Use control-plane label for nodeSelector and Tolerations

Comments pertaining to the Stx 8.0 Release Notes in this Gerrit review
will be addressed by Juanita in this story.

Story: 2010441
Task: 46867

Upstream has deprecated 'node-role.kubernetes.io/master'
to use 'node-role.kubernetes.io/control-plane' in k8s 1.24.

Platform and applications need to be updated to use 'control-plane'
with nodeSelector/Tolerations so we may upgrade from 'master'.

This updates pod nodeSelector to use
'node-role.kubernetes.io/control-plane' instead of
'node-role.kubernetes.io/master'.

This updates pod Tolerations to support both:
- 'node-role.kubernetes.io/master'
- 'node-role.kubernetes.io/control-plane'

This commit updates the documentation examples to reflect the above specified changes.

This r8-0-release-notes-6a6ef57f4d99.rst topic has been created to only address updates in Line 745 to 747.

Story: 2010301
Task: 46670

Signed-off-by: Boovan Rajendran <boovan.rajendran@windriver.com>
Change-Id: I1722a025664c70f78a21fdc02fd7750935ef2bc4

doc/source/releasenotes/index.rst

@@ -12,6 +12,10 @@ You can find details about a release on the specific release page.
      - Release Date
      - Notes
      - Status
+   * - StarlingX R8.0
+     - 2023-01
+     - :doc:`r8-0-release-notes-6a6ef57f4d99`
+     - Maintained
    * - StarlingX R7.0
      - 2022-07
      - :doc:`r7-0-release-notes-85446867da2a`
@@ -69,4 +73,4 @@ project-team-guide/stable-branches.html#maintenance-phases>`_ definitions.
    r5_0_1_release
    r6-0-release-notes-bc72d0b961e7
    r7-0-release-notes-85446867da2a
-
+   r8-0-release-notes-6a6ef57f4d99

doc/source/security/kubernetes/configure-oidc-auth-applications.rst

@@ -485,7 +485,7 @@ are:
     grpc:
       enabled: false
     nodeSelector:
-      node-role.kubernetes.io/master: ""
+      node-role.kubernetes.io/control-plane: ""
     volumeMounts:
     - mountPath: /etc/dex/tls/
       name: https-tls
@@ -498,6 +498,9 @@ are:
     - key: "node-role.kubernetes.io/master"
       operator: "Exists"
       effect: "NoSchedule"
+    - key: "node-role.kubernetes.io/control-plane"
+      operator: "Exists"
+      effect: "NoSchedule"
     affinity:
       podAntiAffinity:
         requiredDuringSchedulingIgnoredDuringExecution:
@@ -523,7 +526,7 @@ The default helm overrides for oidc-client are:
       tlsCert: /etc/dex/tls/https/server/tls.crt
       tlsKey: /etc/dex/tls/https/server/tls.key
     nodeSelector:
-      node-role.kubernetes.io/master: ""
+      node-role.kubernetes.io/control-plane: ""
     service:
       type: NodePort
       port: 5555
@@ -533,6 +536,9 @@ The default helm overrides for oidc-client are:
     - key: "node-role.kubernetes.io/master"
       operator: "Exists"
       effect: "NoSchedule"
+    - key: "node-role.kubernetes.io/control-plane"
+      operator: "Exists"
+      effect: "NoSchedule"
     affinity:
       podAntiAffinity:
         requiredDuringSchedulingIgnoredDuringExecution:
@@ -564,3 +570,6 @@ The default helm overrides for secret-observer are:
       - key: "node-role.kubernetes.io/master"
         operator: "Exists"
         effect: "NoSchedule"
+      - key: "node-role.kubernetes.io/control-plane"
+        operator: "Exists"
+        effect: "NoSchedule"