We are satisfied to announce the release of: magnum 11.1.0: Container Management project for OpenStack This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/magnum Download the package from: https://tarballs.openstack.org/magnum/ Please report issues through: https://bugs.launchpad.net/magnum/+bugs For more details, please see below. 11.1.0 ^^^^^^ Upgrade Notes ************* * Now the default admission controller list is updated by as "NodeRestriction, PodSecurityPolicy, NamespaceLifecycle, LimitRanger, ServiceAccount, ResourceQuota, TaintNodesByCondition, Priority, DefaultTolerationSeconds, DefaultStorageClass, StorageObjectInUseProtection, PersistentVolumeClaimResize, MutatingAdmissionWebhook, ValidatingAdmissionWebhook, RuntimeClass" * The default containerd version is updated with 1.4.3. Bug Fixes ********* * Fixes a regression which left behind trustee user accounts and certificates when a cluster is deleted. * Fixes database migrations with SQLAlchemy 1.3.20. * Fixes an issue with cluster deletion if load balancers do not exist. See *story 2008548 <https://storyboard.openstack.org/#!/story/2008548>* for details. Changes in magnum 11.0.0..11.1.0 -------------------------------- 0047a647 Download correct cri-containerd-cni tarball ade228f5 [K8S] Enable --use-service-account-credentials c35d4e25 Fix debug logging during cluster upgrade 79791a4b [hca] Use victoria-stable-1 as default for stable/victoria 7f5c6354 Make kubelet and kube-proxy use the secure port aed84462 Fix misquoted comment 3360b8d8 [k8s] Fix default admission controller 90f89276 Update containerd version and tarball URL 7f46d690 k8s: Do not use insecure api port 4b134688 k8s-fcos: Source bashrc for clusterconfig 2f623e2d Re-use transport for rpc server c6782e63 Add image prefix for grafana images b4a5008a Fix validation for master_lb_enabled 210984fa Do not create constraints for boolean fields bcf65b73 Fix Cinder CSI 111c6f57 Update helm charts origin repository 8e4daeba [k8s-fcos] Fix insecure registry c6640478 Use kube_master_ip for monitoring when no floating ip is used 7bda74fd Re-use transport for rpc calls 9621d8e4 Fix cluster deletion when load balancers don't exist 97c6bdad Drop lower constraints testing a3b43bca Drop dockerhub password from stable/victoria 3ced2fa8 [fix] Sync nodegroup status before delete_complete d79fb45b Remove cloud-config from k8s worker node c73afa8a Update default values for docker nofile and vm.max_map_count 039fc599 Update TOX_CONSTRAINTS_FILE for stable/victoria e9b5c32e Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 27 -------- magnum/api/attr_validator.py | 2 +- magnum/common/octavia.py | 2 + magnum/common/rpc.py | 10 --- magnum/common/rpc_service.py | 22 ++----- magnum/conductor/api.py | 5 +- .../1d045384b966_add_insecure_baymodel_attr.py | 9 ++- ...304554e2_adding_magnum_service_functionality.py | 8 ++- ...3c9c6191_add_public_column_to_baymodel_table.py | 4 +- ...98132c7_change_cluster_to_support_nodegroups.py | 2 +- ...380964133d_add_network_subnet_fip_to_cluster.py | 2 +- .../versions/4e263f236334_add_registry_enabled.py | 2 +- .../versions/5ad410481b88_rename_insecure.py | 2 +- ...d_master_lb_enabled_column_to_baymodel_table.py | 4 +- .../87e62e3c7abc_add_hidden_to_cluster_template.py | 6 +- ...5096e2334ee_add_master_lb_enabled_to_cluster.py | 4 +- .../versions/ac92cbae311c_add_nodegoup_table.py | 4 +- ...612248cab_add_floating_ip_enabled_column_to_.py | 2 +- ...onfigure_docker_storage_driver_fedora_coreos.sh | 3 + .../kubernetes/fragments/calico-service-v3-3-x.sh | 2 +- .../kubernetes/fragments/calico-service.sh | 6 +- .../fragments/configure-kubernetes-master.sh | 74 ++++++++++------------ .../fragments/configure-kubernetes-minion.sh | 11 ++-- .../kubernetes/fragments/core-dns-service.sh | 2 +- .../kubernetes/fragments/enable-auto-healing.sh | 2 +- .../kubernetes/fragments/enable-auto-scaling.sh | 2 +- .../kubernetes/fragments/enable-cinder-csi.sh | 11 +++- .../kubernetes/fragments/enable-helm-tiller.sh | 2 +- .../kubernetes/fragments/enable-ingress-octavia.sh | 2 +- .../kubernetes/fragments/enable-ingress-traefik.sh | 2 +- .../kubernetes/fragments/enable-keystone-auth.sh | 2 +- .../fragments/enable-prometheus-monitoring.sh | 2 +- .../kubernetes/fragments/enable-services-master.sh | 2 +- .../kubernetes/fragments/flannel-service.sh | 2 +- .../kubernetes/fragments/install-clients.sh | 3 +- .../templates/kubernetes/fragments/install-cri.sh | 4 +- .../kubernetes/fragments/install-helm-modules.sh | 2 +- .../fragments/kube-apiserver-to-kubelet-role.sh | 2 +- .../kubernetes/fragments/kube-dashboard-service.sh | 2 +- .../kubernetes/fragments/wc-notify-master.sh | 2 +- .../kubernetes/fragments/write-kube-os-config.sh | 1 - .../templates/kubernetes/helm/ingress-nginx.sh | 2 +- .../templates/kubernetes/helm/metrics-server.sh | 2 +- .../kubernetes/helm/prometheus-adapter.sh | 2 +- .../kubernetes/helm/prometheus-operator.sh | 7 +- magnum/drivers/heat/driver.py | 22 ++++--- .../templates/kubecluster.yaml | 8 +-- .../k8s_fedora_atomic_v1/templates/kubemaster.yaml | 1 + .../templates/fcct-config.yaml | 22 +++++-- .../templates/kubecluster.yaml | 13 ++-- .../k8s_fedora_coreos_v1/templates/kubemaster.yaml | 9 +++ .../k8s_fedora_coreos_v1/templates/kubeminion.yaml | 9 ++- .../k8s_fedora_coreos_v1/templates/user_data.json | 45 +++++++------ ...ault-admission-controller-04398548cf63597c.yaml | 5 ++ .../ensure-delete-complete-2f9bb53616e1e02b.yaml | 5 ++ .../notes/migrations-1.3.20-60e5f990422f2ca5.yaml | 4 ++ .../notes/story-2008548-65a571ad15451937.yaml | 6 ++ ...te-containerd-version-url-c095c0ee3c1a538b.yaml | 4 ++ tox.ini | 2 +- 66 files changed, 276 insertions(+), 246 deletions(-)