# changelog

author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.23-1
changelog:
  - add firewall rules for node exporter (m.judeikis@gmail.com)
  - AWS: use vpc name instead of cluster id when creating security groups
    (cewong@redhat.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.24-1
changelog:
  - Avoid undefined variable glusterfs_heketi_user_key (sdodson@redhat.com)
  - When the node process is down, don't exit (ccoleman@redhat.com)
  - Add scaleup playbook and docs for OpenStack (tomas@sedovic.cz)
  - Fix the Neutron DNS docs (tomas@sedovic.cz)
  - Add support for OpenStack internal DNS (tomas@sedovic.cz)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.26-1
changelog:
  - Allow to autoname scale group instances (jchaloup@redhat.com)
  - re-enable 3.10 repos (m.judeikis@gmail.com)


author: Scott Dodson <sdodson@redhat.com> 3.10.27-2
changelog:
  - Disable papr on pull requests (sdodson@redhat.com)
  - Add step to remove all k8s_ containers (mgugino@redhat.com)
  - Add boolean to uninstall for docker (mgugino@redhat.com)
  - Add doc note that kuryr requires openstack cloud provider
    (tzumainn@redhat.com)
  - Add containerized glusterfs cluster health check (mgugino@redhat.com)
  - Cleanup node bootstrap / scaleup code (mgugino@redhat.com)
  - adding unmount task below the backup task (bysnupy@hotmail.com)
  - Allow user to specify local openstack.conf (tzumainn@redhat.com)
  - Remove sections of kuryr documentation that tell user to disable registry
    creation (tzumainn@redhat.com)
  - Added OpenStack security group requirements section (tzumainn@redhat.com)
  - Allow disabling Network Manager managed dns (arun.neelicattu@gmail.com)
  - Add bool filter to all instances of openshift_use_crio (rteague@redhat.com)
  - Allow shared_non_ops as kibana index mode (farandac@redhat.com)
  - ignore failing dns clean errors when running openstack uninstall playbook
    (tzumainn@redhat.com)
  - Remove unused variables (spasquie@redhat.com)
  - Added node selector option for CFME role and fixed formatting issues
    (dluong@redhat.com)
  - Support tabs in resolv.conf (vrutkovs@redhat.com)
  - Upgrade Prometheus and AlertManager image versions (spasquie@redhat.com)
  - Fix order for invoking the hostpath storage task for registry
    (ngompa@datto.com)
  - Add a components public playbook (sdodson@redhat.com)
  - Cope with OpenShift returning no value when an environment variable is an
    empty string (mchappel@redhat.com)
  - Update Calico versions to the latest (v3.1.3) (mleung975@gmail.com)
  - bug 1597282. Quote selector to make it valid json (jcantril@redhat.com)
  - Add Prometheus scrape config for openshift-logging (lukas.vlcek@gmail.com)
  - bug 1590920. Bump fluent default memory to 756M (jcantril@redhat.com)
  - oreg url fix (m.judeikis@gmail.com)
  - Defining a default for logging_elasticsearch_rollout_override var in es
    handler (ewolinet@redhat.com)
  - Allow the 9k-10k port range for Prometheus (spasquie@redhat.com)
  - Setup logrotate on nodes once (vrutkovs@redhat.com)
  - google-cloud-sdk is x86_64 only (sdodson@redhat.com)
  - bug 1575546. Fix logging eventrouter cpu requests (jcantril@redhat.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.28-1
changelog:
  - add conditional clauses for handling cnx versions (derekmcquay@gmail.com)
  - apply the container_runtime for calico (derekmcquay@gmail.com)
  - Require -hyperkube RPMs instead of -master (vrutkovs@redhat.com)
  - Don't require etcd RPM to be installable on masters (vrutkovs@redhat.com)
  - Don't require fast-datapath channel on RHEL (vrutkovs@redhat.com)
  - No longer require SDN to be installed on nodes (vrutkovs@redhat.com)
  - node restart: check that all vars are defined (vrutkovs@redhat.com)
  - Change multipath prio from const to alua (jarrpa@redhat.com)
  - Adding min-port to dnsmasq configuration (rhowe@redhat.com)
  - Ensure kernel-modules not installed on atomic (mgugino@redhat.com)
  - Fedora: Install kernel-modules (mgugino@redhat.com)
  - Conditionally skip node approval for incremental 3.10 upgrades
    (rteague@redhat.com)
  - Update openshift_release version in sample inventory file
    (dani_comnea@yahoo.com)
  - 'Wait for node to be ready' task should check that all vars are defined
    (vrutkovs@redhat.com)
  - Fix prometheus annotations typo (vrutkovs@redhat.com)
  - Fix master env migrate module comments (mgugino@redhat.com)
  - move from latest to versioned repo (m.judeikis@gmail.com)
  - router-redeploy: don't check that annotations are missing
    (vrutkovs@redhat.com)
  - Fix master config migration module (mgugino@redhat.com)
  - oc_obj should correctly identify 'results': [{}] as 'Object not found'
    (mchappel@redhat.com)
  - updating doc for SSL cert (dcritch@redhat.com)
  - Adding support for an SSL certificate signed by the OpenStack cluster
    (dcritch@redhat.com)
  - Don't get file checksum, attributes and mime type in stat module calls
    (vrutkovs@redhat.com)
  - Sanity check htpasswd respect default (mgugino@redhat.com)
  - Fix glusterfs cluster check when condition (mgugino@redhat.com)
  - Ensure that monitoring operator has nodes to run (vrutkovs@redhat.com)
  - BZ-1608216 Set timeoutSeconds for readinessProbe on Cassandra RCs
    (ruben.vp8510@gmail.com)
  - Reorganized OpenStack cloud provider documentation (tzumainn@redhat.com)
  - Set log-path = ~/openshift-ansible.log (sdodson@redhat.com)
  - Add atomic package to base and debug package lists
    (nakayamakenjiro@gmail.com)
  - Remove callback plugin, artifact of a quick installer (vrutkovs@redhat.com)
  - Migrate old master env files to new location (mgugino@redhat.com)
  - Add configmap-generator templates (simaishi@redhat.com)
  - Disable the wifi collector in node_exporter (spasquie@redhat.com)
  - Fix openshift_logging on Python3 (christoffer.reijer@basalt.se)
  - check_htpasswd_provider: throw error if openshift_master_identity_providers
    is not parsed into a list (vrutkovs@redhat.com)
  - Change the order of template_var calls in check_htpasswd_provider
    (vrutkovs@redhat.com)
  - Make regex for the openshift_pkg_version simpler (nakayamakenjiro@gmail.com)
  - Add unit tests for check_pkg_version_format and check_release_format
    (nakayamakenjiro@gmail.com)
  - Add format check of openshift_pkg_version and openshift_release
    (nakayamakenjiro@gmail.com)
  - Sync grafana deployment. to openshift-monitoring. (mrsiano@gmail.com)
  - default_storage: configure rolebindings for azure-file storage backend
    (arun.neelicattu@gmail.com)
  - default_storage: allow configuring mountOptions and reclaimPolicy
    (arun.neelicattu@gmail.com)
  - lib_openshift/oc_storageclass: support mountOptions and reclaimPolicy
    (arun.neelicattu@gmail.com)
  - Use ansible systemd module to check service status
    (nakayamakenjiro@gmail.com)
  - Confirm iptables service status by checking command status
    (nakayamakenjiro@gmail.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.29-1
changelog:
  - CFME: set default value for openshift_hosted_infra_selector
    (vrutkovs@redhat.com)
  - vgchange before vgremove update. (sarumuga@redhat.com)
  - To avoid I/O errors, carry out vg deactivate (using vgchange -an) and dmsetup
    remove device. (sarumuga@redhat.com)
  - Update glusterfs README about uninstall playbook (sarumuga@redhat.com)
  - Add CentoOS Origin repo for 310 release (dani_comnea@yahoo.com)
  - SCC recouncilation has to run with older oc, before node upgrade
    (vrutkovs@redhat.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.30-1
changelog:
  - Remove atomic-openshift-master package during upgrade (rteague@redhat.com)
  - Added support for ak when registering hosts (e.minguez@gmail.com)
  - The l_glusterfs_count is a string need to cast to int for comparison.
    (mbruzek@gmail.com)
  - Default CFME nodeselector should be a list of str, not a dict
    (vrutkovs@redhat.com)
  - The file name has changed to heketi_get_key.yml (mbruzek@gmail.com)
  - vgchange before vgremove update. (sarumuga@redhat.com)
  - To avoid I/O errors, carry out vg deactivate (using vgchange -an) and dmsetup
    remove device. (sarumuga@redhat.com)
  - Remove system container cri-o during 3.10 upgrade (rteague@redhat.com)
  - Adding documentation in hosts.example (jcallen@redhat.com)
  - Add a license parameter to gcloud command (jcallen@redhat.com)
  - Fix audit config interpolation (denis@gladkikh.email)
  - Remove unused/broken node cert plays (mgugino@redhat.com)
  - Add quotes to node selector (rteague@redhat.com)
  - GlusterFS: Upgrade playbook (jarrpa@redhat.com)
  - Refactor glusterfs for scaleup (mgugino@redhat.com)
  - Remove hyperkube package (norito.agetsuma@gmail.com)
  - re-order and required values (rcook@redhat.com)
  - matching the name values (rcook@redhat.com)
  - adding parameters to allow for load balancer creation (rcook@redhat.com)
  - set the external url of prometheus (pgier@redhat.com)
  - re-enable GA repos for 3.10 (Mangirdas@Judeikis.LT)


author: Justin Pierce <jupierce@redhat.com> 3.10.0-0.63.0
changelog:
  - Bug 1586366 - Use include_tasks for dynamic task file includes
    (rteague@redhat.com)
  - Make prometheus use persistent storage by default (ironcladlou@gmail.com)
  - Make Kuryr connect to OpenShift API through LB (mdulko@redhat.com)


author: Tim Bielawa <tbielawa@redhat.com> 3.10.19-1
changelog:
  - Add max-size to docker log opts (umohnani@redhat.com)
  - Remove old service files before masking them (sdodson@redhat.com)
  - replace samples with ones from origin v3.10 (bparees@redhat.com)
  - generate_pv_pvcs_list: set claimRef for NFS volumes (vrutkovs@redhat.com)
  - Fix storageclass setting for NFS (vrutkovs@redhat.com)
  - Add openshift_docker_gc role to upgrade path (rteague@redhat.com)
  - Exclude existing masters from node list for CSR approval during node and
    master scaleup. (abutcher@redhat.com)
  - Allow installs of Node Problem Detector during upgrades (joesmith@redhat.com)
  - Increate lbaas_activation_timeout for kuryr-controller (ltomasbo@redhat.com)
  - Sync Fuse console templates (antonin@stefanutti.fr)
  - Ensure nodes created by a scale group have a Name tag (amcdermo@redhat.com)
  - Do not delete IAM cert if explicitely requested (jchaloup@redhat.com)
  - Use OPENSHIFT_CLUSTER env in OpenStack uninstall (tomas@sedovic.cz)
  - standalone etcds: make sure etcd facts are set before applying etcd config
    (vrutkovs@redhat.com)
  - Fix etcd restart commands (mgugino@redhat.com)
  - Add Fuse Console templates (antonin@stefanutti.fr)
  - Make openshift_control_plane/check_master_api_is_ready.yml generic
    (sdodson@redhat.com)
  - Wait for API availability before migrating storage, add retries
    (sdodson@redhat.com)
  - Accept client certs from node, system:admin, and bootstrap SA
    (sdodson@redhat.com)
  - Fix scalegroup upgrades so don't have to delete ASG's. (mwoodson@redhat.com)
  - Dedicated etcd nodes should not be added to oo_nodes_to_upgrade
    (vrutkovs@redhat.com)
  - Don't upgrade nodes which only have dedicated etcd (vrutkovs@redhat.com)
  - add node get-node-logs script (m.judeikis@gmail.com)
  - hardcode flexvolume path on atomic hosts (hekumar@redhat.com)
  - Sync latest content (sdodson@redhat.com)
  - Discourage use of openshift_docker_additional_registries (sdodson@redhat.com)
  - Make sure that we use rslave mount propagation (hekumar@redhat.com)
  - Update ansible code to preseve path on non-atomic hosts (hekumar@redhat.com)
  - Mark ready nodes as accepted during oc_adm_csr approval.
    (abutcher@redhat.com)
  - Add infra secgroup rules to the flat secgrp rules (ltomasbo@redhat.com)
  - Reconfigure web console after certificates were redeployed
    (vrutkovs@redhat.com)
  - Update etcd pod to 3.2.22 (sdodson@redhat.com)
  - Use openshift_is_atomic fact from delegated host (vrutkovs@redhat.com)
  - Ensure SkyDNS is enabled with Kuryr SDN (ltomasbo@redhat.com)
  - etcd: add clientAuth to server usage (rphillips@redhat.com)
  - Configure node proxy settings on bootstrapped nodes (vrutkovs@redhat.com)
  - Copying acs-engine output to know location. (kwoodson@redhat.com)
  - Add kubelet-plugins to allowed locations (hekumar@redhat.com)
  - Bug 1589134- Namespace the CRD variable to prevent collision
    (fabian@fabianism.us)
  - Gather master facts to make sure cluster_hostname gets appended to no_proxy
    list on nodes (vrutkovs@redhat.com)
  - Get acs-engine from new CI namespace (kargakis@protonmail.ch)
  - Mount kubelet plugins inside controller (hekumar@redhat.com)
  - Allowing for build artifacts to persist. (kwoodson@redhat.com)
  - Fix volume location in containarized installs (hekumar@redhat.com)
  - Add Data Grid 7.2 to OpenShift Cloud Platform (remerson@redhat.com)
  - Increase watch_retry_timeout for kuryr-daemon (mdulko@redhat.com)
  - Adding sslcacert to additional repos (craig.munro@gmail.com)
  - Update routers that are defined in openshift_hosted_routers
    (sdodson@redhat.com)
  - Correct tests used as filters (rteague@redhat.com)
  - Move os_sdn_network_plugin_name into openshift_facts (sdodson@redhat.com)
  - Fix openshift_node_config_name in bootstrap.yml. (abutcher@redhat.com)
  - Only dump oreg_url when value is defined. (kwoodson@redhat.com)
  - Variablizing vm size for azure. (kwoodson@redhat.com)
  - bug 1575903. Default ES memory to 8G (jcantril@redhat.com)
  - Add a debug statement to the image build to dump tag information.
    (kwoodson@redhat.com)
  - Remove haproxy from node package set (sdodson@redhat.com)
  - Find router pods with fully qualified prefixes during upgrade
    (sdodson@redhat.com)
  - Set `openshift_node_group_name` for the CNS nodes (tomas@sedovic.cz)
  - Persist oreg_url in node image (kargakis@protonmail.ch)
  - bump xpaas to 1.4.14 (rcernich@redhat.com)
  - Deprecate openshift_node_kubelet_args and openshift_node_labels
    (vrutkovs@redhat.com)
  - Maybe the symlink is slightly off? (sdodson@redhat.com)
  - azure: disable waagent data disk management (jminter@redhat.com)
  - Bug 1558689 - Add iproute to Dockerfile.rhel7 (rteague@redhat.com)
  - manage_node: don't add extra labels to infra/compute/master nodes
    (vrutkovs@redhat.com)
  - "Fixed ns_update var check" (erj826@bu.edu)
  - no_proxy: use 'append' to properly add a string to a list
    (vrutkovs@redhat.com)
  - openshift_aws: enabled different instance type to be used
    (mwoodson@redhat.com)
  - Updating node group mappings to use an openshift specific tag.
    (kwoodson@redhat.com)
  - Set UID,fsGroup and Linux options to cassandra RC's (ruben.vp8510@gmail.com)
  - Revert "Migrate hawkular metrics to a new namespace" (ruben.vp8510@gmail.com)
  - change from none to len of the string (davis.phillips@gmail.com)
  - Fully qualify all openshift/origin and openshift3/ose images
    (sdodson@redhat.com)
  - Add node_group_checks to openshift_node_group.yml (rteague@redhat.com)
  - Add openshift-node entry-point playbooks (rteague@redhat.com)
  - Fix invalid openshift_master_audit_config in hosts.example
    (vrutkovs@redhat.com)
  - Record etcd static pod version only if master-exec has stdout
    (vrutkovs@redhat.com)
  - upgrade: init facts on nodes so that NO_PROXY would include nodes
    (vrutkovs@redhat.com)
  - Enable container_manage_crgroup sebool (sdodson@redhat.com)
  - master config: join bootstrap settings and sync DS tasks
    (vrutkovs@redhat.com)
  - Add openshift_master_cluster_hostname to no_proxy list (vrutkovs@redhat.com)
  - Remove umount /var/lib/docker as docker-storage-setup --reset umount it
    (nakayamakenjiro@gmail.com)
  - Fix wrong path to docker storage (nakayamakenjiro@gmail.com)
  - Clean up docker-storage in a reliable mannger (nakayamakenjiro@gmail.com)
  - Fixed add_container_provider.yaml so it uses openshift_management_project
    variable name instead of set name (dluong@redhat.com)
  - Allow for overriding of the elb names to support shorter endings for the
    names (staebler@redhat.com)
  - Makes redeploy-registry-certificates consistent with
    openshift_hosted_manage_registry. (jtudelag@redhat.com)
  - - Include RHPAM templates in OpenShift release (fspolti@redhat.com)
  - upgrade: storage migrations should use 'until' to properly retry migrations
    (vrutkovs@redhat.com)
  - Standardize master restart (rteague@redhat.com)
  - Enable monitoring to scrape across namespaces (ironcladlou@gmail.com)
  - Fix to pass quoted unsafe strings (with characters like *,<,%) correctly to
    kubelet (avesh.ncsu@gmail.com)
  - Bug 1584609 - Update iptablesSyncPeriod in node-config.yaml
    (rteague@redhat.com)
  - Bug 1591186 - Skip version and sanity checks for openshift_node_group.yml
    (rteague@redhat.com)
  - registry-console: limit pods to masters (vrutkovs@redhat.com)
  - Align node startup async tasks with the ExecStartTimeout value
    (sdodson@redhat.com)
  - bug 1572493. Update default logging NS in openshift_health_checker
    (jcantril@redhat.com)
  - Fix minor indentation (rteague@redhat.com)
  - azure: pass image_name into tasks/create_blob_from_vm.yml
    (jminter@redhat.com)
  - azure: tag image as valid=true, not valid=True (jminter@redhat.com)
  - azure: don't try to print deployment failure message when there isn't one
    (jminter@redhat.com)
  - Azure: use empty dict if input image has no tags (pschiffe@redhat.com)
  - No code in openshift-ansible should be using CONFIG_FILE
    (ccoleman@redhat.com)
  - Add support for hostpath persistent volume definitions (dmsimard@redhat.com)
  - Revert "Make SDN read config file from sysconfig" (ccoleman@redhat.com)
  - Sync daemonset should start after node configmaps are created to avoid race
    conditions (vrutkovs@redhat.com)
  - Switch papr to use our new composite groups (sdodson@redhat.com)
  - fix typo to leave only one (wjiang@redhat.com)
  - Fix hostname check failure message (mgugino@redhat.com)
  - Add retries to SCC check on upgrade (rteague@redhat.com)
  - mount host signature lookaside configuration (bparees@redhat.com)
  - checks for . (erj826@bu.edu)
  - Adding etcd image variables to fix azure deployments. (kwoodson@redhat.com)
  - Add master-infra and all-in-one node-configs (sdodson@redhat.com)
  - Fix the docs, add additional .parr file description (teleyic@gmail.com)
  - Move openshift_node_group to private play (mgugino@redhat.com)
  - Don't restart dnsmasq during upgrade (rteague@redhat.com)
  - Fix ansible_service_broker role, needs openshift_facts (rteague@redhat.com)
  - Migrate HPA scale target refs in storage migration (sross@redhat.com)
  - fixes (sdodson@redhat.com)
  - Add a bit of detail about how to get configmaps during upgrade
    (sdodson@redhat.com)
  - Deploy shim scripts based on the runtime in use (sdodson@redhat.com)
  - Upgrade cri-o (sdodson@redhat.com)
  - Fix quoting (sdodson@redhat.com)
  - roles: openshift_control_plane: move docker scripts to crictl
    (runcom@redhat.com)
  - Install cri-tools even when crio isn't in use (sdodson@redhat.com)
  - suggestions (sdodson@redhat.com)
  - GlusterFS: Add GlusterFS hosts to openshift-hosted/config.yml playbook
    (jarrpa@redhat.com)
  - Add some openshift_node_group and openshift_node_group_name docs
    (sdodson@redhat.com)
  - Fix sanity_checks typos (mgugino@redhat.com)
  - Upgrade router and registry only when these are managed (vrutkovs@redhat.com)
  - [WIP] Azure: calculate input image for base and node image
    (pschiffe@redhat.com)
  - Migrate hawkular metrics to a new namespace (ruben.vp8510@gmail.com)
  - Set openshift_node_group_name for AWS hosts. (abutcher@redhat.com)
  - Device_type is deprecated for block devices. Use volume_type instead.
    (abutcher@redhat.com)
  - Fix flaky use of `oc process` (ironcladlou@gmail.com)
  - Bug 1589015 - Switch to rolling deployment for web console
    (spadgett@redhat.com)
  - Move openshift_master_manage_htpasswd into openshift_facts
    (sdodson@redhat.com)
  - Bug 1586197 - Increase async timeout (rteague@redhat.com)
  - Make the number of service catalog retries configurable (dyasny@gmail.com)
  - Remove default selector from sample inventory (tomas@sedovic.cz)
  - Check for node-group configmaps during upgrades (mgugino@redhat.com)
  - Fix the flake8 and pylint errors (tomas@sedovic.cz)
  - Add kuryr label examples to the sample inventory (tomas@sedovic.cz)
  - Remove podman from install it creates problems (sdodson@redhat.com)
  - Set openshift_node_group_name in OpenStack inventory (tomas@sedovic.cz)
  - [WIP] azure - do not tag node images as valid automatically
    (pschiffe@redhat.com)
  - Add placeholder for openshift_node_group play (mgugino@redhat.com)
  - Check for undefined node_output.results (sdodson@redhat.com)
  - Updating fluentd label and wait to be in a single shell rather than running a
    script from /tmp (ewolinet@redhat.com)
  - Add Luis Tomas to Kuryr and OpenStack owners (tomas@sedovic.cz)
  - add task to import_role (davis.phillips@gmail.com)
  - remove svc creation and master config from base tasks in vsphere cloud
    provider (davis.phillips@gmail.com)
  - azure: add no_log: true to acs-engine deploy task (jminter@redhat.com)
  - allow node config sync controller to handle multiple node labels
    (jminter@redhat.com)
  - Fix multimaster OpenStack deployment failure (tomas@sedovic.cz)
  - Force openshift_node_group_name for all nodes (mgugino@redhat.com)
  - Update ansible_service_broker_node_selector to new version
    (mgugino@redhat.com)
  - azure: always build images using ssd-backed VM (jminter@redhat.com)
  - azure: ensure cloud provider config is laid down in bootstrap node config
    (jminter@redhat.com)
  - Ensure repos only run during prerequisites.yml (mgugino@redhat.com)
  - dockergc: change image name to ose-control-plane (gscrivan@redhat.com)
  - Remove openshift_dns_ip configuration, not valid in 3.10 (sdodson@redhat.com)
  - Do not force-terminate etcd (kargakis@protonmail.ch)
  - typo (faust64@gmail.com)
  - Remove unused registry-console's imagestream (nakayamakenjiro@gmail.com)
  - Ensure packages are latest (sdodson@redhat.com)
  - Install cri-tools and podman (sdodson@redhat.com)
  - Generalized storage setup for nodes (cwilkers@redhat.com)
  - azure: format data disk for docker use (jminter@redhat.com)
  - update azure OWNERS (jminter@redhat.com)
  - Added container_manage_cgroup in order for systemd to run in pods due to
    update in selinux policy (dluong@redhat.com)


author: Tim Bielawa <tbielawa@redhat.com> 3.10.20-1
changelog:
  - Adds openshift_fs_inotify_max_user_instances to the node tuned profile.
    (jtudelag@redhat.com)
  - Make fs_inotify_max_user_watches configurable. (avesh.ncsu@gmail.com)


author: AOS Automation Release Team <aos-team-art@redhat.com> 3.10.21-1
changelog:
  - glusterfs: bind created volume to the claim (vrutkovs@redhat.com)
  - Wait for existing nodes to go Ready before approval (sdodson@redhat.com)
  - Fix ordering of etcd stop and mask (mgugino@redhat.com)


author: Jakub Čajka <jcajka@redhat.com> - 1.8.3-1
changelog:
  - bump to 1.8.3
  - fix CVE-2017-8932
  - Resolves: rhbz#1452616, rhbz#1452241, rhbz#1457169, rhbz#1448346


author: Jakub Čajka <jcajka@redhat.com> - 1.9.1-1
changelog:
  - Rebase to 1.9.1
  - fix CVE-2017-15041 and CVE-2017-15042
  - Resolves: rhbz#1500591, rhbz#1499827, rhbz#1500587, rhbz#1448494


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1.10.2-1.rhaos3.10.git095e88c
changelog:
  - bump to v1.10.2
  - built commit 095e88c
  - include rhaos3.10 in release tag
  - do not compress debuginfo with dwz to support delve debugger


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1.10.4-1.rhaos3.10.gitebaa77a
changelog:
  - bump to v1.10.4
  - remove devel and unittest subpackages - unused
  - debuginfo disabled for now, complains about %files being empty


