We are delighted to announce the release of: magnum 13.0.0: Container Management project for OpenStack This release is part of the xena release series. The source is available from: https://opendev.org/openstack/magnum Download the package from: https://tarballs.openstack.org/magnum/ Please report issues through: https://bugs.launchpad.net/magnum/+bugs For more details, please see below. Changes in magnum 12.0.0.0rc1..13.0.0 ------------------------------------- 6468aad3 Update cluster autoscaler build for v1.22 68e6c0e4 [fix] Detect virtio-scsi volumes correctly cdbe26c4 [k8s] Fix CA rotate 12766eaf Add cloud-provider flag to openstack cloud control manager 1e2c3f3a Replace deprecated import of ABCs from collections 67acf2c5 Use Block Storage API v3 instead of API v2 d8cc8828 Fix CoreDNS 1.7.0 and above ba75dce2 Ensure backward compatibility with SQLAlchemy<1.4 b2e20a11 Make code compatible with SQLAlchemy 1.4.18 ec092724 Revert "[K8S] Enable --use-service-account-credentials" 16344a5a Add separated CA cert for etcd and front-proxy e9b48896 [K8S] Enable --use-service-account-credentials b4016783 Update traefik options 1de9b140 Download correct cri-containerd-cni tarball fa4a6ba7 Add toleration to CSI nodeplugin 7be7a5a1 [hca] Use wallaby-stable-1 as default HCA tag fc1f27a5 Support hyperkube_prefix label Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 11 +++- api-ref/source/certificates.inc | 8 +-- api-ref/source/parameters.yaml | 6 +++ bindep.txt | 4 +- devstack/settings | 9 ---- magnum/api/controllers/v1/bay.py | 3 +- magnum/api/controllers/v1/certificate.py | 15 ++++-- magnum/api/controllers/v1/cluster.py | 3 +- magnum/common/clients.py | 2 +- magnum/conductor/api.py | 5 +- magnum/conductor/handlers/ca_conductor.py | 13 +++-- magnum/conductor/handlers/common/cert_manager.py | 26 +++++++-- ...9d6a68_separated_ca_cert_for_etcd_and_front_.py | 42 +++++++++++++++ magnum/db/sqlalchemy/api.py | 20 +++---- magnum/db/sqlalchemy/models.py | 2 + .../fragments/configure-docker-storage.sh | 2 +- .../kubernetes/fragments/configure-etcd.sh | 2 +- .../fragments/configure-kubernetes-master.sh | 18 +++---- .../fragments/configure-kubernetes-minion.sh | 4 +- .../kubernetes/fragments/core-dns-service.sh | 1 - .../kubernetes/fragments/enable-cinder-csi.sh | 2 + .../kubernetes/fragments/enable-ingress-traefik.sh | 5 +- .../kubernetes/fragments/enable-services-master.sh | 2 +- .../kubernetes/fragments/install-clients.sh | 2 +- .../templates/kubernetes/fragments/install-cri.sh | 2 +- .../fragments/kube-apiserver-to-kubelet-role.sh | 7 +++ .../templates/kubernetes/fragments/make-cert.sh | 63 +++++++++++++++++++--- .../fragments/rotate-kubernetes-ca-certs-master.sh | 1 + .../kubernetes/fragments/upgrade-kubernetes.sh | 6 +-- .../fragments/write-heat-params-master.sh | 1 + .../kubernetes/fragments/write-heat-params.sh | 1 + magnum/drivers/heat/k8s_fedora_template_def.py | 1 + .../templates/kubecluster.yaml | 17 ++++-- .../k8s_fedora_atomic_v1/templates/kubemaster.yaml | 5 ++ .../k8s_fedora_atomic_v1/templates/kubeminion.yaml | 5 ++ .../templates/kubecluster.yaml | 25 +++++---- .../k8s_fedora_coreos_v1/templates/kubemaster.yaml | 6 +++ .../k8s_fedora_coreos_v1/templates/kubeminion.yaml | 5 ++ magnum/objects/certificate.py | 7 ++- magnum/objects/cluster.py | 5 +- .../notes/separated-ca-certs-299c95eea1ffd9b1.yaml | 4 ++ .../conductor/handlers/common/test_cert_manager.py | 19 +++++-- .../unit/conductor/handlers/test_ca_conductor.py | 3 +- playbooks/container-builder-vars.yaml | 11 ++-- playbooks/container-builder.yaml | 33 +++++++----- .../notes/hyperkube-prefix-01b9a5f4664edc90.yaml | 8 +++ ...-traefik-min-tls-protocol-de7e36de90c1a2f3.yaml | 7 +++ tox.ini | 30 ++++------- 54 files changed, 379 insertions(+), 141 deletions(-)