We enthusiastically announce the release of: magnum 9.3.0: Container Management project for OpenStack This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/magnum Download the package from: https://tarballs.openstack.org/magnum/ Please report issues through: https://bugs.launchpad.net/magnum/+bugs For more details, please see below. 9.3.0 ^^^^^ New Features ************ * Add cinder_csi_enabled label to support out of tree Cinder CSI. * Now the Fedora CoreOS driver can support the sha256 verification for the hyperkube image when bootstraping the Kubernetes cluster. Bug Fixes ********* * Fixed the usage of cert_manager_api=true making cluster creation fail due to a logic lock between kubemaster.yaml and kubecluster.yaml * This proxy issue of Prometheus/Grafana script has been fixed. Changes in magnum 9.2.0..9.3.0 ------------------------------ 0feb2b18 fcos: Mount /:/rootfs:ro to Kubelet 5d74dfa1 k8s: Fix logic of when a cluster API is accessible 6ae48384 Fix join of status_reason 5fa5ca40 Add cinder_csi_enabled label 258ab71c calico: Add node/status in ClusterRole db4cb151 [stable] Remove magnum-container-publish from .zuul.yaml 57836175 k8s-fedora: Set max-size to 10m for containers cd5f14a6 Upgrade pause image to version 3.1 167660e7 fcos-podman: Set max size for logging to 50m bf322783 atomic-podman: Set log imit to 50m 17c6034e Add fcct config for coreos user_data 75be4876 Support TimeoutStartSec for k8s systemd services d9c82352 Remove buildimage jobs 64d7c982 [bug] Fix regression when use_podman=false 69df9f24 [k8s] Make metrics-server work without DNS f61fef67 Fix api-cert-manager=true blocking cluster creation 86c579c8 k8s_coreos Set REQUESTS_CA for heat-agent 62c5de07 Fix Field `health_status_reason[api]' cannot be None` c121c927 Fix the load balancer description regex pattern for deleting cluster ba89a6c4 core-podman: Mount os-release properly 7e89ac65 [k8s] Fix instance ID issue with podman and autoscaler d44210ef Fix ingress traefik systemd unit 5b625257 Support verifying the digest for hyperkube image 84cd9ca3 Fix proxy for Grafana script 454885f3 Add selector in monitoring deployments 19ed47b9 Execute traefik systemd unit over ssh Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 42 +- magnum/common/octavia.py | 2 +- magnum/drivers/common/k8s_monitor.py | 14 +- .../kubernetes/fragments/calico-service.sh | 5 + .../fragments/configure-kubernetes-master.sh | 28 +- .../fragments/configure-kubernetes-minion.sh | 22 +- .../fragments/enable-cert-api-manager.sh | 2 +- .../kubernetes/fragments/enable-cinder-csi.sh | 521 +++++++++++++++++++++ .../kubernetes/fragments/enable-ingress-traefik.sh | 16 +- .../fragments/enable-prometheus-monitoring.sh | 12 + .../kubernetes/fragments/enable-services-master.sh | 8 + .../kubernetes/fragments/kube-dashboard-service.sh | 8 + .../kubernetes/fragments/start-container-agent.sh | 6 + .../kubernetes/fragments/upgrade-kubernetes.sh | 17 +- .../fragments/write-heat-params-master.sh | 8 + .../templates/kubernetes/helm/metrics-server.sh | 2 + magnum/drivers/heat/driver.py | 2 +- magnum/drivers/heat/k8s_fedora_template_def.py | 6 +- .../templates/kubecluster.yaml | 55 ++- .../k8s_fedora_atomic_v1/templates/kubemaster.yaml | 40 ++ .../templates/fcct-config.yaml | 203 ++++++++ .../templates/kubecluster.yaml | 56 ++- .../k8s_fedora_coreos_v1/templates/kubemaster.yaml | 65 ++- .../k8s_fedora_coreos_v1/templates/kubeminion.yaml | 16 +- .../k8s_fedora_coreos_v1/templates/user_data.json | 141 ++++-- playbooks/magnum-buildimages-base.yaml | 98 ---- playbooks/post/upload-images.yaml | 21 - .../cinder-csi-enabled-label-ab2b8ade63c57cf3.yaml | 4 + .../notes/fedora_coreos-e66b44d86dea380f.yaml | 4 + .../fix-cert-apimanager-527352622c5a9c3b.yaml | 5 + ...x-proxy-of-grafana-script-8b408d9d103dfc06.yaml | 4 + ...erification-for-hyperkube-fb2292c6a8bb00ba.yaml | 5 + .../notes/use_podman-39532143be2296c2.yaml | 5 + 37 files changed, 1293 insertions(+), 274 deletions(-)