Open Stack

We are pumped to announce the release of:

magnum 5.0.2: Container Management project for OpenStack

This release is part of the pike stable release series.

The source is available from:

    https://git.openstack.org/cgit/openstack/magnum

Download the package from:

    https://tarballs.openstack.org/magnum/

Please report issues through:

    https://bugs.launchpad.net/magnum/+bugs

For more details, please see below.

5.0.2
^^^^^


Security Issues
***************

* Add new configuration option *openstack_ca_file* in the *drivers*
  section to pass the CA bundle used for the OpenStack API. Setting
  this file and setting *verify_ca* to *true* will result to all
  requests from the cluster nodes to the OpenStack APIs to be
  verified.


Bug Fixes
*********

* [bug 1663757 (https://bugs.launchpad.net/magnum/+bug/1663757)] A
  configuration parameter, verify_ca, was added to magnum.conf with a
  default value of True and passed to the heat templates to indicate
  whether the cluster nodes validate the Certificate Authority when
  making requests to the OpenStack APIs (Keystone, Magnum, Heat). This
  parameter can be set to False to disable CA validation if you have
  self-signed certificates for the OpenStack APIs or you have your own
  Certificate Authority and you have not installed the Certificate
  Authority to all nodes.

* From now on, server names are prefixed with the cluster name. The
  cluster name is truncated to 30 characters, ('_', '.') are mapped to
  '-' and non alpha-numeric characters are removed to ensure FQDN
  compatibility.

* Fixed a bug where --live-restore was passed to Docker daemon
  causing the swarm init to fail. Magnum now ensures the --live-
  restore is not passed to the Docker daemon if it's default in an
  image.

Changes in magnum 5.0.1..5.0.2
------------------------------

6777ba56 Replace openstack.org git:// URLs with https://
2ba0cbce support http/https proxy for discovery url
01aec172 [swarm-mode] Remove --live-restore from Docker daemon options
d73d912f import zuul job settings from project-config
fa04f3d3 Stop using slave_scripts/install-distro-packages.sh
6d9914de Document use of kube_tag label
7167aff3 Add openstack_ca_file configuration option
a342f920 Zuul: Remove project name
79818036 Change the name of kubernetes-dashboard deployment in Pike.
9aacda8f Leverage heat-container-agent for monitoring
d0f08306 Add missing translation for verify_ca
1f4a13e9 Add verify_ca configuration parameter
c58b727b Generate lower case stack name
6a2d14d3 Generate stack name as a valid hostname
ca4b2908 Add required job definition
83988459 Add zuul v3 jobs in stable/pike
7944417c Fix magnum TLS cert generation
0475a84f Fix prometheus scrape configuration
9c7a0c4b Avoid running periodic processes inside each worker process
d1481574 Update CoreDNS to 011
feffcb2b k8s: Fix node-exporter manifest
0d570bdb Updated from global requirements
b945702a Clean-up server names in drivers
d46fce8f Add attribute 'disabled' for service-list


Diffstat (except docs and test files)
-------------------------------------

.zuul.yaml                                         | 288 ++++++++++++++
.../source/common/configure_2_edit_magnum_conf.rst |   3 +
magnum/api/controllers/v1/magnum_services.py       |   3 +-
magnum/cmd/conductor.py                            |   7 +
magnum/common/rpc_service.py                       |   5 +-
magnum/common/utils.py                             |  10 +
magnum/conf/__init__.py                            |   2 +
magnum/conf/drivers.py                             |  44 +++
.../common/image/heat-container-agent/Dockerfile   |  49 +++
.../heat-container-agent/config.json.template      | 373 ++++++++++++++++++
.../common/image/heat-container-agent/launch       |   5 +
.../image/heat-container-agent/manifest.json       |   4 +
.../scripts/50-heat-config-docker-compose          | 116 ++++++
.../heat-container-agent/scripts/55-heat-config    | 194 +++++++++
.../scripts/configure_container_agent.sh           |  36 ++
.../scripts/heat-config-notify                     | 163 ++++++++
.../heat-container-agent/scripts/hooks/atomic      | 115 ++++++
.../scripts/hooks/docker-compose                   | 127 ++++++
.../heat-container-agent/scripts/hooks/script      |  96 +++++
.../scripts/write-os-apply-config-templates.sh     |  71 ++++
.../image/heat-container-agent/service.template    |  11 +
.../image/heat-container-agent/tmpfiles.template   |  10 +
.../fragments/atomic-install-openstack-ca.sh       |  12 +
.../kubernetes/fragments/configure-etcd.sh         |  14 +-
.../kubernetes/fragments/core-dns-service.sh       |   6 +-
.../kubernetes/fragments/enable-monitoring.sh      | 139 -------
.../kubernetes/fragments/enable-node-exporter.sh   |   7 +-
.../fragments/enable-prometheus-monitoring         | 434 +++++++++++++++++++++
.../kubernetes/fragments/kube-dashboard-service.sh |   2 +-
.../kubernetes/fragments/make-cert-client.sh       |  12 +-
.../templates/kubernetes/fragments/make-cert.sh    |  12 +-
.../kubernetes/fragments/start-container-agent.sh  |  16 +
.../kubernetes/fragments/wc-notify-master.sh       |   8 +-
.../fragments/write-grafana-service.yaml           |  67 ----
.../fragments/write-heat-params-master.yaml        |   1 +
.../kubernetes/fragments/write-heat-params.yaml    |   1 +
.../kubernetes/fragments/write-kube-os-config.sh   |   2 +
.../fragments/write-prometheus-configmap.yaml      |  82 ----
.../fragments/write-prometheus-service.yaml        |  60 ---
.../swarm/fragments/add-docker-daemon-options.sh   |   5 +
.../common/templates/swarm/fragments/cfn-signal.sh |   8 +-
.../common/templates/swarm/fragments/make-cert.py  |  21 +-
.../fragments/write-cluster-failure-service.yaml   |   2 +-
.../swarm/fragments/write-heat-params-master.yaml  |   1 +
.../swarm/fragments/write-heat-params-node.yaml    |   1 +
.../swarm/fragments/write-swarm-agent-service.sh   |   8 +-
.../swarm/fragments/write-swarm-master-service.sh  |   8 +-
magnum/drivers/heat/driver.py                      |  16 +-
magnum/drivers/heat/k8s_template_def.py            |   3 +-
magnum/drivers/heat/swarm_fedora_template_def.py   |   3 +-
magnum/drivers/heat/template_def.py                |  35 +-
.../templates/fragments/add-ext-ca-certs.yaml      |  32 ++
.../templates/fragments/make-cert-client.yaml      |  12 +-
.../templates/fragments/make-cert.yaml             |  12 +-
.../templates/fragments/wc-notify.yaml             |   2 +-
.../fragments/write-heat-params-master.yaml        |   1 +
.../templates/fragments/write-heat-params.yaml     |   1 +
.../k8s_coreos_v1/templates/kubecluster.yaml       |  21 +
.../k8s_coreos_v1/templates/kubemaster.yaml        |  28 ++
.../k8s_coreos_v1/templates/kubeminion.yaml        |  28 ++
.../templates/kubecluster.yaml                     |  21 +
.../k8s_fedora_atomic_v1/templates/kubemaster.yaml |  90 +++--
.../k8s_fedora_atomic_v1/templates/kubeminion.yaml |  33 +-
.../templates/kubecluster.yaml                     |  21 +
.../k8s_fedora_ironic_v1/templates/kubemaster.yaml |  90 +++--
.../k8s_fedora_ironic_v1/templates/kubeminion.yaml |   5 +
.../templates/kubeminion_software_configs.yaml     |  28 +-
.../templates/fragments/add-ext-ca-certs.sh        |  27 ++
.../templates/mesos_slave_software_configs.yaml    |  22 +-
.../mesos_ubuntu_v1/templates/mesoscluster.yaml    |  20 +
.../mesos_ubuntu_v1/templates/mesosmaster.yaml     |  27 ++
.../mesos_ubuntu_v1/templates/mesosslave.yaml      |   5 +
.../swarm_fedora_atomic_v1/templates/cluster.yaml  |  21 +
.../templates/swarmmaster.yaml                     |  27 ++
.../templates/swarmnode.yaml                       |  26 ++
.../fragments/write-heat-params-master.yaml        |   1 +
.../fragments/write-swarm-master-service.sh        |  14 +-
.../fragments/write-swarm-worker-service.sh        |  12 +-
.../templates/swarmcluster.yaml                    |  26 ++
.../templates/swarmmaster.yaml                     |  25 ++
.../templates/swarmnode.yaml                       |  25 ++
.../handlers/test_k8s_cluster_conductor.py         |  25 +-
.../handlers/test_mesos_cluster_conductor.py       |  16 +-
.../handlers/test_swarm_cluster_conductor.py       |  18 +-
playbooks/magnum-buildimages-base.yaml             | 102 +++++
playbooks/magnum-functional-base.yaml              |  82 ++++
playbooks/magnum-tox-migration.yaml                |  85 ++++
playbooks/post/upload-images.yaml                  |  21 +
playbooks/post/upload-logs-tox.yaml                |  67 ++++
playbooks/post/upload-logs.yaml                    |  14 +
playbooks/pre/prepare-workspace-images.yaml        |  10 +
playbooks/pre/prepare-workspace.yaml               |  23 ++
.../notes/bug-1580704-32a0e91e285792ea.yaml        |   7 +
.../notes/bug-1663757-198e1aa8fa810984.yaml        |  12 +
.../notes/bug-1718947-0d4e67529e2817d7.yaml        |   6 +
.../notes/swarm-live-restore-b03ad192367abced.yaml |   6 +
requirements.txt                                   |   2 +-
specs/containers-service.rst                       |   2 +-
test-requirements.txt                              |   4 +-
107 files changed, 3673 insertions(+), 506 deletions(-)


Requirements updates
--------------------

diff --git a/requirements.txt b/requirements.txt
index 845022a0..e1e68a38 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -9 +9 @@ Babel!=2.4.0,>=2.3.4 # BSD
-PyYAML>=3.10 # MIT
+PyYAML>=3.10.0 # MIT
diff --git a/test-requirements.txt b/test-requirements.txt
index 3edc3f0f..d07ac57f 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -14 +14 @@ hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0
-mock>=2.0.0 # BSD
+mock>=2.0 # BSD
@@ -28 +28 @@ testtools>=1.4.0 # MIT
-reno>=2.5.0 # Apache-2.0
+reno!=2.3.1,>=1.8.0 # Apache-2.0