Because using python Program create inventory it will happen error, thus I change python pip version to install kubespray requirements.

* Add variables to configure Containerd default runtime, untrusted runtime and additional runtimes

* Add containerd settings to sample inventory

* Empty commit

Related to #5432

* Add AWS ALB Ingress Controller Ansible role

* remove trailing spaces

* update owners

* ALB ingress: update rbac clusterrole and remove role

* Move alb-ingress role to roles/kubernetes-apps/ingress_controller folder

* Add document about adding/replacing a node

* Update nodes.md

Amend for comments

* Support configuring the insert mode

Defaults to the upstream default https://docs.projectcalico.org/v3.9/reference/felix/configuration

so nothing should change for existing deployments.

This allows coexistence with other firewall management technologies.

* Add a note to the sample config

Solves problem with mitogen about 'Compress object has no attribute copy' in zlib module.

* Merge OracleLinux in RedHat bootstrap-os

* Set default for use_oracle_public_repo in main.yaml

Allows to configure additionnal zone for domains not resolved by `upstream_dns_servers`.

* Add docker-ce 19.03 packages for Debian & Ubuntu

K8s has updated the recommended Docker version to 19.03. More
specifically it should be 19.03.4, but since we used 18.06.7 instead of
.2, I'm assuming the latest patch version should be used here as well.

* Add docker 19.03 for redhat

* Use k8s.gcr.io for kubernetes related images

* Use k8s.gcr.io in inventory sample

* Kubernetes 1.16.8

* Use 1.16.8 in sample inventory and kubespray-defaults

* upgrade metrics server and resizer images version

* scope "apps" api group for addon resizer

Signed-off-by: Chris Randles <randles.chris@gmail.com>

The 'regexp' parameter matches last occurrence of a line starting with 'proxy=' and replaces it with the one defined in 'line' parameter. If no match - it works same way as before. This fixes resuming cluster deployments failed after that task (if there was no more than one line starting with 'proxy' in the yum.conf file - this condition should also be reassured with the change introduced here) eg. if they were initiated with Terraform.

refs #5277

As the issue describes, when no external or local load-balanced is used,
kube-proxy won't be able to contact apiserver at 127.0.0.1. So the
config map should be left as is.

* calico VXLAN mode

* check vars if calico backend defined

* Upgrade etcd to 3.3.18

* Try with etcd 3.3.15 (kubeadm 1.16.7 default)

* Back to square one

* Try with 3.3.11

* Upgrade etcd to 3.3.18 (take 2)

* Try with 3.3.12

* Add resources needed to deploy 1.6.4

* Use cilium v1.6.4

* Change deprecated option name

* Add update crd to clusterrole cilium

* Cilium 1.6.4 -> 1.6.5

* Make monitor-aggregation config configurable as a variable

* Change monitor-aggregation default none->medium

* Cilium 1.6.5 -> 1.6.6

* Update to 1.7.0

* v1.7.0->v1.7.1

* install cinder-csi before upgrading nodes

* Only run the Cinder CSI when enabled

https://github.com/containerd/containerd/releases/tag/v1.2.11
CVE-2019-16884 / CVE-2019-17596

https://github.com/containerd/containerd/releases/tag/v1.2.12
CVE-2019-19921 / CVE-2019-16884 / CVE-2019-11253

https://github.com/containerd/containerd/releases/tag/v1.2.13



Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>

+ use more secure `command` instead of `shell`
+ read-only command doesn't change state - make idempotent
+ multi-line long string