upgrade codepaths step 1