We are stoked to announce the release of: kuryr-kubernetes 0.6.0: Kubernetes integration with OpenStack networking This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/kuryr-kubernetes Download the package from: https://tarballs.openstack.org/kuryr-kubernetes/ Please report issues through launchpad: https://bugs.launchpad.net/kuryr-kubernetes For more details, please see below. 0.6.0 ^^^^^ New Features ************ * Added support for using cri-o (and podman & buildah) as container engine in both container images and DevStack. Upgrade Notes ************* * Before upgrading to T (0.7.x) run "kuryr-k8s-status upgrade check" to check if upgrade is possible. In case of negative result refer to kuryr-kubernetes documentation for mitigation steps. Deprecation Notes ***************** * The scripts/run_server.py scripts gets removed as we no longer use it in DevStack plugin. Changes in kuryr-kubernetes 0.5.0..0.6.0 ---------------------------------------- 74fdd3c Ensure network policies are not applied on pod with host networking 3036950 Add support for podSelector bfbb165 Ensure kubelet pod has default connectivity with Network Policies 8f42cd8 Add support to match expressions in Network Policies 791d8dc Ensure pod_label handler skips host_network pods 344b02c Update the kuryr-kubernetes path in devstack 0c2d88d spelling error 54a221a Move job list to project-template 3da5c32 fix a typo in docstring b5c6505 devstack: move master config to separate dir 2b31921 Fix -D option on build_cni_daemonset_image a208571 Fix labels encode 300dc36 Allocate service FIP after LB was provisioned 0d4cbac Set kuryr_daemon_enabled in tempest.conf correctly 90eced9 Introduce test case document for SRIOV functionality 96e314b Ensure pod relabeling is supported by the Network Policy cbc6141 Add experimental gate with cri-o 819992f Add KURYR_ENABLED_HANDLERS to devstack sample files fce2c38 Change openstack-dev to openstack-discuss cfa2962 Debugging extra fips generation for port_pool failures 364bfa1 devstack: Update Kubernetes to 1.13.0 543b8a2 Add namespaceSelector support for NetworkPolicies 4bf6662 Add missing $ for bash variable in plugin.sh eecd44d cri-o support e4f6857 devstack: parametrize openshift version fetching 064fe74 Lowercase hostname when using it as K8s nodeName 914123d devstack: Wait for the k8s api to be healthy d029ddb Ensure existing pods use the right network policy 38f5416 Fix quota readiness check 6dfd406 Add security groups driver for NP 76db817 Support network policy update a08e8ad Remove unused functions from devstack/plugin.sh 00eacbe Fix definition of CNIRunner.get_container_id() 82e32e1 Allow UDP traffic from host when SG=namespace b215aae Add quota readiness check to controller 80fe759 Add missing ws separator between words 65e05c3 Work out situation with KUBERNETES_NODE_NAME aa5ec45 Rename kuryr-status to kuryr-k8s-status 4199205 Revert "Make LBaaS v2 gates non-voting" 5e44d17 Add missing key check while lbaas member add 88e584e Ensure floatingip information is retrieved 66757cf Delete duplicate words in network_policy.rst 3ec212a Link to public document instead of private 72b6722 Adds CRDs readiness checks to Kuryr-Controller 3a6ec33 Use show_floatingip method instead of get_floatingip 237c773 Update the HTTP links to HTTPS in manual.rstl. 63fe375 Remove hooks directory 282564e Omit the twice occured words in npwg_spec_support.rst 18e2c82 devstack: Update Kubernetes to 1.12.2 0b211cd Remove np spec from kuryrnetworkpolicy annotations a5ee0fd Ignore exc on FIP association if state is correct 1c575a2 Make sure we never have 2 kuryr-controllers 6274bad Make LBaaS v2 gates non-voting 1871596 Add HA gate 4595eec Trivial fix for network namespace doc ee626d8 Remove race between sync_pools and other pool actions a8567e9 Remove race between sync_pools and _get_port_from_pool 651da66 Ensure namespace and network policy compatibility 7381d0b Set the UDP services enabled flag at tempest.conf 2ecf343 Remove etcd_legacy f0cde86 Move KUBERNETES_NODE_NAME env var to controller 92becbd Remove kuryr-kubernetes-tempest-lbaasv2 job e176dd3 Fix tests in test_public_ip.py 8f871ee K8S-services: add support for UDP ports 6acbb7a LBaaS driver: optimize Octavia polling timers 72d2d05 Enable `--restart on-failure` for K8s containers 984e8e5 Move Python 3.6 jobs to check and gate as voting efbb344 Add `--force` to `docker rm` in DevStack plugin 9430dd5 Add missing space in debug log 4a96e1a Switch Python 3.6 job to not run pools tests 593e5a0 Fix k8s API server access on Nested deployment 51dfd98 fix tox -e debug target a25da70 Use /var/run instead of /var/run/openvswitch a85a027 Merging port pool and namespace gates 381e3ca Howto document for UDP services 3d1a37f Add missing documentation for nested deployment dcd3773 Don't quote {posargs} in tox.ini b814a12 Add NetworkPolicies resources to kuryr's CR 81b953b Add routes and multi-vif resources to Kuryr's CR 5358702 Add kuryr-status utility for upgrade-checkers d968c43 devstack: Add compatibility for newer k8s ff3d458 Fix devstack deployment when ovn-provider is selected 451add3 svc namespace isolation support for different octavia drivers 5fb232a drop reraise from the controller 402a041 Add support for pre-commit-hooks 5963d01 Add support for OVN provider in Endpoint LBaaS driver ef00f34 Drop unnecessary import 0e95704 Translate security group rules. 3d16aeb ignore Editor tags 0dd1e05 Add HOWTO for SRIOV use case 4d53db2 Add SR-IOV binding driver to CNI 8e60dcc Add SR-IOV pod vif driver 8a38f84 Add non-containerized Python 3.6 gate ed218a4 LBaaS driver: Add provider support fa927d4 cni_ds_init: exec into the main process e430665 Spec for vhost-user port type ea2323a Cleanup cni.main file 0478a47 Add container_id to connect method of BaseBindingDriver d008293 Pass sys.stdin.buffer to json.load() in Python 3 a42e63a Fix Python 3 compatiblity in K8sClient.watch() e20dcad Add support for python3 containerized kuryr-kubernetes f1db813 Add kuryr_daemon_enabled when kuryr-daemon exists 721932d Refactor DriverBase.get_instance() f854378 Remove commented code that should be deleted 783b93c Fix small typo in controller/handlers/lbaas.py 346f762 Clean up watch resources after watcher.stop() 027a17f Produce mount volume only if OVS_HOST_PATH is defined 1d5364a Health Manager details update 4465c20 Implement NP SG create/delete actions 8608966 Ensure ports pool are not duplicated with kuryr-controller HA c9f03a6 Introduce proper diver mapping in VIF handler 6183d8f Move dragonflow job to experimental 68367dc Add experimental check for NPWG multi-vif driver 11ddd78 Add interface for binding driver 810865c Verify keystone connection using token be67776 Fix typo and indents in document fd1c86f Add namespace handler in ingress gate 0c163a5 Ensure non-daemon gates run without cni daemon 9ac72c8 add python 3.6 unit test job 5174db4 switch documentation job to new PTI 9baf629 import zuul job settings from project-config 831ee03 OCP-Router - Fix Ingress controller LB listener creation eb8b411 Update reno for stable/rocky b4b2c7b Ensure OpenShift gate uses the namespace subnet/sg drivers 8e8c3fc Add a new gate for network policies e3a3359 Avoid release_vif race when using namespaces and pools b52f820 PodVIFDriver impl - fix release_vif() signature a37d999 Update links in README 5502e97 Remove the duplicated word 579cdf1 OCP-Router: fix external network bug in devstack 2301ca8 [Trivialfix]Modify a grammatical error Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 + .pre-commit-config.yaml | 6 + .zuul.d/base.yaml | 3 +- .zuul.d/lbaasv2.yaml | 1 + .zuul.d/multi-vif.yaml | 23 + .zuul.d/multinode.yaml | 29 +- .zuul.d/octavia.yaml | 68 ++- .zuul.d/project.yaml | 31 +- .zuul.d/sdn.yaml | 2 +- CONTRIBUTING.rst | 9 + README.rst | 6 +- cni_ds_init | 39 +- cni_py3.Dockerfile | 30 ++ controller_py3.Dockerfile | 26 ++ devstack/lib/kuryr_kubernetes | 243 +++++----- devstack/local.conf.df.sample | 25 +- devstack/local.conf.odl.sample | 20 +- devstack/local.conf.openshift.sample | 25 +- devstack/local.conf.ovn.sample | 51 ++- devstack/local.conf.sample | 30 +- devstack/plugin.sh | 472 ++++++++++++------- devstack/settings | 28 +- .../installation/multi_vif_with_npwg_spec.rst | 42 +- .../installation/testing_sriov_functional.rst | 244 ++++++++++ hooks/hook-backports.ssl_match_hostname.py | 15 - hooks/hook-dns.py | 2 - hooks/hook-kuryr_kubernetes.cni.binding.py | 9 - hooks/hook-os_vif.py | 7 - hooks/hook-pyroute2.py | 7 - hooks/hook-vif_plug_linux_bridge.py | 2 - hooks/hook-vif_plug_ovs.py | 2 - kubernetes_crds/kuryrnetpolicy.yaml | 14 + kuryr_kubernetes/cmd/status.py | 266 +++++++++++ kuryr_kubernetes/cni/api.py | 2 +- kuryr_kubernetes/cni/binding/base.py | 28 +- kuryr_kubernetes/cni/binding/bridge.py | 26 +- kuryr_kubernetes/cni/binding/nested.py | 6 +- kuryr_kubernetes/cni/binding/sriov.py | 194 ++++++++ kuryr_kubernetes/cni/daemon/service.py | 5 +- kuryr_kubernetes/cni/handlers.py | 8 +- kuryr_kubernetes/cni/health.py | 2 +- kuryr_kubernetes/cni/main.py | 19 +- kuryr_kubernetes/cni/plugins/k8s_cni_registry.py | 9 +- kuryr_kubernetes/config.py | 31 +- kuryr_kubernetes/constants.py | 12 + kuryr_kubernetes/controller/drivers/base.py | 105 ++++- .../controller/drivers/default_security_groups.py | 12 + .../controller/drivers/lb_public_ip.py | 13 +- kuryr_kubernetes/controller/drivers/lbaasv2.py | 182 ++++++-- kuryr_kubernetes/controller/drivers/multi_vif.py | 4 +- .../controller/drivers/nested_macvlan_vif.py | 2 +- .../controller/drivers/nested_vlan_vif.py | 4 +- .../controller/drivers/network_policy.py | 508 ++++++++++++++++++++- .../drivers/network_policy_security_groups.py | 176 +++++++ kuryr_kubernetes/controller/drivers/neutron_vif.py | 14 +- kuryr_kubernetes/controller/drivers/public_ip.py | 47 +- kuryr_kubernetes/controller/drivers/sriov.py | 132 ++++++ kuryr_kubernetes/controller/drivers/utils.py | 116 +++++ kuryr_kubernetes/controller/drivers/vif_pool.py | 107 ++++- kuryr_kubernetes/controller/handlers/lbaas.py | 59 ++- kuryr_kubernetes/controller/handlers/namespace.py | 49 +- kuryr_kubernetes/controller/handlers/pod_label.py | 97 ++++ kuryr_kubernetes/controller/handlers/policy.py | 69 ++- kuryr_kubernetes/controller/handlers/vif.py | 87 ++-- kuryr_kubernetes/controller/ingress/ingress_ctl.py | 16 +- kuryr_kubernetes/controller/managers/health.py | 58 ++- kuryr_kubernetes/controller/service.py | 6 + kuryr_kubernetes/handlers/health.py | 17 +- kuryr_kubernetes/handlers/retry.py | 9 +- kuryr_kubernetes/k8s_client.py | 17 +- kuryr_kubernetes/objects/lbaas.py | 6 +- kuryr_kubernetes/objects/vif.py | 12 + kuryr_kubernetes/opts.py | 7 + kuryr_kubernetes/os_vif_plug_noop.py | 20 + kuryr_kubernetes/os_vif_util.py | 34 ++ .../unit/cni/plugins/test_k8s_cni_registry.py | 9 +- .../unit/controller/drivers/test_multi_vif.py | 2 +- .../unit/controller/drivers/test_network_policy.py | 416 +++++++++++++++++ .../drivers/test_network_policy_security_groups.py | 254 +++++++++++ .../unit/controller/drivers/test_public_ip.py | 154 +++---- .../unit/controller/handlers/test_ingress_lbaas.py | 10 +- .../unit/controller/handlers/test_pod_label.py | 120 +++++ .../unit/controller/ingress/test_ingress_ctl.py | 35 +- kuryr_kubernetes/utils.py | 26 +- kuryr_kubernetes/version.py | 3 +- kuryr_kubernetes/watcher.py | 13 +- .../notes/cri-o-support-ab7e810775754ea7.yaml | 5 + .../notes/remove-run-server-aca25a2d9d723dc7.yaml | 5 + .../notes/stein-upgrade-226c8e7b735701ee.yaml | 6 + releasenotes/source/index.rst | 1 + releasenotes/source/rocky.rst | 6 + requirements.txt | 1 + scripts/run_server.py | 17 - setup.cfg | 10 +- tools/build_cni_daemonset_image | 69 ++- tools/gate/copy_k8s_logs.sh | 10 +- tox.ini | 10 +- 127 files changed, 6410 insertions(+), 1117 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index f7df836..9a55d20 100644 --- a/requirements.txt +++ b/requirements.txt @@ -18,0 +19 @@ os-vif!=1.8.0,>=1.7.0 # Apache-2.0 +PrettyTable<0.8,>=0.7.2 # BSD