This release includes the following changes (among other things):

• Set Kubernetes default version to v1.19.9
• Remove local lb privileged (#7454)
• Check kube-apiserver up on all masters before upgrade (#7217)
• Check for dummy kernel module (#7348)
• containerd,docker: stop installing extras repo on CentOS/RHEL
• Calico: fixup check when ipipMode / vxlanMode is not present
• Update azure cloud config (#7221)
• roles/docker: Make repokey fingerprint overrideable (#7263)
• Adding other masters sequentially, not in parallel (#7166)
• calico: fix NetworkManager check (#7169)
• Remove ignore_errors from drain tasks and enable retires (#7151)
• Correct Jinja Syntax for etcd-unsupported-arch (#6919)
• Fix unintended SIGPIPEs. (#7214)
• Fix: Bastion undefined variable (#7227)
• Ensure when use_oracle_public_repo is set to false the public Oracle
• Fix ansible calico route reflector tasks in calico role (#7224)
• Run containerd related tasks on OracleLinux. (#7250)
• Remove deletion of coredns deployment. (#7211)
• Fix Restart network doesn't work on Fedora CoreOS (#7271)
• Only use stat get_checksum: yes when needed (#7270)
• Fixup cri-o metacopy mount options (#7287)
• Ensure kubeadm doesn't use proxy (#7275)
• Ensure we gather IPv6 facts
• Add privileged_without_host_devices support (#7343)
• Auto renew control plane certificates (#7358)
• Fix k8s-certs-renew for k8s < 1.20 (#7410)
• Fixup kubelet.conf to point to kubelet-client-current.pem (#7347)
• Fix "api is up" check (#7295)
• Fix remove-node by removing jq usage (#7405)
• Fix reset when using containerd (#7308)
• Fix proxy usage when *_PROXY are present in environment (#7309)
• Fix the filename </etc/vault> is Duplicate in the reset role. (#7313)
• Fix recover-control-plane undefined 'proxy_disable_env' variable (#7326)
• Fix: added string to bool conversion for use_localhost_as_kube api load balancer (#7324)