[release-announce] magnum 8.0.0 (stein)

no-reply at openstack.org no-reply at openstack.org
Wed Apr 10 12:26:02 UTC 2019


We are satisfied to announce the release of:

magnum 8.0.0: Container Management project for OpenStack

This release is part of the stein release series.

The source is available from:

    https://git.openstack.org/cgit/openstack/magnum

Download the package from:

    https://tarballs.openstack.org/magnum/

Please report issues through:

    https://bugs.launchpad.net/magnum/+bugs

For more details, please see below.

8.0.0
^^^^^

New Features

* Added monitoring_enabled to install prometheus-operator monitoring
  solution by means of helm stable/prometheus-operator public chart.
  Defaults to false. grafana_admin_passwd label can be used to set
  grafana dashboard admin access password. If grafana_admin_passwd is
  not set the password defaults to prom_operator.

Changes in magnum 7.0.0..8.0.0
------------------------------

18ce317d [fedora-atomic-k8s] Allow all traffic from master to worker nodes
93b6cefd Add API ref for <ClusterID>/actions/resize
a0163e40 Replace openstack.org git:// URLs with https://
b04363df Update UPPER_CONSTRAINTS_FILE for stable/stein
25274c3e Update .gitreview for stable/stein
a46d2ffc [k8s] Install prometheus monitoring with helm
c47fde0c Improve floating IP allocation
15ecdb80 Support <ClusterID>/actions/resize API
13e8c11f k8s_fedora: Add ca_key before all deployments
b5a6ee1d Migrate legacy jobs to Ubuntu Bionic
c39f1150 [fedora-atomic-k8s] Adding Node Problem Detector
16c2a4cf ci: Disable functional tests
2595fda3 Ensure http proxy environment is available during 'atomic install' for k8s
2ab874a5 [k8s] Make flannel self-hosted
18fc68dd Update min tox version to 2.0
83c8b13b Release k8s v1.11.8, v1.12.6 and v1.13.4
a47f5a39 make sure to set node_affinity_policy for Mesos template definition
e4b05bbd Fix swarm functional job
2cf4df08 Fix prometheus installation script
8c8cd7d1 Return health_status for cluster listing
36955360 Do not exit in the enable-helm-tiller script
14b46ea2 FakeLoopingCall raises IOError
31c82625 [k8s-fedora-atomic] Security group definition for worker nodes
2bbfd52a [k8s-fedora-atomic] Use ClusterIP for prometheus service
20d03919 Return instance ID of worker node
4f84c849 Add server group for cluster worker nodes
ea362b13 python3 fix: decode binary cert data if encountered
05538434 Add python 3.6 unit test job
e6b33251 Add reno for flannel reboot fix
d866fb61 Fix async reserved word in python3.7
ca442a72 [k8s] Add trustee as a secret in kube-system
c38edc69 [k8s] Update cluster health status by native API
230ad3f2 [k8s] helm install metrics service
b2a6a771 [k8s_fedora] Add heat-agent to worker nodes
6aee8649 Add hidden flag to cluster template
0b5f4260 k8s_fedora: Deploy tiller
82344703 Fixing container-build job
87a743ad Fix typo in octavia-ingress-controller doc
b555f90c Allow overwriting labels on swarm mode creation
d2f36a2e Delete loadbalancers and floatingips for service and ingress
a941822c Support octavia-ingress-controller
e7efb49a heat-agent: Add openssh-clients
f69a54d9 [k8s-fedora-atomic] Update k8s default version
0a5fd471 Support multi k8s image versions
766a64a4 Allow cluster template being renamed
60f97993 ci: Rebuild kubernetes v1.11.6 containers
6a9c490b Update kube cmd documentation links
2ccf639a Add framework for magnum-status upgrade check
f63761a8 [k8s_fedora_atomic] Delete floating ip for load balancer
daf34d9d Use oslo_serialization instead of the json module directly
9f371967 Use python3 for functional tests
41cd8579 Use MultiType and types.text instead of str
6a034827 Bump k8s version up to v1.11.5
54bea06b Fix python3 compatibility
b6936894 Fix prometheus monitoring
49d04449 Do not use 'exit' in the script
63aa9caf Remove -U from pip install
09f88074 Enable CoreDNS prometheus metrics plugin
59da4e25 Support Keystone AuthN and AuthZ for k8s
ffc61816 support http/https proxy for discovery url
ba1ca0e4 Removed admin_* from devstack config
26c28a03 Change docker image pulling policy from Always to IfNotPresent
6c61a1a9 k8s_fedora: Use external kubernetes/cloud-provider-openstack
b6ad606b containers: clean-up build code
b577aa42 k8s_build: Build kubernetes v1.11.6 containers
d391dbdc Fix use of magnum_repository in container-publish
60c996d2 Changes in container builder
cae7fa21 [k8s] Cluster creation speedup
20d965c8 Build images in the ci
a9802089 Release note for cluster pre-delete
e18ced4d Delete Octavia loadbalancers for fedora atomic k8s driver
844e4db2 functional: stop using concurrency of 1 for api tests
98fcd794 functional: bump flavor specs
2e2ebaf6 functional: use vexxhost-specific nodes with nested virt
3646a59e functional: use default admission_control_list values
d1647970 functional: bump atomic version to latest
e0fd3f9e functional: add body for delete_namespaced_service in k8s
d6cc77b1 functional: retrieve cluster to get stack_id
cc8caf52 fix bug link in readme
f27bde71 Add support for www_authenticate_uri in ContextHook
cf5f78e5 Add iptables -P FORWARD ACCEPT unit
8f4643d8 Make providing a keypair optional
e0ed3018 Add missing ws separator between words
daa7d049 Cleaned up devstack logging
718cb9c9 Add support for www_authentication_uri
9a6698fb Add Octavia python client for Magnum
5d1eab9d [K8S] Pass cluster name to controller-manager
c98e9525 Add heat_container_agent_tag label
547f9309 Minor fixes to re-align with Ironic
095b49e6 [swarm-mode] Remove --live-restore from Docker daemon options
48e2e774 Update heat-container-agent version tag
423d1863 Fixing gate failing due to bad AMQP virtual_host
05f0cddc Make master node schedulable with taints
f2fd732c Trivial code cleanups
3f773f1f Use existing templates for cluster-update command
36c99a51 Make cover jobs non-voting
bc36ef8f Add prometheus-monitoring namespace
bdeed363 add python 3.6 unit test job
37231f18 switch documentation job to new PTI
4a1a4be0 Use templates for cover and lower-constraints
d3bf6a49 Make X-Subject-Token search case unsensitive
0cf61dfb Add prometheus & grafana container image tags
772aab28 import zuul job settings from project-config
d1ee94a1 [swarm-mode] allow TCP port 2377 to swarm master node
6390e0db [k8s] Add kubelet to the master nodes
72f7e5f7 Fix unit test failure with python3.6
85981d89 Remove deprecated `tls-ca-file` option from kube-apiserver
d80febb3 Add health_status and health_status_reason to cluster
419a2285 Fixing CoreOS driver
a26c2225 Deprecate send_cluster_metrics
7d4d22b9 Remove -u root as mysql is executed with root user
4f121e50 [k8s] Add proxy to master and set cluster-cidr
c2b6b3b9 Imported Translations from Zanata
77a22067 Fix enable_cloud_provider check
ec3fcf5c Imported Translations from Zanata
4bb16422 Remove the last slash of extra_params['auth_url']
7fdff38a [k8s] Set order in kubemaster software deployments
80fcf76d [k8s] Add new label `service_cluster_ip_range`
32f80567 Update reno for stable/rocky
a400ea79 Fix doc format
7e23ee6b Docs: Replace non-existing command
87b06c81 Remove fedora-atomic diskimage-builder element


Diffstat (except docs and test files)
-------------------------------------

.gitreview                                         |   1 +
.zuul.yaml                                         | 147 ++++-
README.rst                                         |   2 +-
api-ref/source/clusters.inc                        |  57 ++
api-ref/source/parameters.yaml                     |  13 +
api-ref/source/samples/cluster-resize-req.json     |   5 +
contrib/drivers/heat/dcos_centos_template_def.py   |   2 +-
devstack/lib/magnum                                |  23 +-
devstack/plugin.sh                                 |   2 +-
.../heat-container-agent/Dockerfile                |   4 +-
.../heat-container-agent/config.json.template      |   0
.../heat-container-agent/launch                    |   0
.../heat-container-agent/manifest.json             |   0
.../scripts/50-heat-config-docker-compose          |   0
.../heat-container-agent/scripts/55-heat-config    |   0
.../scripts/configure_container_agent.sh           |   0
.../scripts/heat-config-notify                     |   0
.../heat-container-agent/scripts/hooks/atomic      |   0
.../scripts/hooks/docker-compose                   |   0
.../heat-container-agent/scripts/hooks/script      |   0
.../scripts/write-os-apply-config-templates.sh     |   0
.../heat-container-agent/service.template          |   0
.../heat-container-agent/tmpfiles.template         |   0
.../kubernetes-apiserver/config.json.template      | 192 +++++++
.../kubernetes-controller-manager/Dockerfile       |  24 +
.../config.json.template                           | 183 ++++++
.../controller-manager                             |   7 +
.../kubernetes-controller-manager/launch.sh        |  10 +
.../kubernetes-controller-manager/service.template |  12 +
.../kubernetes-kubelet/config.json.template        | 424 ++++++++++++++
.../kubernetes-scheduler/config.json.template      | 183 ++++++
lower-constraints.txt                              |   2 +
magnum/api/attr_validator.py                       |  10 +-
magnum/api/controllers/v1/bay.py                   |  12 +-
magnum/api/controllers/v1/baymodel.py              |  14 +-
magnum/api/controllers/v1/cluster.py               |  24 +-
magnum/api/controllers/v1/cluster_actions.py       |  90 +++
magnum/api/controllers/v1/cluster_template.py      |  27 +-
magnum/api/controllers/v1/federation.py            |   4 +-
magnum/api/controllers/v1/magnum_services.py       |   4 +-
magnum/api/controllers/v1/quota.py                 |   3 +-
magnum/api/controllers/v1/types.py                 |   2 +-
magnum/api/controllers/versions.py                 |   3 +-
magnum/api/hooks.py                                |   9 +-
magnum/api/http_error.py                           |   7 +-
magnum/api/middleware/parsable_error.py            |   7 +-
magnum/api/utils.py                                |   2 +-
magnum/cmd/status.py                               |  53 ++
.../common/cert_manager/barbican_cert_manager.py   |  27 +-
magnum/common/cert_manager/local_cert_manager.py   |  24 +-
.../cert_manager/x509keypair_cert_manager.py       |   5 +
magnum/common/clients.py                           |  17 +
magnum/common/exception.py                         |  10 +-
magnum/common/keystone.py                          |   7 +-
magnum/common/name_generator.py                    |   4 +-
magnum/common/neutron.py                           |  76 +++
magnum/common/octavia.py                           |  98 ++++
magnum/common/policies/cluster.py                  |  11 +
magnum/common/urlfetch.py                          |   2 +-
magnum/common/x509/operations.py                   |   5 +-
magnum/conductor/api.py                            |  17 +
magnum/conductor/handlers/ca_conductor.py          |  11 +-
magnum/conductor/handlers/cluster_conductor.py     |  61 ++
magnum/conductor/handlers/common/cert_manager.py   |  20 +-
magnum/conductor/handlers/conductor_listener.py    |   8 +-
magnum/conductor/k8s_api.py                        |  65 ++-
magnum/conf/__init__.py                            |   2 +
magnum/conf/cluster.py                             |   4 +
magnum/conf/drivers.py                             |   5 +-
magnum/conf/octavia.py                             |  58 ++
magnum/conf/trust.py                               |   2 +-
.../87e62e3c7abc_add_hidden_to_cluster_template.py |  30 +
.../cbbc65a86986_add_health_status_to_cluster.py   |  38 ++
magnum/db/sqlalchemy/api.py                        |  22 +-
magnum/db/sqlalchemy/models.py                     |  10 +-
magnum/drivers/common/driver.py                    |  29 +-
.../drivers/common/image/fedora-atomic/README.rst  |  82 ---
.../common/image/fedora-atomic/element-deps        |   4 -
.../fedora-atomic/environment.d/50-fedora-atomic   |   2 -
.../fedora-atomic/finalise.d/80-fedora-atomic      |  69 ---
.../image/fedora-atomic/install_imagebuild_deps.sh |  22 -
.../image/fedora-atomic/package-installs.yaml      |   2 -
.../image/fedora-atomic/validate_atomic_image.sh   |  29 -
magnum/drivers/common/k8s_monitor.py               |  72 +++
.../templates/environments/enable_floating_ip.yaml |   2 -
.../environments/enable_lb_floating_ip.yaml        |   2 +
.../kubernetes/fragments/calico-service.sh         |  54 +-
.../kubernetes/fragments/configure-etcd.sh         |  28 +-
.../fragments/configure-kubernetes-master.sh       | 179 ++++--
.../fragments/configure-kubernetes-minion.sh       |  61 +-
.../kubernetes/fragments/core-dns-service.sh       |  19 +-
.../kubernetes/fragments/enable-auto-healing.sh    | 117 ++++
.../fragments/enable-cert-api-manager.sh           |  20 +-
.../kubernetes/fragments/enable-helm-tiller.sh     | 232 ++++++++
.../fragments/enable-ingress-controller.sh         |  26 +-
.../kubernetes/fragments/enable-ingress-octavia.sh | 122 ++++
.../kubernetes/fragments/enable-ingress-traefik.sh |   9 -
.../kubernetes/fragments/enable-keystone-auth.sh   | 185 ++++++
.../kubernetes/fragments/enable-node-exporter.sh   |  32 --
.../fragments/enable-prometheus-monitoring.sh      | 216 +++++--
.../kubernetes/fragments/enable-services-master.sh |  10 +-
.../kubernetes/fragments/flannel-config-service.sh |  73 ---
.../kubernetes/fragments/flannel-service.sh        | 280 ++++++---
.../kubernetes/fragments/install-helm-modules.sh   |  29 +
.../fragments/kube-apiserver-to-kubelet-role.sh    | 263 ++++++++-
.../kubernetes/fragments/kube-dashboard-service.sh | 121 ++--
.../kubernetes/fragments/make-cert-client.sh       |   4 +-
.../templates/kubernetes/fragments/make-cert.sh    |   2 +-
.../kubernetes/fragments/start-container-agent.sh  |  41 +-
.../kubernetes/fragments/write-flannel-config.sh   |  28 -
.../fragments/write-heat-params-master.yaml        |  19 +-
.../kubernetes/fragments/write-heat-params.yaml    |   4 +-
.../kubernetes/fragments/write-kube-os-config.sh   |  11 +-
.../templates/kubernetes/helm/metrics-server.sh    |  83 +++
.../kubernetes/helm/prometheus-operator.sh         | 165 ++++++
.../common/templates/{lb.yaml => lb_api.yaml}      |   0
magnum/drivers/common/templates/lb_etcd.yaml       |  52 ++
.../swarm/fragments/add-docker-daemon-options.sh   |   5 +
.../common/templates/swarm/fragments/make-cert.py  |   1 +
.../templates/swarm/fragments/network-service.sh   |  23 +
magnum/drivers/heat/driver.py                      |  69 ++-
magnum/drivers/heat/k8s_coreos_template_def.py     | 132 +++++
magnum/drivers/heat/k8s_fedora_template_def.py     |  32 +-
magnum/drivers/heat/k8s_template_def.py            |  48 +-
magnum/drivers/heat/swarm_fedora_template_def.py   |   3 +-
magnum/drivers/heat/swarm_mode_template_def.py     |   6 +-
magnum/drivers/heat/template_def.py                |  62 +-
magnum/drivers/k8s_coreos_v1/template_def.py       |  23 +-
.../templates/fragments/add-ext-ca-certs.yaml      |  10 +-
.../templates/fragments/configure-docker.yaml      |  15 +
.../templates/fragments/enable-coredns.yaml        |   2 +-
.../templates/fragments/enable-docker-mount.yaml   |  52 ++
.../templates/fragments/enable-kubelet-master.yaml |   2 +-
.../templates/fragments/enable-kubelet-minion.yaml |   1 -
.../templates/fragments/wc-notify.yaml             |   6 +
.../fragments/write-heat-params-master.yaml        |   2 +-
.../templates/fragments/write-heat-params.yaml     |   2 +-
.../templates/fragments/write-kubeconfig.yaml      |   1 +
.../fragments/write-master-kubeconfig.yaml         |  21 +
.../k8s_coreos_v1/templates/kubecluster.yaml       | 437 ++++++++++----
.../k8s_coreos_v1/templates/kubemaster.yaml        | 309 +++++++---
.../k8s_coreos_v1/templates/kubeminion.yaml        | 212 ++++++-
magnum/drivers/k8s_fedora_atomic_v1/driver.py      |  13 +
.../templates/kubecluster.yaml                     | 217 ++++++-
.../k8s_fedora_atomic_v1/templates/kubemaster.yaml | 233 +++-----
.../k8s_fedora_atomic_v1/templates/kubeminion.yaml |  48 +-
.../templates/kubecluster.yaml                     |  24 +-
.../k8s_fedora_ironic_v1/templates/kubeminion.yaml |  15 +-
.../templates/kubeminion_software_configs.yaml     |   7 -
magnum/drivers/mesos_ubuntu_v1/template_def.py     |  22 +-
.../mesos_ubuntu_v1/templates/mesoscluster.yaml    |  18 +-
.../swarm_fedora_atomic_v1/templates/cluster.yaml  |  29 +-
.../templates/swarmcluster.yaml                    |  23 +-
magnum/objects/cluster.py                          |   5 +-
magnum/objects/cluster_template.py                 |   4 +-
magnum/objects/fields.py                           |  17 +
magnum/service/periodic.py                         |  76 ++-
magnum/servicegroup/magnum_service_periodic.py     |   4 +-
.../api/v1/models/baymodelpatch_model.py           |   4 +-
.../functional/api/v1/models/baypatch_model.py     |   4 +-
.../api/v1/models/cluster_templatepatch_model.py   |   4 +-
.../functional/api/v1/models/clusterpatch_model.py |   4 +-
.../functional/swarm/test_swarm_python_client.py   |   4 +-
.../api/controllers/v1/test_cluster_actions.py     |  53 ++
.../api/controllers/v1/test_cluster_template.py    | 102 +++-
.../conductor/handlers/common/test_cert_manager.py |  21 +-
.../conductor/handlers/test_cluster_conductor.py   |  81 ++-
.../handlers/test_k8s_cluster_conductor.py         |  86 ++-
.../handlers/test_mesos_cluster_conductor.py       |   5 +
playbooks/container-builder-copy-logs.yaml         |  46 ++
playbooks/container-builder-setup-gate.yaml        |  25 +
playbooks/container-builder-vars.yaml              |  18 +
playbooks/container-builder.yaml                   |  64 +++
playbooks/container-publish.yaml                   |  23 +
playbooks/magnum-buildimages-base.yaml             |   2 +-
playbooks/magnum-functional-base.yaml              |   6 +
playbooks/pre/prepare-workspace.yaml               |   2 +-
...l-for-portal-network-cidr-a09edab29da6e7da.yaml |   6 +
...d-kubelet-to-master-nodes-da2d4ea0d3a332cd.yaml |   7 +
.../notes/add-octavia-client-4e5520084eae3c2b.yaml |   5 +
...d-upgrade-check-framework-5057ad67a7690a14.yaml |   8 +
...cy-for-mesos-template-def-82627eb231aa4d28.yaml |   7 +
...er-template-being-renamed-82f7d5d1f33a7957.yaml |   7 +
.../notes/bug-2004942-052321df27529562.yaml        |   5 +
.../deploy-tiller-in-k8s-df12ee41d00dd7ff.yaml     |  14 +
...cate-send_cluster_metrics-8adaac64a979f720.yaml |  14 +
.../notes/fix-cluster-update-886bd2d1156bef88.yaml |   8 +
.../notes/flannel-cni-4a5c9f574325761e.yaml        |   8 +
.../notes/flannel-reboot-fix-f1382818daed4fa8.yaml |   7 +
...fana_prometheus_tag_label-78540ea106677485.yaml |   5 +
.../heat-container-agent-tag-92848c1062c16c76.yaml |   5 +
.../heat-container-agent-tag-fe7cec6b890329af.yaml |   5 +
...m-install-metrics-service-cd18be76c4ed0e5f.yaml |   8 +
...stall-prometheus-operator-ea87752bc57a0945.yaml |   8 +
...-cluster-creation-speedup-21b5b368184d7bf0.yaml |   5 +
.../notes/k8s-delete-vip-fip-b2ddf61ddbc080bc.yaml |   6 +
...prove-floating-ip-enabled-84cd00224d6b7bc1.yaml |  10 +
.../notes/k8s-keystone-auth-6c88c1a2d406fb61.yaml  |   7 +
.../k8s-nodes-security-group-9d8dbb91b006d9dd.yaml |  12 +
...ctavia-ingress-controller-32c0b97031fd0dd4.yaml |   8 +
.../k8s-prometheus-clusterip-b191fa163e3f1125.yaml |   7 +
.../kubernetes-cloud-config-6c9a4bfec47e3bb4.yaml  |  14 +
.../make-keypair-optional-fcf4a17e440d0879.yaml    |   6 +
.../notes/pre-delete-cluster-5e27cfdf45e25805.yaml |   5 +
.../notes/resize-api-2bf1fb164484dea9.yaml         |  11 +
...n-server-id-in-kubeminion-cb33f5141e0b7fa9.yaml |  11 +
...r-both-master-and-workder-bdd491e4323955d4.yaml |   9 +
.../notes/swarm-live-restore-b03ad192367abced.yaml |   6 +
releasenotes/source/index.rst                      |   1 +
.../locale/en_GB/LC_MESSAGES/releasenotes.po       | 286 +++++++++-
.../source/locale/fr/LC_MESSAGES/releasenotes.po   |  64 +++
releasenotes/source/rocky.rst                      |   6 +
requirements.txt                                   |   2 +
setup.cfg                                          |   1 +
tox.ini                                            |   6 +-
276 files changed, 9214 insertions(+), 1578 deletions(-)


Requirements updates
--------------------

diff --git a/requirements.txt b/requirements.txt
index 0e5ffaaf..a5eff15d 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -36,0 +37 @@ oslo.service!=1.28.1,>=1.24.0 # Apache-2.0
+oslo.upgradecheck>=0.1.1 # Apache-2.0
@@ -48,0 +50 @@ python-keystoneclient>=3.8.0 # Apache-2.0
+python-octaviaclient>=1.6.0 # Apache-2.0






More information about the Release-announce mailing list