Bug 1935594

Preliminary changelog:

### Added
- Elliptic curve TLS certificates are now supported in pcsd ([ghissue#123])
- Support for corosync option `totem.block_unlisted_ips` ([rhbz#1720221])
- Support for displaying status of a single resource or tag ([rhbz#1290830])
- Support for displaying status of resources on a specified node
  ([rhbz#1285269])

### Fixed
- Node attribute expressions are now correctly reported as not allowed in
  resource defaults rules ([rhbz#1896458])
- Upgreded to jquery 3.6.0 ([rhbz#1882291, rhbz#1886342])
- Man page and help: note that 'pcs resource unclone' accepts clone resources
  as well ([rhbz#1930886])

### Changed
- python3-openssl was replaced with python3-cryptography ([rhbz#1927404])

Preliminary changelog:

### Added
- Elliptic curve TLS certificates are now supported in pcsd ([ghissue#123])
- Support for corosync option `totem.block_unlisted_ips` ([rhbz#1720221])
- Support for displaying status of a single resource or tag ([rhbz#1290830])
- Support for displaying status of resources on a specified node
  ([rhbz#1285269])
- New option `--brief` for `pcs resource disable --safe` or its alias `pcs
  resource safe-disable` that only prints errors ([rhbz#1909901])
- Support for updating scsi fencing devices without affecting other resources
  added in the new command `pcs stonith update-scsi-devices` ([rhbz#1759995],
  [rhbz#1872378])

### Fixed
- Node attribute expressions are now correctly reported as not allowed in
  resource defaults rules ([rhbz#1896458])
- Upgreded to jquery 3.6.0 ([rhbz#1882291, rhbz#1886342])
- Man page and help: note that 'pcs resource unclone' accepts clone resources
  as well ([rhbz#1930886])
- Improved error messages when a host is found to be a part of a cluster already
  ([rhbz#1690419])
- `pcs cluster sync` command now warns reloading corosync config is necessary
  for changes to take effect ([rhbz#1750240])
- Show user friendly error if unable to delete a group (due to the group being
  referenced within configuration) when moving resources out of the the group.
  ([rhbz#1678273])
- Exit with an error if `on-fail=demote` is specified for a resource operation
  and pacemaker doesn't support it

### Changed
- python3-openssl was replaced with python3-cryptography ([rhbz#1927404])

### Deprecated
- `pcs acl show` replaced with `pcs acl config`
- `pcs alert show` replaced with `pcs alert config`
- Undocumented command `pcs cluster certkey` replaced with `pcs pcsd certkey`
- `pcs cluster pcsd-status` replaced with `pcs status pcsd` or `pcs pcsd status`
- `pcs constraint [location | colocation | order | ticket] show | list` replaced
  with `pcs constraint [location | colocation | order | ticket] config`
- `pcs property show`, `pcs property list` replaced with `pcs property config`
- pcsd urls: `/remote/config_backup`, `/remote/node_available`,
  `/remote/node_restart`, `/remote/resource_status`
- Undocumented syntax for constraint location rules:
  - `date start=<date> gt` replaced with `date gt <date>`
  - `date end=<date> lt` replaced with `date lt <date>`
  - `date start=<date> end=<date> in_range` replaced with `date in_range <date>
    to <date>`
  - `operation=date_spec` replaced with `date-spec <date-spec options>`
  - converting invalid score to score-attribute=pingd
- Delimiting stonith devices with a comma in `pcs stonith level add | clear |
  delete | remove` commands, use a space instead
- `pcs stonith level delete | remove [<target>] [<stonith id>]...` replaced with
  `pcs stonith level delete | remove [target <target>] [stonith <stonith id>]...`
- `pcs stonith level clear [<target> | <stonith ids>]` replaced with
  `pcs stonith level clear [target <target> | stonith <stonith id>...]`
- `pcs tag list` replaced with `pcs tag config`

0.10.9 changes:

### Added
- Elliptic curve TLS certificates are now supported in pcsd ([ghissue#123])
- Support for corosync option `totem.block_unlisted_ips` ([rhbz#1720221])
- Support for displaying status of a single resource or tag ([rhbz#1290830])
- Support for displaying status of resources on a specified node
  ([rhbz#1285269])
- New option `--brief` for `pcs resource disable --safe` or its alias `pcs
  resource safe-disable` that only prints errors ([rhbz#1909901])
- Support for updating scsi fencing devices without affecting other resources
  added in the new command `pcs stonith update-scsi-devices` ([rhbz#1759995],
  [rhbz#1872378])
- Option `--autodelete` for `pcs resource move` command which removes a location
  constraint used for moving a resource, once the resource has been moved. This
  feature is in tech-preview state and thus may be changed in the future
  ([rhbz#1847102])

### Fixed
- Node attribute expressions are now correctly reported as not allowed in
  resource defaults rules ([rhbz#1896458])
- Upgreded to jquery 3.6.0 ([rhbz#1882291, rhbz#1886342])
- Man page and help: note that 'pcs resource unclone' accepts clone resources
  as well ([rhbz#1930886])
- Improved error messages when a host is found to be a part of a cluster already
  ([rhbz#1690419])
- `pcs cluster sync` command now warns reloading corosync config is necessary
  for changes to take effect ([rhbz#1750240])
- Show user friendly error if unable to delete a group (due to the group being
  referenced within configuration) when moving resources out of the the group.
  ([rhbz#1678273])
- Exit with an error if `on-fail=demote` is specified for a resource operation
  and pacemaker doesn't support it
- The `pcs status nodes` command now correctly shows status of nodes that are
  both in maintenance and standby modes ([rhbz#1432097])

### Changed
- python3-openssl was replaced with python3-cryptography ([rhbz#1927404])

### Deprecated
- `pcs acl show` replaced with `pcs acl config`
- `pcs alert show` replaced with `pcs alert config`
- Undocumented command `pcs cluster certkey` replaced with `pcs pcsd certkey`
- `pcs cluster pcsd-status` replaced with `pcs status pcsd` or `pcs pcsd status`
- `pcs constraint [location | colocation | order | ticket] show | list` replaced
  with `pcs constraint [location | colocation | order | ticket] config`
- `pcs property show`, `pcs property list` replaced with `pcs property config`
- pcsd urls: `/remote/config_backup`, `/remote/node_available`,
  `/remote/node_restart`, `/remote/resource_status`
- Undocumented syntax for constraint location rules:
  - `date start=<date> gt` replaced with `date gt <date>`
  - `date end=<date> lt` replaced with `date lt <date>`
  - `date start=<date> end=<date> in_range` replaced with `date in_range <date>
    to <date>`
  - `operation=date_spec` replaced with `date-spec <date-spec options>`
  - converting invalid score to score-attribute=pingd
- Delimiting stonith devices with a comma in `pcs stonith level add | clear |
  delete | remove` commands, use a space instead
- `pcs stonith level delete | remove [<target>] [<stonith id>]...` replaced with
  `pcs stonith level delete | remove [target <target>] [stonith <stonith id>]...`
- `pcs stonith level clear [<target> | <stonith ids>]` replaced with
  `pcs stonith level clear [target <target> | stonith <stonith id>...]`
- `pcs tag list` replaced with `pcs tag config`

Changes in 0.10.10:
### Added
- Support for new role names introduced in pacemaker 2.1 ([rhbz#1885293])

### Fixed
- Traceback in some cases when --wait without timeout is used

A regression test suite was conducted. 
Because of a found regressions and late build, latest package could not be tested on time, more test will follow and all potential issues will be reviewed and filed as new bzs.
Marking as Verified for pcs-0.10.10-1.el8

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Low: pcs security, bug fix, and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2021:4142