cri-o-1.17.3-bp152.1.26

- Update to version 1.17.3:
  * Bump version to 1.17.3
  * Update c/image to v5.3.1
  * sandbox: Make sure the label annotation is proper JSON
  * container_server: Wrap a few more errors in LoadSandbox
  * restore tests: verify some namespace lifecycle cases work
  * fail on failed pinns
  * pinns: pin to /var/run/*ns instead of /var/run/crio/ns/*
  * Add the -d flag when installing runc for circle ci
  * Add the mounts that are required by systemd
  * bump to 1.17.2

- Use new pause:3.2 image

- Update to v1.17.1:
  * Drop conmonmon
  * Update docs and completions for crio wipe --force
  * wipe: Add a force flag for skipping version check
  * Restore sandbox selinux labels directly from config.json
  * klog: don't write to /tmp
  * Pass down the integer value of the stop signal
  * exec: Close pipe fds to prevent hangs
  * Unwrap errors from label.Relabel() before checking for ENOTSUP
  * oci: Handle timeouts correctly for probes

- Put default configuration in /etc/crio/crio.conf.d/00-default.conf
  in replacement for /etc/crio/crio.conf

- Uncomment default apparmor profile to always fallback to the
  default one

- Remove prevent-local-loopback-teardown-rh1754154.patch which is
  now included in upstream
- Update to v1.17.0:
  * Major Changes
  - Allow CRI-O to manage IPC and UTS namespaces, in addition to
    Network
  - Add support for drop-in configuration files
  - Added image pull and network setup metrics
  - Image decryption support
  - Remove unneeded host_ip configuration value
  * Minor Changes
  - Setup container environment variables before user
  - Move default version file location to a tmpfs
  - Failures to stop the network will now cause a stop sandbox
    request to fail
  - Persist container exit codes across reboot
  - Add conmonmon: a conmon monitoring loop to protect against
    conmon being OOM'd
  - Add namespaces{-_}dir CLI and config option
  - Add disk usage for ListContainerStats
  - Introduce new runtime field to restrict devices in privileged
    mode

- Fix invalid apparmor profile (bsc#1161179)

- Include system proxy settings in service if present (bsc#1155323)

- Removed the usage of `name_` variables to reduce the error
  proneness
- Fixed systemd unit install locations for crio-wipe.service and
  crio-shutdown.service (bsc#1161056)

- Add prevent-local-loopback-teardown-rh1754154.patch to stop local loopback interfaces being torndown before cluster is bootstrapped

- Make cgroup-driver for kubelet be cgroupfs for SLE to be consistent
  with the cri-o configuration

- Update to v1.16.1:
  * Add manifest list support
  * Default to system.slice for conmon cgroup
  * Don't set PodIPs on host network pods

- switch to libcontainers-common requires, as the other two are
  provided by it already (avant-garde#1056)

- Revert cgroup_manager from systemd to cgroupsfs for SLE15
  k8s default is cgroupfs and in can be modified at runtime by the
  `--kubelet-cgroups` flag. However this flag is deprecated and
  avoinding it is currently preferred over introducing it. In order
  to switch to systemd as the cgroups manager in SLE15 further analysis is
  required to find a suitable configuration strategy.

- Use single service macro invocation
- Add shell completions directories to files

- Add crio and crio-status shell completions
- Add crio-wipe and crio-shutdown services
- Update kubelet verbosity to `-v=2`
- Update conmon cgroup to `system.slice`
- Update crio.conf to match latest version
- Update to v1.16.0:
  * Major Changes
  * Add support for manifest lists
  * Dual stack IPv6 support
  * HUP reload of SystemRegistries
  * file_locking is no longer a supported option in the
    configuration file
  * Hooks are no longer found implicitally.
  * conmon now lives in a separate repository and must be
    downloaded separately.
  * Minor
  * All OCI mounts are mounted as rw when a pod is privileged
  * CRI-O can now run on a cgroupv2 system (only with the runtime
    crun)
  * Add environment variables to CLI flags
  * Add crio-status client to conveniently query status of crio
    or a container
  * Conmon is now found in $PATH if a path isn't specified or is
    empty
  * Add metrics to configuration file
  * Bandwidth burst can only be 4GB
  * If another container manager shares CRI-O's storage (like
    podman), CRI-O no longer attempts to restore them
  * Increase validation for log_dir and runtime_type in
    configuration
  * Allow usage of short container ID in ContainerStats
  * Make image volumes writeable by the container user
  * Various man page fixes
  * The crio-wipe script is now included in the crio binary (as
    crio wipe), and only removes CRI-O containers and images.
  * Set some previously public packages as internal (client, lib,
    oci, pkg, tools, version)
  * infra container now spawned as not privileged

- Switch to `systemd` cgroup driver in kubelet config also

- Switch to `systemd` cgroup manager in replacement for `cgroupfs`

- Remove obsolete Groups tag (fate#326485)

- Fix default apparmor profile to match the latest version