We are satisfied to announce the release of: magnum 12.0.0: Container Management project for OpenStack This release is part of the wallaby release series. The source is available from: https://opendev.org/openstack/magnum Download the package from: https://tarballs.openstack.org/magnum/ Please report issues through: https://bugs.launchpad.net/magnum/+bugs For more details, please see below. Changes in magnum 11.0.0..12.0.0 -------------------------------- c2a4a22a [K8S] Enable --use-service-account-credentials 00f8aa5d Fix debug logging during cluster upgrade b336bb34 Re-factored rpc serializer 3b7a33eb [goal] Deprecate the JSON formatted policy file ff575939 [hca] Only build/push stable images if unpublished 1f33b6c1 Build autoscaler 1.20 0e6d1789 Only allow zero node count from microversion 1.10 439548e3 Fix ostree_* upgrade afce5d9c [doc] Replace Atomic/CoreOS with Fedora CoreOS 332e2b6f Add CT tags field to the database and API a3d8b4fe 4. Update cluster monitoring documentation ea64468a 3. Configure monitoring apps path based endpoints aec5d469 2. Add persistency for grafana dashboards 37497ccf 1. Configurable prometheus monitoring persistent storage d21d7d50 Update API version history doc bcf771bc Do not create constraints for boolean fields f46923cc Allow nodegroups with node_count equal to 0 672b1195 Re-use transport for rpc server fd79dd4f Switch to uwsgi and enable named uri 1b72456e k8s: Do not use insecure api port 987c9d80 Re-use transport for rpc calls 7bfd7519 [k8s-fcos] Fix insecure registry 8018bf91 Fix cluster deletion when load balancers don't exist 9b8f1555 Update docs for cluster resource d11f4e83 Make kubelet and kube-proxy use the secure port 1843ad1b Drop lower constraints testing acc70848 Fix validation for master_lb_enabled 8bdf0e76 Update containerd version and tarball URL 55d3dada Imported Translations from Zanata fade2451 [k8s] Fix default admission controller 94737878 Fix gate - update lower-constraints 333331b7 Update helm charts origin repository bc051d52 CI: Install debianutils and vim 327c12fc Add image prefix for grafana images 34f65582 Use kube_master_ip for monitoring when no floating ip is used 56583ac8 Fix Cinder CSI 2c93427d k8s-fcos: Source bashrc for clusterconfig 9adfc443 Fix misquoted comment e17e6b8a Revert "Fix Cinder CSI" 2b5a4512 ci: Update dockerhub password 290d60a0 Fix Cinder CSI f5cf6b95 Fix database migrations a837b5c0 Update default k8s admission controller list 1cdc0628 [fix] Sync nodegroup status before delete_complete d64fe4b7 Update master for stable/victoria c84653cd Remove cloud-config from k8s worker node 385bc970 Update default values for docker nofile and vm.max_map_count Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 41 ++-- api-ref/source/clusters.inc | 3 + api-ref/source/clustertemplates.inc | 7 +- api-ref/source/parameters.yaml | 18 ++ bindep.txt | 1 + devstack/files/debs/magnum | 2 + devstack/lib/magnum | 51 ++--- lower-constraints.txt | 125 ++++++------ magnum/api/attr_validator.py | 2 +- magnum/api/controllers/v1/baymodel.py | 3 + magnum/api/controllers/v1/cluster.py | 41 +++- magnum/api/controllers/v1/cluster_actions.py | 26 ++- magnum/api/controllers/v1/cluster_template.py | 3 + magnum/api/controllers/v1/nodegroup.py | 10 +- magnum/api/controllers/v1/types.py | 4 +- magnum/api/controllers/versions.py | 13 +- magnum/api/rest_api_version_history.rst | 29 +++ magnum/cmd/status.py | 13 +- magnum/common/config.py | 14 +- magnum/common/exception.py | 10 + magnum/common/octavia.py | 2 + magnum/common/policy.py | 7 + magnum/common/rpc.py | 4 +- magnum/common/rpc_service.py | 41 +--- magnum/conductor/api.py | 5 +- magnum/conductor/utils.py | 7 + .../1d045384b966_add_insecure_baymodel_attr.py | 9 +- ...304554e2_adding_magnum_service_functionality.py | 8 +- ...3c9c6191_add_public_column_to_baymodel_table.py | 4 +- ...98132c7_change_cluster_to_support_nodegroups.py | 2 +- ...380964133d_add_network_subnet_fip_to_cluster.py | 2 +- .../versions/4e263f236334_add_registry_enabled.py | 2 +- .../versions/5ad410481b88_rename_insecure.py | 2 +- ...d_master_lb_enabled_column_to_baymodel_table.py | 4 +- .../87e62e3c7abc_add_hidden_to_cluster_template.py | 6 +- ...5096e2334ee_add_master_lb_enabled_to_cluster.py | 4 +- .../versions/ac92cbae311c_add_nodegoup_table.py | 4 +- ...612248cab_add_floating_ip_enabled_column_to_.py | 2 +- ...b8b8d_added_observations_to_cluster_template.py | 31 +++ magnum/db/sqlalchemy/api.py | 3 +- magnum/db/sqlalchemy/models.py | 1 + ...onfigure_docker_storage_driver_fedora_coreos.sh | 3 + .../kubernetes/fragments/calico-service-v3-3-x.sh | 2 +- .../kubernetes/fragments/calico-service.sh | 6 +- .../fragments/configure-kubernetes-master.sh | 76 ++++--- .../fragments/configure-kubernetes-minion.sh | 11 +- .../kubernetes/fragments/core-dns-service.sh | 2 +- .../kubernetes/fragments/enable-auto-healing.sh | 2 +- .../kubernetes/fragments/enable-auto-scaling.sh | 2 +- .../kubernetes/fragments/enable-cinder-csi.sh | 11 +- .../kubernetes/fragments/enable-helm-tiller.sh | 2 +- .../kubernetes/fragments/enable-ingress-octavia.sh | 2 +- .../kubernetes/fragments/enable-ingress-traefik.sh | 2 +- .../kubernetes/fragments/enable-keystone-auth.sh | 2 +- .../fragments/enable-prometheus-monitoring.sh | 2 +- .../kubernetes/fragments/enable-services-master.sh | 2 +- .../kubernetes/fragments/flannel-service.sh | 2 +- .../kubernetes/fragments/install-clients.sh | 3 +- .../templates/kubernetes/fragments/install-cri.sh | 4 +- .../kubernetes/fragments/install-helm-modules.sh | 2 +- .../fragments/kube-apiserver-to-kubelet-role.sh | 2 +- .../kubernetes/fragments/kube-dashboard-service.sh | 2 +- .../kubernetes/fragments/wc-notify-master.sh | 2 +- .../fragments/write-heat-params-master.sh | 7 + .../kubernetes/fragments/write-kube-os-config.sh | 1 - .../templates/kubernetes/helm/ingress-nginx.sh | 2 +- .../templates/kubernetes/helm/metrics-server.sh | 2 +- .../kubernetes/helm/prometheus-adapter.sh | 2 +- .../kubernetes/helm/prometheus-operator.sh | 192 ++++++++++++++++-- magnum/drivers/heat/driver.py | 24 ++- magnum/drivers/heat/k8s_fedora_template_def.py | 7 + .../templates/kubecluster.yaml | 52 ++++- .../k8s_fedora_atomic_v1/templates/kubemaster.yaml | 40 ++++ .../templates/fcct-config.yaml | 22 +- .../templates/kubecluster.yaml | 53 ++++- .../k8s_fedora_coreos_v1/templates/kubemaster.yaml | 48 +++++ .../k8s_fedora_coreos_v1/templates/kubeminion.yaml | 9 +- .../k8s_fedora_coreos_v1/templates/user_data.json | 45 ++--- .../image/openvswitch/Dockerfile | 2 +- .../image/openvswitch/README.rst | 4 +- magnum/objects/cluster_template.py | 4 +- magnum/objects/nodegroup.py | 5 +- .../api/controllers/v1/test_cluster_actions.py | 61 ++++-- .../api/controllers/v1/test_cluster_template.py | 3 +- .../unit/api/controllers/v1/test_nodegroup.py | 20 +- playbooks/container-builder-vars.yaml | 11 +- playbooks/container-builder.yaml | 24 ++- playbooks/container-publish.yaml | 4 +- ...ations_db_and_api_objects-d7350c8193da9470.yaml | 12 ++ .../allow-empty-node_groups-ec16898bfc82aec0.yaml | 7 + ...UI_dashboards_persistency-1106b2e259a769b0.yaml | 9 + ..._monitoring_app_endpoints-f00600c244a76cf4.yaml | 15 ++ ...ault-admission-controller-04398548cf63597c.yaml | 5 + ...son-formatted-policy-file-b52d805359bc73b7.yaml | 20 ++ .../ensure-delete-complete-2f9bb53616e1e02b.yaml | 5 + .../notes/migrations-1.3.20-60e5f990422f2ca5.yaml | 4 + ...toring_persistent_storage-c5857fc099bd2f65.yaml | 12 ++ .../notes/story-2008548-65a571ad15451937.yaml | 6 + ...te-containerd-version-url-c095c0ee3c1a538b.yaml | 4 + releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 36 +++- releasenotes/source/victoria.rst | 6 + requirements.txt | 76 +++---- setup.cfg | 4 +- test-requirements.txt | 23 +-- tox.ini | 6 +- 122 files changed, 1546 insertions(+), 637 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index fa838067..95d874a8 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9,2 +9,2 @@ Babel!=2.4.0,>=2.3.4 # BSD -PyYAML>=3.12 # MIT -SQLAlchemy!=1.1.5,!=1.1.6,!=1.1.7,!=1.1.8,>=1.0.10 # MIT +PyYAML>=3.13 # MIT +SQLAlchemy>=1.2.0 # MIT @@ -12,2 +12,2 @@ WSME>=0.8.0 # MIT -WebOb>=1.7.1 # MIT -alembic>=0.8.10 # MIT +WebOb>=1.8.1 # MIT +alembic>=0.9.6 # MIT @@ -16,2 +16,2 @@ decorator>=3.4.0 # BSD -docker>=2.4.2 # Apache-2.0 -eventlet!=0.18.3,!=0.20.1,>=0.18.2 # MIT +docker>=4.3.0 # Apache-2.0 +eventlet>=0.28.0 # MIT @@ -20,3 +20,3 @@ jsonpatch!=1.20,>=1.16 # BSD -keystoneauth1>=3.4.0 # Apache-2.0 -keystonemiddleware>=4.17.0 # Apache-2.0 -kubernetes>=5.0.0 # Apache-2.0 +keystoneauth1>=3.14.0 # Apache-2.0 +keystonemiddleware>=9.0.0 # Apache-2.0 +kubernetes>=12.0.0 # Apache-2.0 @@ -25,17 +25,17 @@ netaddr>=0.7.18 # BSD -oslo.concurrency>=3.26.0 # Apache-2.0 -oslo.config>=5.2.0 # Apache-2.0 -oslo.context>=2.19.2 # Apache-2.0 -oslo.db>=4.27.0 # Apache-2.0 -oslo.i18n>=3.15.3 # Apache-2.0 -oslo.log>=3.36.0 # Apache-2.0 -oslo.messaging>=5.29.0 # Apache-2.0 -oslo.middleware>=3.31.0 # Apache-2.0 -oslo.policy>=1.30.0 # Apache-2.0 -oslo.serialization!=2.19.1,>=2.18.0 # Apache-2.0 -oslo.service!=1.28.1,>=1.24.0 # Apache-2.0 -oslo.upgradecheck>=0.1.1 # Apache-2.0 -oslo.utils>=3.33.0 # Apache-2.0 -oslo.versionedobjects>=1.31.2 # Apache-2.0 -oslo.reports>=1.18.0 # Apache-2.0 -pbr!=2.1.0,>=2.0.0 # Apache-2.0 -pecan!=1.0.2,!=1.0.3,!=1.0.4,!=1.2,>=1.0.0 # BSD +oslo.concurrency>=4.1.0 # Apache-2.0 +oslo.config>=8.1.0 # Apache-2.0 +oslo.context>=3.1.0 # Apache-2.0 +oslo.db>=8.2.0 # Apache-2.0 +oslo.i18n>=5.0.0 # Apache-2.0 +oslo.log>=4.2.0 # Apache-2.0 +oslo.messaging>=12.2.0 # Apache-2.0 +oslo.middleware>=4.1.0 # Apache-2.0 +oslo.policy>=3.6.0 # Apache-2.0 +oslo.reports>=2.1.0 # Apache-2.0 +oslo.serialization>=3.2.0 # Apache-2.0 +oslo.service>=2.2.0 # Apache-2.0 +oslo.upgradecheck>=1.3.0 # Apache-2.0 +oslo.utils>=4.2.0 # Apache-2.0 +oslo.versionedobjects>=2.1.0 # Apache-2.0 +pbr>=5.5.0 # Apache-2.0 +pecan>=1.3.3 # BSD @@ -43,10 +43,10 @@ pycadf!=2.0.0,>=1.1.0 # Apache-2.0 -python-barbicanclient>=4.5.2 # Apache-2.0 -python-cinderclient>=2.2.0 # Apache-2.0 -python-glanceclient>=2.8.0 # Apache-2.0 -python-heatclient>=1.10.0 # Apache-2.0 -python-neutronclient>=6.7.0 # Apache-2.0 -python-novaclient>=9.1.0 # Apache-2.0 -python-keystoneclient>=3.8.0 # Apache-2.0 -python-octaviaclient>=1.6.0 # Apache-2.0 -requests>=2.14.2 # Apache-2.0 -setuptools!=24.0.0,!=34.0.0,!=34.0.1,!=34.0.2,!=34.0.3,!=34.1.0,!=34.1.1,!=34.2.0,!=34.3.0,!=34.3.1,!=34.3.2,!=36.2.0,>=21.0.0 # PSF/ZPL +python-barbicanclient>=5.0.0 # Apache-2.0 +python-cinderclient>=7.1.0 # Apache-2.0 +python-glanceclient>=3.2.0 # Apache-2.0 +python-heatclient>=2.2.0 # Apache-2.0 +python-neutronclient>=7.2.0 # Apache-2.0 +python-novaclient>=17.2.0 # Apache-2.0 +python-keystoneclient>=3.20.0 # Apache-2.0 +python-octaviaclient>=2.1.0 # Apache-2.0 +requests>=2.20.1 # Apache-2.0 +setuptools!=34.0.0,!=34.0.1,!=34.0.2,!=34.0.3,!=34.1.0,!=34.1.1,!=34.2.0,!=34.3.0,!=34.3.1,!=34.3.2,!=36.2.0,>=30.0.0 # PSF/ZPL @@ -54 +54 @@ six>=1.10.0 # MIT -stevedore>=1.20.0 # Apache-2.0 +stevedore>=3.3.0 # Apache-2.0 @@ -56 +56 @@ taskflow>=2.16.0 # Apache-2.0 -cryptography>=2.1 # BSD/Apache-2.0 +cryptography>=2.1.4 # BSD/Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index e07448d8..937098d3 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9,3 +9,3 @@ bandit!=1.6.0,>=1.1.0 # Apache-2.0 -bashate>=0.5.1 # Apache-2.0 -coverage!=4.4,>=4.0 # Apache-2.0 -doc8>=0.6.0 # Apache-2.0 +bashate>=2.0.0 # Apache-2.0 +coverage>=5.3 # Apache-2.0 +doc8>=0.8.1 # Apache-2.0 @@ -14,8 +14,7 @@ hacking>=3.0.1,<3.1.0 # Apache-2.0 -oslotest>=3.2.0 # Apache-2.0 -osprofiler>=1.4.0 # Apache-2.0 -os-testr>=1.0.0 # Apache-2.0 -Pygments>=2.2.0 # BSD license -python-subunit>=1.0.0 # Apache-2.0/BSD -pytz>=2013.6 # MIT -testrepository>=0.0.18 # Apache-2.0/BSD -stestr>=2.0.0 # Apache-2.0 +oslotest>=4.4.1 # Apache-2.0 +osprofiler>=3.4.0 # Apache-2.0 +Pygments>=2.7.2 # BSD license +python-subunit>=1.4.0 # Apache-2.0/BSD +pytz>=2020.4 # MIT +testrepository>=0.0.20 # Apache-2.0/BSD +stestr>=3.1.0 # Apache-2.0 @@ -23 +22 @@ testscenarios>=0.4 # Apache-2.0/BSD -testtools>=2.2.0 # MIT +testtools>=2.4.0 # MIT