We are satisfied to announce the release of: magnum 8.0.0: Container Management project for OpenStack This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/magnum Download the package from: https://tarballs.openstack.org/magnum/ Please report issues through: https://bugs.launchpad.net/magnum/+bugs For more details, please see below. 8.0.0 ^^^^^ New Features * Added monitoring_enabled to install prometheus-operator monitoring solution by means of helm stable/prometheus-operator public chart. Defaults to false. grafana_admin_passwd label can be used to set grafana dashboard admin access password. If grafana_admin_passwd is not set the password defaults to prom_operator. Changes in magnum 7.0.0..8.0.0 ------------------------------ 18ce317d [fedora-atomic-k8s] Allow all traffic from master to worker nodes 93b6cefd Add API ref for <ClusterID>/actions/resize a0163e40 Replace openstack.org git:// URLs with https:// b04363df Update UPPER_CONSTRAINTS_FILE for stable/stein 25274c3e Update .gitreview for stable/stein a46d2ffc [k8s] Install prometheus monitoring with helm c47fde0c Improve floating IP allocation 15ecdb80 Support <ClusterID>/actions/resize API 13e8c11f k8s_fedora: Add ca_key before all deployments b5a6ee1d Migrate legacy jobs to Ubuntu Bionic c39f1150 [fedora-atomic-k8s] Adding Node Problem Detector 16c2a4cf ci: Disable functional tests 2595fda3 Ensure http proxy environment is available during 'atomic install' for k8s 2ab874a5 [k8s] Make flannel self-hosted 18fc68dd Update min tox version to 2.0 83c8b13b Release k8s v1.11.8, v1.12.6 and v1.13.4 a47f5a39 make sure to set node_affinity_policy for Mesos template definition e4b05bbd Fix swarm functional job 2cf4df08 Fix prometheus installation script 8c8cd7d1 Return health_status for cluster listing 36955360 Do not exit in the enable-helm-tiller script 14b46ea2 FakeLoopingCall raises IOError 31c82625 [k8s-fedora-atomic] Security group definition for worker nodes 2bbfd52a [k8s-fedora-atomic] Use ClusterIP for prometheus service 20d03919 Return instance ID of worker node 4f84c849 Add server group for cluster worker nodes ea362b13 python3 fix: decode binary cert data if encountered 05538434 Add python 3.6 unit test job e6b33251 Add reno for flannel reboot fix d866fb61 Fix async reserved word in python3.7 ca442a72 [k8s] Add trustee as a secret in kube-system c38edc69 [k8s] Update cluster health status by native API 230ad3f2 [k8s] helm install metrics service b2a6a771 [k8s_fedora] Add heat-agent to worker nodes 6aee8649 Add hidden flag to cluster template 0b5f4260 k8s_fedora: Deploy tiller 82344703 Fixing container-build job 87a743ad Fix typo in octavia-ingress-controller doc b555f90c Allow overwriting labels on swarm mode creation d2f36a2e Delete loadbalancers and floatingips for service and ingress a941822c Support octavia-ingress-controller e7efb49a heat-agent: Add openssh-clients f69a54d9 [k8s-fedora-atomic] Update k8s default version 0a5fd471 Support multi k8s image versions 766a64a4 Allow cluster template being renamed 60f97993 ci: Rebuild kubernetes v1.11.6 containers 6a9c490b Update kube cmd documentation links 2ccf639a Add framework for magnum-status upgrade check f63761a8 [k8s_fedora_atomic] Delete floating ip for load balancer daf34d9d Use oslo_serialization instead of the json module directly 9f371967 Use python3 for functional tests 41cd8579 Use MultiType and types.text instead of str 6a034827 Bump k8s version up to v1.11.5 54bea06b Fix python3 compatibility b6936894 Fix prometheus monitoring 49d04449 Do not use 'exit' in the script 63aa9caf Remove -U from pip install 09f88074 Enable CoreDNS prometheus metrics plugin 59da4e25 Support Keystone AuthN and AuthZ for k8s ffc61816 support http/https proxy for discovery url ba1ca0e4 Removed admin_* from devstack config 26c28a03 Change docker image pulling policy from Always to IfNotPresent 6c61a1a9 k8s_fedora: Use external kubernetes/cloud-provider-openstack b6ad606b containers: clean-up build code b577aa42 k8s_build: Build kubernetes v1.11.6 containers d391dbdc Fix use of magnum_repository in container-publish 60c996d2 Changes in container builder cae7fa21 [k8s] Cluster creation speedup 20d965c8 Build images in the ci a9802089 Release note for cluster pre-delete e18ced4d Delete Octavia loadbalancers for fedora atomic k8s driver 844e4db2 functional: stop using concurrency of 1 for api tests 98fcd794 functional: bump flavor specs 2e2ebaf6 functional: use vexxhost-specific nodes with nested virt 3646a59e functional: use default admission_control_list values d1647970 functional: bump atomic version to latest e0fd3f9e functional: add body for delete_namespaced_service in k8s d6cc77b1 functional: retrieve cluster to get stack_id cc8caf52 fix bug link in readme f27bde71 Add support for www_authenticate_uri in ContextHook cf5f78e5 Add iptables -P FORWARD ACCEPT unit 8f4643d8 Make providing a keypair optional e0ed3018 Add missing ws separator between words daa7d049 Cleaned up devstack logging 718cb9c9 Add support for www_authentication_uri 9a6698fb Add Octavia python client for Magnum 5d1eab9d [K8S] Pass cluster name to controller-manager c98e9525 Add heat_container_agent_tag label 547f9309 Minor fixes to re-align with Ironic 095b49e6 [swarm-mode] Remove --live-restore from Docker daemon options 48e2e774 Update heat-container-agent version tag 423d1863 Fixing gate failing due to bad AMQP virtual_host 05f0cddc Make master node schedulable with taints f2fd732c Trivial code cleanups 3f773f1f Use existing templates for cluster-update command 36c99a51 Make cover jobs non-voting bc36ef8f Add prometheus-monitoring namespace bdeed363 add python 3.6 unit test job 37231f18 switch documentation job to new PTI 4a1a4be0 Use templates for cover and lower-constraints d3bf6a49 Make X-Subject-Token search case unsensitive 0cf61dfb Add prometheus & grafana container image tags 772aab28 import zuul job settings from project-config d1ee94a1 [swarm-mode] allow TCP port 2377 to swarm master node 6390e0db [k8s] Add kubelet to the master nodes 72f7e5f7 Fix unit test failure with python3.6 85981d89 Remove deprecated `tls-ca-file` option from kube-apiserver d80febb3 Add health_status and health_status_reason to cluster 419a2285 Fixing CoreOS driver a26c2225 Deprecate send_cluster_metrics 7d4d22b9 Remove -u root as mysql is executed with root user 4f121e50 [k8s] Add proxy to master and set cluster-cidr c2b6b3b9 Imported Translations from Zanata 77a22067 Fix enable_cloud_provider check ec3fcf5c Imported Translations from Zanata 4bb16422 Remove the last slash of extra_params['auth_url'] 7fdff38a [k8s] Set order in kubemaster software deployments 80fcf76d [k8s] Add new label `service_cluster_ip_range` 32f80567 Update reno for stable/rocky a400ea79 Fix doc format 7e23ee6b Docs: Replace non-existing command 87b06c81 Remove fedora-atomic diskimage-builder element Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 147 ++++- README.rst | 2 +- api-ref/source/clusters.inc | 57 ++ api-ref/source/parameters.yaml | 13 + api-ref/source/samples/cluster-resize-req.json | 5 + contrib/drivers/heat/dcos_centos_template_def.py | 2 +- devstack/lib/magnum | 23 +- devstack/plugin.sh | 2 +- .../heat-container-agent/Dockerfile | 4 +- .../heat-container-agent/config.json.template | 0 .../heat-container-agent/launch | 0 .../heat-container-agent/manifest.json | 0 .../scripts/50-heat-config-docker-compose | 0 .../heat-container-agent/scripts/55-heat-config | 0 .../scripts/configure_container_agent.sh | 0 .../scripts/heat-config-notify | 0 .../heat-container-agent/scripts/hooks/atomic | 0 .../scripts/hooks/docker-compose | 0 .../heat-container-agent/scripts/hooks/script | 0 .../scripts/write-os-apply-config-templates.sh | 0 .../heat-container-agent/service.template | 0 .../heat-container-agent/tmpfiles.template | 0 .../kubernetes-apiserver/config.json.template | 192 +++++++ .../kubernetes-controller-manager/Dockerfile | 24 + .../config.json.template | 183 ++++++ .../controller-manager | 7 + .../kubernetes-controller-manager/launch.sh | 10 + .../kubernetes-controller-manager/service.template | 12 + .../kubernetes-kubelet/config.json.template | 424 ++++++++++++++ .../kubernetes-scheduler/config.json.template | 183 ++++++ lower-constraints.txt | 2 + magnum/api/attr_validator.py | 10 +- magnum/api/controllers/v1/bay.py | 12 +- magnum/api/controllers/v1/baymodel.py | 14 +- magnum/api/controllers/v1/cluster.py | 24 +- magnum/api/controllers/v1/cluster_actions.py | 90 +++ magnum/api/controllers/v1/cluster_template.py | 27 +- magnum/api/controllers/v1/federation.py | 4 +- magnum/api/controllers/v1/magnum_services.py | 4 +- magnum/api/controllers/v1/quota.py | 3 +- magnum/api/controllers/v1/types.py | 2 +- magnum/api/controllers/versions.py | 3 +- magnum/api/hooks.py | 9 +- magnum/api/http_error.py | 7 +- magnum/api/middleware/parsable_error.py | 7 +- magnum/api/utils.py | 2 +- magnum/cmd/status.py | 53 ++ .../common/cert_manager/barbican_cert_manager.py | 27 +- magnum/common/cert_manager/local_cert_manager.py | 24 +- .../cert_manager/x509keypair_cert_manager.py | 5 + magnum/common/clients.py | 17 + magnum/common/exception.py | 10 +- magnum/common/keystone.py | 7 +- magnum/common/name_generator.py | 4 +- magnum/common/neutron.py | 76 +++ magnum/common/octavia.py | 98 ++++ magnum/common/policies/cluster.py | 11 + magnum/common/urlfetch.py | 2 +- magnum/common/x509/operations.py | 5 +- magnum/conductor/api.py | 17 + magnum/conductor/handlers/ca_conductor.py | 11 +- magnum/conductor/handlers/cluster_conductor.py | 61 ++ magnum/conductor/handlers/common/cert_manager.py | 20 +- magnum/conductor/handlers/conductor_listener.py | 8 +- magnum/conductor/k8s_api.py | 65 ++- magnum/conf/__init__.py | 2 + magnum/conf/cluster.py | 4 + magnum/conf/drivers.py | 5 +- magnum/conf/octavia.py | 58 ++ magnum/conf/trust.py | 2 +- .../87e62e3c7abc_add_hidden_to_cluster_template.py | 30 + .../cbbc65a86986_add_health_status_to_cluster.py | 38 ++ magnum/db/sqlalchemy/api.py | 22 +- magnum/db/sqlalchemy/models.py | 10 +- magnum/drivers/common/driver.py | 29 +- .../drivers/common/image/fedora-atomic/README.rst | 82 --- .../common/image/fedora-atomic/element-deps | 4 - .../fedora-atomic/environment.d/50-fedora-atomic | 2 - .../fedora-atomic/finalise.d/80-fedora-atomic | 69 --- .../image/fedora-atomic/install_imagebuild_deps.sh | 22 - .../image/fedora-atomic/package-installs.yaml | 2 - .../image/fedora-atomic/validate_atomic_image.sh | 29 - magnum/drivers/common/k8s_monitor.py | 72 +++ .../templates/environments/enable_floating_ip.yaml | 2 - .../environments/enable_lb_floating_ip.yaml | 2 + .../kubernetes/fragments/calico-service.sh | 54 +- .../kubernetes/fragments/configure-etcd.sh | 28 +- .../fragments/configure-kubernetes-master.sh | 179 ++++-- .../fragments/configure-kubernetes-minion.sh | 61 +- .../kubernetes/fragments/core-dns-service.sh | 19 +- .../kubernetes/fragments/enable-auto-healing.sh | 117 ++++ .../fragments/enable-cert-api-manager.sh | 20 +- .../kubernetes/fragments/enable-helm-tiller.sh | 232 ++++++++ .../fragments/enable-ingress-controller.sh | 26 +- .../kubernetes/fragments/enable-ingress-octavia.sh | 122 ++++ .../kubernetes/fragments/enable-ingress-traefik.sh | 9 - .../kubernetes/fragments/enable-keystone-auth.sh | 185 ++++++ .../kubernetes/fragments/enable-node-exporter.sh | 32 -- .../fragments/enable-prometheus-monitoring.sh | 216 +++++-- .../kubernetes/fragments/enable-services-master.sh | 10 +- .../kubernetes/fragments/flannel-config-service.sh | 73 --- .../kubernetes/fragments/flannel-service.sh | 280 ++++++--- .../kubernetes/fragments/install-helm-modules.sh | 29 + .../fragments/kube-apiserver-to-kubelet-role.sh | 263 ++++++++- .../kubernetes/fragments/kube-dashboard-service.sh | 121 ++-- .../kubernetes/fragments/make-cert-client.sh | 4 +- .../templates/kubernetes/fragments/make-cert.sh | 2 +- .../kubernetes/fragments/start-container-agent.sh | 41 +- .../kubernetes/fragments/write-flannel-config.sh | 28 - .../fragments/write-heat-params-master.yaml | 19 +- .../kubernetes/fragments/write-heat-params.yaml | 4 +- .../kubernetes/fragments/write-kube-os-config.sh | 11 +- .../templates/kubernetes/helm/metrics-server.sh | 83 +++ .../kubernetes/helm/prometheus-operator.sh | 165 ++++++ .../common/templates/{lb.yaml => lb_api.yaml} | 0 magnum/drivers/common/templates/lb_etcd.yaml | 52 ++ .../swarm/fragments/add-docker-daemon-options.sh | 5 + .../common/templates/swarm/fragments/make-cert.py | 1 + .../templates/swarm/fragments/network-service.sh | 23 + magnum/drivers/heat/driver.py | 69 ++- magnum/drivers/heat/k8s_coreos_template_def.py | 132 +++++ magnum/drivers/heat/k8s_fedora_template_def.py | 32 +- magnum/drivers/heat/k8s_template_def.py | 48 +- magnum/drivers/heat/swarm_fedora_template_def.py | 3 +- magnum/drivers/heat/swarm_mode_template_def.py | 6 +- magnum/drivers/heat/template_def.py | 62 +- magnum/drivers/k8s_coreos_v1/template_def.py | 23 +- .../templates/fragments/add-ext-ca-certs.yaml | 10 +- .../templates/fragments/configure-docker.yaml | 15 + .../templates/fragments/enable-coredns.yaml | 2 +- .../templates/fragments/enable-docker-mount.yaml | 52 ++ .../templates/fragments/enable-kubelet-master.yaml | 2 +- .../templates/fragments/enable-kubelet-minion.yaml | 1 - .../templates/fragments/wc-notify.yaml | 6 + .../fragments/write-heat-params-master.yaml | 2 +- .../templates/fragments/write-heat-params.yaml | 2 +- .../templates/fragments/write-kubeconfig.yaml | 1 + .../fragments/write-master-kubeconfig.yaml | 21 + .../k8s_coreos_v1/templates/kubecluster.yaml | 437 ++++++++++---- .../k8s_coreos_v1/templates/kubemaster.yaml | 309 +++++++--- .../k8s_coreos_v1/templates/kubeminion.yaml | 212 ++++++- magnum/drivers/k8s_fedora_atomic_v1/driver.py | 13 + .../templates/kubecluster.yaml | 217 ++++++- .../k8s_fedora_atomic_v1/templates/kubemaster.yaml | 233 +++----- .../k8s_fedora_atomic_v1/templates/kubeminion.yaml | 48 +- .../templates/kubecluster.yaml | 24 +- .../k8s_fedora_ironic_v1/templates/kubeminion.yaml | 15 +- .../templates/kubeminion_software_configs.yaml | 7 - magnum/drivers/mesos_ubuntu_v1/template_def.py | 22 +- .../mesos_ubuntu_v1/templates/mesoscluster.yaml | 18 +- .../swarm_fedora_atomic_v1/templates/cluster.yaml | 29 +- .../templates/swarmcluster.yaml | 23 +- magnum/objects/cluster.py | 5 +- magnum/objects/cluster_template.py | 4 +- magnum/objects/fields.py | 17 + magnum/service/periodic.py | 76 ++- magnum/servicegroup/magnum_service_periodic.py | 4 +- .../api/v1/models/baymodelpatch_model.py | 4 +- .../functional/api/v1/models/baypatch_model.py | 4 +- .../api/v1/models/cluster_templatepatch_model.py | 4 +- .../functional/api/v1/models/clusterpatch_model.py | 4 +- .../functional/swarm/test_swarm_python_client.py | 4 +- .../api/controllers/v1/test_cluster_actions.py | 53 ++ .../api/controllers/v1/test_cluster_template.py | 102 +++- .../conductor/handlers/common/test_cert_manager.py | 21 +- .../conductor/handlers/test_cluster_conductor.py | 81 ++- .../handlers/test_k8s_cluster_conductor.py | 86 ++- .../handlers/test_mesos_cluster_conductor.py | 5 + playbooks/container-builder-copy-logs.yaml | 46 ++ playbooks/container-builder-setup-gate.yaml | 25 + playbooks/container-builder-vars.yaml | 18 + playbooks/container-builder.yaml | 64 +++ playbooks/container-publish.yaml | 23 + playbooks/magnum-buildimages-base.yaml | 2 +- playbooks/magnum-functional-base.yaml | 6 + playbooks/pre/prepare-workspace.yaml | 2 +- ...l-for-portal-network-cidr-a09edab29da6e7da.yaml | 6 + ...d-kubelet-to-master-nodes-da2d4ea0d3a332cd.yaml | 7 + .../notes/add-octavia-client-4e5520084eae3c2b.yaml | 5 + ...d-upgrade-check-framework-5057ad67a7690a14.yaml | 8 + ...cy-for-mesos-template-def-82627eb231aa4d28.yaml | 7 + ...er-template-being-renamed-82f7d5d1f33a7957.yaml | 7 + .../notes/bug-2004942-052321df27529562.yaml | 5 + .../deploy-tiller-in-k8s-df12ee41d00dd7ff.yaml | 14 + ...cate-send_cluster_metrics-8adaac64a979f720.yaml | 14 + .../notes/fix-cluster-update-886bd2d1156bef88.yaml | 8 + .../notes/flannel-cni-4a5c9f574325761e.yaml | 8 + .../notes/flannel-reboot-fix-f1382818daed4fa8.yaml | 7 + ...fana_prometheus_tag_label-78540ea106677485.yaml | 5 + .../heat-container-agent-tag-92848c1062c16c76.yaml | 5 + .../heat-container-agent-tag-fe7cec6b890329af.yaml | 5 + ...m-install-metrics-service-cd18be76c4ed0e5f.yaml | 8 + ...stall-prometheus-operator-ea87752bc57a0945.yaml | 8 + ...-cluster-creation-speedup-21b5b368184d7bf0.yaml | 5 + .../notes/k8s-delete-vip-fip-b2ddf61ddbc080bc.yaml | 6 + ...prove-floating-ip-enabled-84cd00224d6b7bc1.yaml | 10 + .../notes/k8s-keystone-auth-6c88c1a2d406fb61.yaml | 7 + .../k8s-nodes-security-group-9d8dbb91b006d9dd.yaml | 12 + ...ctavia-ingress-controller-32c0b97031fd0dd4.yaml | 8 + .../k8s-prometheus-clusterip-b191fa163e3f1125.yaml | 7 + .../kubernetes-cloud-config-6c9a4bfec47e3bb4.yaml | 14 + .../make-keypair-optional-fcf4a17e440d0879.yaml | 6 + .../notes/pre-delete-cluster-5e27cfdf45e25805.yaml | 5 + .../notes/resize-api-2bf1fb164484dea9.yaml | 11 + ...n-server-id-in-kubeminion-cb33f5141e0b7fa9.yaml | 11 + ...r-both-master-and-workder-bdd491e4323955d4.yaml | 9 + .../notes/swarm-live-restore-b03ad192367abced.yaml | 6 + releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 286 +++++++++- .../source/locale/fr/LC_MESSAGES/releasenotes.po | 64 +++ releasenotes/source/rocky.rst | 6 + requirements.txt | 2 + setup.cfg | 1 + tox.ini | 6 +- 276 files changed, 9214 insertions(+), 1578 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 0e5ffaaf..a5eff15d 100644 --- a/requirements.txt +++ b/requirements.txt @@ -36,0 +37 @@ oslo.service!=1.28.1,>=1.24.0 # Apache-2.0 +oslo.upgradecheck>=0.1.1 # Apache-2.0 @@ -48,0 +50 @@ python-keystoneclient>=3.8.0 # Apache-2.0 +python-octaviaclient>=1.6.0 # Apache-2.0