Open Stack

We are psyched to announce the release of:

kuryr-kubernetes 1.0.1: Kubernetes integration with OpenStack
networking

This release is part of the stein stable release series.

The source is available from:

    https://opendev.org/openstack/kuryr-kubernetes

Download the package from:

    https://tarballs.openstack.org/kuryr-kubernetes/

Please report issues through:

    https://bugs.launchpad.net/kuryr-kubernetes/+bugs

For more details, please see below.

1.0.1
^^^^^

New Features

* Added a new driver for handling network policy
  (https://kubernetes.io/docs/concepts/services-networking/network-
  policies/) support as introduced in this blueprint
  (https://blueprints.launchpad.net/openstack/?searchtext=k8s-network-
  policies) .

  In order to enable it the following configuration must be followed:

     [kubernetes]
     enabled_handlers=vif,lb,lbaasspec,namespace,pod_label,policy,kuryrnetpolicy
     pod_subnets_driver=namespace
     pod_security_groups_driver=policy

Changes in kuryr-kubernetes 1.0.0..1.0.1
----------------------------------------

cb0ff6c Remove dragonflow
38688f8 Remove downloading amphora image
81067ea Delete Kuryr Net CRD in case of k8s exception
2a58fa8 Fix fail to recreate namespace when previous KuryrNet CRD is not deleted
851d63c Raise right exception in case Kubernetes respond with not found
86a331c Support None from Octavia get_api_major_version()
64567e1 Fix adding pods with host networking to svc in L2 mode
5542c6d Fix network pool deletion method
6db30e5 Fix Pod creation do not triggers affected SVC SG update
8c018df Fix CRD update on SG rule creation
53ffeb9 Ensure Pod SG is updated on podSelector of NP spec update
1c2503a Fix ingress/egress of UDP traffic on allow to/from everywhere Policy
dd562e6 OpenDev Migration Patch
362947f Add NP release note
c90243a Fix conflict exceptions handling in LB creation
f311e2b NP: Delete default egress rules
060b841 NP: Create allow-all SG and add it to pod SG's
7e4b662 Pin coredns container image to 1.4.0 tag
d193767 Dropping the py35 testing
a2ac570 Ensure port_range_min is optional
7d03fb1 Ensure port_range_min is optional
1ab83dd Add support for policyTypes at Network Policies
2a9f5fd Fix conflict exceptions handling in LB creation
559b785 Pin coredns container image to 1.4.0 tag
b653be4 Add support for policyTypes at Network Policies
ae1d1dd Fix LBaaS SG rules update
69a02f6 NP: Create allow-all SG and add it to pod SG's
591d8bc Enable tox to run inside containers
b35b087 Switch to CentOS Amphora
49ca932 Add missing ws separator between words
d29e150 NP: Delete default egress rules
e4619d4 Update UPPER_CONSTRAINTS_FILE for stable/stein
4a3b23d Update master for stable/stein
80a603e Update .gitreview for stable/stein


Diffstat (except docs and test files)
-------------------------------------

.gitreview                                         |  3 +-
.zuul.d/base.yaml                                  |  9 ++--
.zuul.d/multinode.yaml                             | 16 +++---
.zuul.d/octavia.yaml                               | 10 ++--
.zuul.d/project.yaml                               |  1 -
.zuul.d/sdn.yaml                                   | 33 +-----------
cni.Dockerfile                                     |  2 +-
cni_py3.Dockerfile                                 |  2 +-
controller.Dockerfile                              |  2 +-
controller_py3.Dockerfile                          |  2 +-
devstack/plugin.sh                                 | 24 +++++++--
kuryr_kubernetes/controller/drivers/lbaasv2.py     | 38 ++++++++++----
.../controller/drivers/network_policy.py           | 59 ++++++++++++++++++++--
.../drivers/network_policy_security_groups.py      | 10 ++--
kuryr_kubernetes/controller/drivers/utils.py       | 17 ++++---
kuryr_kubernetes/controller/drivers/vif_pool.py    |  4 +-
kuryr_kubernetes/controller/handlers/lbaas.py      | 47 +++++------------
kuryr_kubernetes/controller/handlers/namespace.py  | 48 +++++++++++++-----
kuryr_kubernetes/controller/handlers/pod_label.py  |  2 +-
kuryr_kubernetes/controller/handlers/vif.py        |  5 +-
kuryr_kubernetes/k8s_client.py                     |  5 +-
.../unit/controller/drivers/test_network_policy.py | 50 +++++++++++++++---
.../drivers/test_network_policy_security_groups.py | 37 ++++++++++++++
.../unit/controller/handlers/test_namespace.py     | 19 ++++++-
kuryr_kubernetes/utils.py                          | 28 ++++++++++
playbooks/get_amphora_tarball.yaml                 |  4 +-
.../network-policy-support-5807fcbc27a890ad.yaml   | 13 +++++
releasenotes/source/index.rst                      |  1 +
releasenotes/source/stein.rst                      |  6 +++
setup.cfg                                          |  2 +-
tox.ini                                            |  5 +-
34 files changed, 397 insertions(+), 166 deletions(-)