We are pumped to announce the release of:
magnum 9.0.0: Container Management project for OpenStack
This release is part of the train release series.
The source is available from:
https://opendev.org/openstack/magnum
Download the package from:
https://tarballs.openstack.org/magnum/
Please report issues through:
https://bugs.launchpad.net/magnum/+bugs
For more details, please see below.
Changes in magnum 8.0.0.0rc1..9.0.0 -----------------------------------
5e66b4fe Propagate cloud_provider_enabled correctly a0b1d70b Update .gitreview for stable/train 3658a980 ci: Add output stream fixture to fix CI 45730c78 Build k8s images v1.16.0 and minor bumps cfe2753f [fedora atomic k8s] Add boot from volume support eebcc9b7 Fix k8s deployment when cluster_user_trust=False 41768e0a Remove --os-url usage 997497d8 Remove unneeded Zuul branch matcher 2153287a Fixing broken links 3a38cfb2 k8s_fedora: Set rp_filter=1 for calico 7267c1ea k8s_fedora_atomic: Add PodSecurityPolicy e59e3e07 Remove cluster floating_ip_enabled default value 17c770e8 Update flannel_backend in user guide 78718595 Trivial fix for cluster creation in master 3a0a4387 [fedora-atomic][k8s]Disable ssh password authentication e655db33 etcd_volume_size from cluster not CT c3bce488 [fedora-atomic][k8s] Fix missing internal IP 0b033f03 Using vxlan as default value for flannel_backend e47d6f6c Readable heat-container-agent log 00f518fc Take kubeproxy_options into account on proxy setup e84cc4c9 Convert network UUID to name required for OCCM 703de97c Using Fedora Atomic 29 as default image efff7086 Publish 1.16 k8s images 68c0e86a kubernetes builds for v1.{13,14,15,16}.x 06f78353 Fix heat-container-agent by setting LC_ALL=C b99673f8 Disable gpg check in fedora:rawhide image 3b147e36 [api-ref] Add network,subnet and FIP for cluster 9e815f6a Fix cloud-config file 893e2cdf Improve dns format validation b3a183dc Fix addon tag/version parsing 2f2d05c8 k8s: stop introspecting instance name 243eb6aa Release k8s images v1.15.2, v1.14.5, v1.13.9 and v1.12.10 3b3c9977 Update "auth_url" port in install docs 0df6b5be Update for Storyboard 749a792e Bump the openstackdocstheme extension to 1.20 32989b4f Allow setting network, subnet and FIP when creating cluster 5438a3c6 Blacklist sphinx 2.1.0 (autodoc bug) fb8d0185 Support py3.x for make cert scripts bd23e588 Fix py3 issue of heat-container-agent 425fb0fa Add network config to stabilise multi-NIC scenario e5eade03 Add information about the cluster in magnum event notifications df54de88 Update docs links c6bf1da0 Set train-dev as the default tag for heat-container-agent 92d51690 Return ClusterID for resize and upgrade 903c8a4d Update current k8s version after upgrade 451358a5 heat-agent: Do not use absolute path 52155f0e Support auto_healing_controller 810e8119 Fix kubernetes systemd service templates b43c0a32 Update api-ref location 58230546 Add Python 3 Train unit tests c9262419 ci: Fix ADD_ALLOW_PRIV build-arg 48e42ec0 Allow for cluster-autoscaler deployment roll-out afd2403a k8s: Clear cni configuration a4d34490 [fedora-atomic] kube_tag is not respcted d79c5a86 Set default value for keystone_auth_default_policy a1d385cc Hardcode the names of the default NGs 41b83cef [k8s] Update prometheus monitoring helm based configuration 35542713 Make kubernetes apiserver start after network b5d50ddd k8s: refactor functions into KubernetesDriver f989ab69 Fix auto_scaling_enabled default in docs fe0f0efa Add build-arg for --allow-privileged 10a5996e Add npd_enabled label 85bd4247 Build kubernetes v1.15.0 d7035775 ci: Rotate dockerhub password cd26be16 calico: drop calico_cni_tag 2ad3fd87 k8s_fedora: Update to kubernetes v1.14.3 ca049a40 k8s_fedora: Update to kubernetes v1.14.3 720f5694 Update keystone_authtoken config reference e99b0e8d Build kubernetes images 8f6612b2 [k8s][fedora atomic] Using node instead of minion d8df9d0c [fedora-atomic][k8s] Support default Keystone auth policy file dc100551 Fix coe_version for k8s driver cd67553f Fix overlay2 + docker_volume_size 9774e990 Update calico to v3.3 05c27f2d [k8s][fedora atomic] Rolling upgrade support 8cfa24cf Add API reference for cluster upgrade 9b1bd5da Add cluster upgrade to the API 1e8d5a73 Add missing ws separator between words 49e5f17c [k8s_fedora_atomic] Make calico devices unmanaged in NetworkManager config for master node f82c61f8 Replace git.openstack.org URLs with opendev.org URLs 79699f23 Revert "support http/https proxy for discovery url" 913636b6 Blacklist bandit 1.6.0 and cap Sphinx on Python2 5a74b454 Release k8s v1.12.8 42c75c4d Disable broken image building ef0678ec Fix container-build job 79e7931e OpenDev Migration Patch e98b8e52 Build kubernetes v1.15.0-alpha.1 8fb27da2 Update coredns from upstream manifest and to 1.3.1 b3ceb252 [k8s] Set traefik to stable version v1.7.10 75fab6ff [fedora_atomic] Support auto healing for k8s ecd07448 [fedora atomic] Allow traffic between k8s workers 0d3ad907 Dropping the py35 testing 00522c5b Fix registry on k8s_fedora_atomic c0e51198 Fix proportional autoscaler image 0ba46679 Build kubernetes v1.14.1 b1d359e6 Fix missing print format error 375fbccf [k8s] Add nginx based ingress controller 3cb6226f Support multi DNS server 24a6d89a Revert "Specify internal network to improve stability in a multi-NIC scenario." 97811ef5 Specify internal network to improve stability in a multi-NIC scenario. 18119fb3 ng-5: APIs for listing and showing nodegroups 3f80cbab ng-4: Adapt cluster object 470fc261 Set a fixed cipher suite set for Traefik 2fcaf363 Allow admin update cluster/template in any project ea95b0dc ng-3: Adapt existing drivers 18c77a28 ng-2: Adapt existing cluster APIs and conductor 5b348905 Publish k8s v1.14.0 image 70f1dbd9 Kubernetes images release 1f5dc1aa [fedora-atomic-k8s] Allow all traffic from master to worker nodes 66c6666a Add API ref for <ClusterID>/actions/resize ae6933ff Replace openstack.org git:// URLs with https:// 5e0672a4 Update master for stable/stein 0607c7a9 ng-1: Add nodegroup representation 21acb8dc Fix openstack-cloud-controller-manager restarts 41cdb489 add python 3.7 unit test job e94f1a22 Move openstackdocstheme to extensions in api-ref f553558e Add oslo_log command options to magnum-db-manage
Diffstat (except docs and test files) -------------------------------------
.gitreview | 3 +- .zuul.yaml | 84 +-- CONTRIBUTING.rst | 4 +- README.rst | 6 +- api-ref/source/clusters.inc | 117 ++++ api-ref/source/conf.py | 39 +- api-ref/source/parameters.yaml | 29 + api-ref/source/samples/cluster-resize-req.json | 5 + api-ref/source/samples/cluster-resize-resp.json | 3 + api-ref/source/samples/cluster-upgrade-req.json | 5 + api-ref/source/samples/cluster-upgrade-resp.json | 3 + .../dcos_centos_v1/templates/dcoscluster.yaml | 2 +- contrib/drivers/heat/dcos_centos_template_def.py | 2 +- .../drivers/k8s_opensuse_v1/templates/README.md | 4 +- .../k8s_opensuse_v1/templates/kubecluster.yaml | 2 +- devstack/lib/magnum | 28 +- devstack/plugin.sh | 3 +- .../common/configure_2_edit_magnum_conf.rst | 4 +- .../heat-container-agent/scripts/55-heat-config | 18 +- .../scripts/heat-config-notify | 2 +- .../heat-container-agent/scripts/hooks/atomic | 4 +- .../scripts/hooks/docker-compose | 6 +- .../heat-container-agent/scripts/hooks/script | 10 +- .../kubernetes-controller-manager/Dockerfile | 2 + .../kubernetes-controller-manager/service.template | 4 +- etc/magnum/keystone_auth_default_policy.sample | 76 +++ lower-constraints.txt | 3 +- magnum/api/controllers/v1/__init__.py | 11 + magnum/api/controllers/v1/bay.py | 70 +- magnum/api/controllers/v1/cluster.py | 85 ++- magnum/api/controllers/v1/cluster_actions.py | 86 ++- magnum/api/controllers/v1/cluster_template.py | 10 +- magnum/api/controllers/v1/nodegroup.py | 219 +++++++ magnum/api/controllers/v1/types.py | 13 + magnum/api/controllers/versions.py | 3 +- magnum/api/http_error.py | 2 +- magnum/cmd/db_manage.py | 2 + magnum/common/cinder.py | 46 ++ magnum/common/clients.py | 23 + magnum/common/exception.py | 42 ++ magnum/common/neutron.py | 32 +- magnum/common/policies/__init__.py | 4 +- magnum/common/policies/cluster.py | 22 + magnum/common/policies/cluster_template.py | 11 + magnum/common/policies/nodegroup.py | 73 +++ magnum/common/utils.py | 19 + magnum/conductor/api.py | 38 +- magnum/conductor/handlers/cluster_conductor.py | 131 +++- magnum/conductor/utils.py | 78 ++- magnum/conf/__init__.py | 2 + magnum/conf/cinder.py | 46 +- magnum/conf/cluster.py | 6 +- magnum/conf/kubernetes.py | 36 + magnum/db/api.py | 115 ++++ ...98132c7_change_cluster_to_support_nodegroups.py | 132 ++++ ...380964133d_add_network_subnet_fip_to_cluster.py | 40 ++ .../versions/ac92cbae311c_add_nodegoup_table.py | 61 ++ magnum/db/sqlalchemy/api.py | 143 +++- magnum/db/sqlalchemy/models.py | 37 +- magnum/drivers/common/driver.py | 7 + .../fragments/configure-docker-registry.sh | 12 +- .../fragments/configure-docker-storage.sh | 8 +- .../configure_docker_storage_driver_atomic.sh | 18 +- .../templates/fragments/enable-docker-registry.sh | 8 +- .../templates/kubernetes/fragments/add-proxy.sh | 8 +- .../kubernetes/fragments/calico-service.sh | 722 +++++++++++++-------- .../kubernetes/fragments/configure-etcd.sh | 34 +- .../fragments/configure-kubernetes-master.sh | 74 ++- .../fragments/configure-kubernetes-minion.sh | 69 +- .../kubernetes/fragments/core-dns-service.sh | 74 ++- .../kubernetes/fragments/enable-auto-healing.sh | 302 ++++++++- .../kubernetes/fragments/enable-auto-scaling.sh | 187 ++++++ .../kubernetes/fragments/enable-ingress-traefik.sh | 62 +- .../kubernetes/fragments/enable-keystone-auth.sh | 25 +- .../kubernetes/fragments/enable-services-master.sh | 10 +- .../kubernetes/fragments/enable-services-minion.sh | 14 +- .../kubernetes/fragments/flannel-service.sh | 82 ++- .../fragments/kube-apiserver-to-kubelet-role.sh | 115 +++- .../kubernetes/fragments/make-cert-client.sh | 28 +- .../templates/kubernetes/fragments/make-cert.sh | 29 +- .../kubernetes/fragments/start-container-agent.sh | 24 +- .../kubernetes/fragments/upgrade-kubernetes.sh | 52 ++ ...ams-master.yaml => write-heat-params-master.sh} | 40 +- .../kubernetes/fragments/write-heat-params.sh | 67 ++ .../kubernetes/fragments/write-heat-params.yaml | 55 -- .../kubernetes/fragments/write-kube-os-config.sh | 40 +- .../templates/kubernetes/helm/ingress-nginx.sh | 252 +++++++ .../kubernetes/helm/prometheus-operator.sh | 78 ++- magnum/drivers/common/templates/network.yaml | 5 +- magnum/drivers/heat/driver.py | 76 ++- magnum/drivers/heat/k8s_coreos_template_def.py | 53 +- magnum/drivers/heat/k8s_fedora_template_def.py | 136 +++- magnum/drivers/heat/k8s_template_def.py | 70 +- magnum/drivers/heat/swarm_fedora_template_def.py | 54 +- magnum/drivers/heat/swarm_mode_template_def.py | 66 +- magnum/drivers/heat/template_def.py | 227 +++++-- magnum/drivers/k8s_coreos_v1/driver.py | 12 +- .../templates/fragments/enable-kubelet-master.yaml | 4 +- .../templates/fragments/enable-kubelet-minion.yaml | 4 +- .../k8s_coreos_v1/templates/kubecluster.yaml | 14 +- .../k8s_coreos_v1/templates/kubemaster.yaml | 8 +- magnum/drivers/k8s_fedora_atomic_v1/driver.py | 83 ++- .../templates/kubecluster.yaml | 240 +++++-- .../k8s_fedora_atomic_v1/templates/kubemaster.yaml | 459 ++++++++----- .../k8s_fedora_atomic_v1/templates/kubeminion.yaml | 353 +++++----- magnum/drivers/k8s_fedora_ironic_v1/driver.py | 12 +- .../templates/kubecluster.yaml | 2 +- magnum/drivers/mesos_ubuntu_v1/driver.py | 5 + magnum/drivers/mesos_ubuntu_v1/template_def.py | 48 +- .../mesos_ubuntu_v1/templates/mesoscluster.yaml | 2 +- magnum/drivers/swarm_fedora_atomic_v1/driver.py | 5 + .../swarm_fedora_atomic_v1/templates/cluster.yaml | 2 +- magnum/drivers/swarm_fedora_atomic_v2/driver.py | 5 + .../templates/swarmcluster.yaml | 2 +- magnum/objects/__init__.py | 5 +- magnum/objects/cluster.py | 74 ++- magnum/objects/nodegroup.py | 218 +++++++ magnum/service/periodic.py | 7 +- .../api/controllers/v1/test_cluster_actions.py | 80 ++- .../api/controllers/v1/test_cluster_template.py | 40 +- .../unit/api/controllers/v1/test_nodegroup.py | 179 +++++ .../conductor/handlers/test_cluster_conductor.py | 125 +++- .../handlers/test_k8s_cluster_conductor.py | 236 +++++-- .../handlers/test_mesos_cluster_conductor.py | 98 ++- .../handlers/test_swarm_cluster_conductor.py | 101 ++- playbooks/container-builder-vars.yaml | 13 +- playbooks/container-builder.yaml | 43 ++ playbooks/container-publish.yaml | 9 + playbooks/magnum-buildimages-base.yaml | 8 +- playbooks/magnum-functional-base.yaml | 2 +- playbooks/pre/prepare-workspace.yaml | 6 +- ...er-in-event-notifications-a3c992ab24b32fbd.yaml | 12 + ...FIP-when-creating-cluster-ae0cda35ade28a9f.yaml | 8 + .../notes/boot-from-volume-7c73df68d7f325aa.yaml | 13 + .../notes/coredns-update-9b03da4b89be18ad.yaml | 6 + ...-policy-k8s-keystone-auth-fa74aa03dcc12ef3.yaml | 9 + ...isable-ssh-password-authn-f2baf619710e52aa.yaml | 6 + ...-ip-enabled-default-value-4e24d4bf09fc08c8.yaml | 7 + .../fix-k8s-coe-version-a8ea38f327ea6bb3.yaml | 7 + ...container-agent-for-train-e63bc1559750fe9c.yaml | 4 + ...elm-install-ingress-nginx-fe2acec1dd3032e3.yaml | 6 + ...stall-prometheus-operator-ea87752bc57a0945.yaml | 2 +- ...evices-in-network-manager-e1bdb052834e11e9.yaml | 5 + ...ra-atomic-rolling-upgrade-3d8edcdd91fa1529.yaml | 17 + .../notes/podsecuritypolicy-2400063d73524e06.yaml | 6 + .../rename-minion-to-node-9d32fe77d765f149.yaml | 7 + ...sterid-for-resize-upgrade-6e841c7b568fa807.yaml | 5 + .../notes/set-traefik-tag-7d4aca5685147970.yaml | 8 + .../support-auto-healing-3e07c16c55209b0a.yaml | 11 + ...t-auto-healing-controller-333d1266918111e9.yaml | 7 + .../support-multi-dns-server-0528be20f0e6aa62.yaml | 6 + .../notes/upgrade-api-975233ab93c0c092.yaml | 6 + ...vxlan-for-flannel-backend-8d82a290ca97d6e2.yaml | 6 + releasenotes/source/conf.py | 19 +- releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 + requirements.txt | 1 + setup.cfg | 3 +- test-requirements.txt | 5 +- tox.ini | 10 +- 220 files changed, 8140 insertions(+), 2138 deletions(-)
Requirements updates --------------------
diff --git a/requirements.txt b/requirements.txt index a5eff15d..f654bcc6 100644 --- a/requirements.txt +++ b/requirements.txt @@ -44,0 +45 @@ python-barbicanclient>=4.5.2 # Apache-2.0 +python-cinderclient>=2.2.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 209b0c4b..d966d21f 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +8 @@ -bandit>=1.1.0 # Apache-2.0 +bandit!=1.6.0,>=1.1.0 # Apache-2.0 @@ -20 +20,2 @@ pytz>=2013.6 # MIT -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD +sphinx!=1.6.6,!=1.6.7,!=2.1.0,>=1.6.2;python_version>='3.4' # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD