Switch tags runners to use docker-privileged-xl

See merge request !11

Update to the recently upstream release-3.11 and apply patches #67280 and #67898

See merge request !10

Building Openshift 3.11 requires more RAM than available on docker-privileged runners

(cherry picked from commit ba8e564b)

The dynamic config manager was using all
service endpoints without taking
the route's targetPort into account

Adds a possibility to configure a list of annotations that need to vary
the HAProxy configuration, and adds a route annotation that disables
matching routes to existing "blueprints"

UPSTREAM: 68767: Fix drain for evicting terminal DS pods and pods with local storage

UPSTREAM: 78475: Increase device discovery timeout to 30seconds/equal to checker_timeout

Signed-off-by: Humble Chirammal <hchiramm@redhat.com>

Bug 1713982: client switch between 3.7 and 3.9 broke creation of clus…

Bug 1713982: client switch between 3.7 and 3.9 broke creation of cluster level resources; ensure namespace is empty string for cluster level resources

Bug 1718542: Fix egress monitoring for some rare corner cases.

[3.11] Bug 1693025: Add CSRF to token request endpoint

In a case when a pod sends traffic using egressIP, and receives
no reply, we should no treat that as the node being offline. Thus
start sending ping probes upon our first suspicion that the
node might be offline, but actually dont report for the first time
as that would be confusing.

Also, anytime we encounter received packets reset the retries counter.

Signed-off-by: Monis Khan <mkhan@redhat.com>

Signed-off-by: Monis Khan <mkhan@redhat.com>

Signed-off-by: Monis Khan <mkhan@redhat.com>

Signed-off-by: Monis Khan <mkhan@redhat.com>

Signed-off-by: Monis Khan <mkhan@redhat.com>

Bug 1715056: Work around a kernel bug in the assign-macvlan code [3.11]

[3.11] cmd/sdn-cni-plugin: add OWNERS file

With SDN team members as review/approve.

We should always set these headers on all pages of the OAuth server.

Signed-off-by: Monis Khan <mkhan@redhat.com>

UPSTREAM: 76983: Shuffle addresslist for random mount server and cleanup error messages

Bug# 1618465

Signed-off-by: hchiramm <hchiramm@redhat.com>

UPSTREAM: 76788: Clean links handling in cp's tar code

UPSTREAM: 76184: Use pvc uid in endpoint/service label

Signed-off-by: Humble Chirammal <hchiramm@redhat.com>

[release-3.11] Don't send identical SAR checks on ImageStream creation

When an ImageStream is created with a large number of tags that
reference other ImageStreamTags in the same namespace, it is wasteful to
check for permissions to acces every single one, serially.

Signed-off-by: Steve Kuznetsov <skuznets@redhat.com>