We enthusiastically announce the release of: kuryr-kubernetes 4.0.0: Kubernetes integration with OpenStack networking This release is part of the wallaby release series. The source is available from: https://opendev.org/openstack/kuryr-kubernetes Download the package from: https://tarballs.openstack.org/kuryr-kubernetes/ Please report issues through: https://bugs.launchpad.net/kuryr-kubernetes/+bugs For more details, please see below. Changes in kuryr-kubernetes 3.0.0..4.0.0 ---------------------------------------- 5ccf238 Fixing bug, cannot delete pools when members are empty 3807f8e Adds SCTPConnectivity tests to e2e network policy tests 5a08f26 Include release notes for Service without selectors aa923f5 Move ovn jobs to voting 1c1d1d4 DevStack: Support dual stack cc800ae Fix Subnet retrival when creating Service without Selector 2edbbf2 Fixes the if-else-block bug 0719ca7 Skip pool pre population if no Status is present on CRD 0a0cd64 Ensure Namespace readiness depends on correct CRD 225b2a3 Enable SCTP service test in tempest.conf 10ea869 Do not default protocol to TCP for allow-all NPs f8a7ba7 Removing the upgrade code from Kuryr-Kubernetes repo 93c10fc OpenShift: Add configured subnets to the detected 4ba363d Narrow connection to the cluster only on namespaceSelector. e545324 Speed pools population by relying on KuryrPort CR 9905801 Fix number of ports requested on pool pre-population 2611dc3 Make parse_network_policy_rules private. 1d8afc7 Update documentation for svc and ep annotation to KuryrLoadBalancer 229a990 Get trunks more diligently 1473cfc Ignore headless services in NP code 65711ea Run k8s e2e tests for network policy 28b315e Bump kubernetes verrion to 1.19.1. e95ed53 Add OpenShiftNodesSubnets driver and MachineHandler abc39b0 Introduce NodesSubnetsDriver b3814a3 Multiple nodes subnets support 329fc5f [DOCS] Testing SCTP service support de6a06c Adapt selfLink calculation for any k8s objects. 31b96f3 Adapt selfLink calculation for KuryrPort CRD objects. 505f152 Adapt selfLink calculation for Namespace objects. caf098f Adapt selfLink calculation for Endpoints objects. 94e5f92 Adapt selfLink calculation for Service objects. b38f058 Adapt selfLink calculation for KuryrNet CRD objects. b521fee Adapt selfLink calculation for Pod objects. 4fe32c8 Adapt selfLink calculation for KuryrNetwork CRD objects. 96f46f5 Adapt selfLink calculation for KuryrNetworkPolicy CRD objects. 7c790aa Adapt selfLink calculation for KuryrNetPolicy CRD objects. 3bd82fe Adapt selfLink calculation for KuryrLoadBalancer CRD objects. 9bc33d9 Fix k8s client for handling empty list in response. e3ff954 Added function for figure out link for the resource. 478257a CNI docs: Fix return code c68a6fe Fix OVN gates c3e6612 K8S Services: add support for SCTP d650962 Skip unscheduled pods when handling NP creation 500ff16 Enables SCTPsupport in K8s v1.18 cluster d528e81 Fix base docker images ccc220b Fix CI issues 5a82a34 Adds doc about ovn-octavia driver support 543319f Fix ovn local.conf df3a49f Fix docs for NP. a95c115 Use centos/golang from quay.io registry. 643468a Fix spelling errors. f5e8e9c Add urllib3's SSLError to expected Watcher exc 5fab420 Updating tempest conf file 42b5790 Change registry for fetching coredns image. 775a4c9 Add basic docs about nested mode 42d09e2 Enable Neutron to allow taging on port creation 7e45170 Support for bulk port tagging extension 6634be0 Fix the invalid arguments formatting in exception messages 27876a5 Add support to Endpoints without targetRef f399418 Update RDO to use Victoria release 293750c Move to quay.io with kuryr/demo docker image. f76abf9 Enable neutron-tag-ports-during-bulk-creation extension. 885710a Ensure members are deleted from pools when there is no endpoints 8a53492 Update TOX_CONSTRAINTS_FILE 2c8bb8a Update tempest configs according Kuryr enabled configs 3a02832 Resolve issues with object races. 525dc15 Ensure egress NP works with Service without selectors dce5939 Skip unscheduled pods when deleting NPs 4bfe85d Handle None or {} labels in match_selector() 3a4d901 Returns CNI errors in specified form 99f9e0e Updates kuryr_cni vendor folder 0fab73b Increase tempest test timeout to 30 mintues b4775f3 Remove the unused coding style modules a80c791 Add release note about update of mtu config value 9fb0c60 Clean up references to the sg config option cae1949 Fix SG rules to be created twice for the services. 2b3e2f5 Fix exception message in case when bulk creation fails. c2817ae Updates vagrant README 4ad6238 Removes the line that removes service_account.yml 3407636 updates network policy doc d26133a Fix restoring listener in case of removing NP. 6a6e490 Splits kuryr-controller and kuryr-cni ServiceAccounts bef1fcd removed unused env variable reference 17f99a7 Allow to config network MTU dbec1a0 Logging level should be lowered ba12753 Removes generate_lbaas_port_specs method 2296c8f Delete ports created for host networking pods fd18e34 Removes unprovided kuryr-cni.conf file docs dcaa9e2 CNI: Lookup offending interface on NetlinkError 5a1842b Removes deprecated lbaasv2 haproxy docs 642e030 Fix the IPv6 enablement 2f82848 corrects Kubernetes Services handlers 8799fa9 Fix installation with Vagrant 479650c removes kuryr_kubernetes_ingress_design 402df1e Fix is_host_network() 78488bc updates docs to "kubectl create deployment" 3fb3194 Add protection from unexpected issues 03177e4 Load qos to avoid missing qos-fip on OVN gates cdcaaa6 Reuse the docs deps to benefit from constraints ef62196 optimize size and time using --no-cache-dir 153a16e Ensure LB member is updated if a conflict happens 1c4a750 Ensure only kuryr ports are cleaned up 663194a Refactor passing params to requests in K8s client 44890a8 Set read timeout for any request in K8sClient 9794359 requirements: Drop os-testr cd5a2ee Skip update of vip sg if lb is gone df53e14 Ensure klb handler reacretes lb 68dd879 Bump py37 to py38 in tox.ini 5b2c399 Clean up unused methods and not needed interactions to k8s API. ab374e5 Don't crash on fetching network policy. 4e16d44 Add Python3 wallaby unit tests 1f8da63 Update master for stable/victoria 8709028 Avoid race when pod is deleted before finalizer is added bee7718 Cleanup ports belonging to deleted nodes Diffstat (except docs and test files) ------------------------------------- .zuul.d/base.yaml | 14 +- .zuul.d/octavia.yaml | 11 + .zuul.d/project.yaml | 3 +- .zuul.d/sdn.yaml | 21 +- cni.Dockerfile | 10 +- contrib/pools-management/README.rst | 2 +- contrib/sctp_client.py | 31 ++ contrib/vagrant/README.md | 29 +- contrib/vagrant/Vagrantfile | 6 +- contrib/vagrant/vagrant.sh | 4 + controller.Dockerfile | 4 +- devstack/lib/kuryr_kubernetes | 167 ++++--- devstack/local.conf.odl.sample | 2 +- devstack/local.conf.openshift.sample | 4 +- devstack/local.conf.ovn.sample | 10 +- devstack/local.conf.sample | 3 +- devstack/plugin.sh | 276 ++++++----- devstack/settings | 4 +- .../devref/kuryr_kubernetes_ingress_design.rst | 267 ---------- .../installation/devstack/nested-macvlan.rst | 2 +- .../installation/testing_nested_connectivity.rst | 2 +- kuryr_cni/Gopkg.lock | 13 +- kuryr_cni/Gopkg.toml | 2 +- kuryr_cni/main.go | 87 +++- .../containernetworking/cni/pkg/skel/skel.go | 97 ++-- .../containernetworking/cni/pkg/types/020/types.go | 14 - .../containernetworking/cni/pkg/types/args.go | 2 +- .../cni/pkg/types/current/types.go | 17 - .../containernetworking/cni/pkg/types/types.go | 28 +- .../containernetworking/cni/pkg/utils/utils.go | 84 ++++ kuryr_cni/vendor/github.com/pkg/errors/.travis.yml | 11 +- kuryr_cni/vendor/github.com/pkg/errors/Makefile | 44 ++ kuryr_cni/vendor/github.com/pkg/errors/README.md | 11 +- kuryr_cni/vendor/github.com/pkg/errors/errors.go | 8 +- kuryr_cni/vendor/github.com/pkg/errors/go113.go | 38 ++ kuryr_cni/vendor/github.com/pkg/errors/stack.go | 58 ++- kuryr_kubernetes/clients.py | 2 +- kuryr_kubernetes/cmd/status.py | 3 +- kuryr_kubernetes/cni/binding/bridge.py | 9 +- kuryr_kubernetes/cni/binding/nested.py | 88 ++-- kuryr_kubernetes/cni/daemon/service.py | 71 ++- kuryr_kubernetes/cni/plugins/k8s_cni_registry.py | 3 +- kuryr_kubernetes/config.py | 24 +- kuryr_kubernetes/constants.py | 4 +- kuryr_kubernetes/controller/drivers/base.py | 32 ++ kuryr_kubernetes/controller/drivers/lbaasv2.py | 104 +++- .../controller/drivers/namespace_subnet.py | 7 +- .../controller/drivers/nested_macvlan_vif.py | 9 +- kuryr_kubernetes/controller/drivers/nested_vif.py | 38 +- .../controller/drivers/nested_vlan_vif.py | 18 +- .../controller/drivers/network_policy.py | 358 ++++++-------- .../drivers/network_policy_security_groups.py | 8 +- kuryr_kubernetes/controller/drivers/neutron_vif.py | 25 +- .../controller/drivers/node_subnets.py | 130 +++++ kuryr_kubernetes/controller/drivers/sriov.py | 13 +- kuryr_kubernetes/controller/drivers/utils.py | 95 +++- kuryr_kubernetes/controller/drivers/vif_pool.py | 182 ++++++- .../controller/handlers/kuryrnetwork.py | 7 +- .../controller/handlers/kuryrnetwork_population.py | 16 +- .../controller/handlers/kuryrnetworkpolicy.py | 51 +- kuryr_kubernetes/controller/handlers/kuryrport.py | 22 +- kuryr_kubernetes/controller/handlers/lbaas.py | 120 +---- .../controller/handlers/loadbalancer.py | 233 ++++----- kuryr_kubernetes/controller/handlers/machine.py | 67 +++ kuryr_kubernetes/controller/handlers/namespace.py | 42 +- kuryr_kubernetes/controller/handlers/pod_label.py | 3 +- kuryr_kubernetes/controller/handlers/vif.py | 92 +--- kuryr_kubernetes/handlers/retry.py | 5 +- kuryr_kubernetes/k8s_client.py | 125 ++--- kuryr_kubernetes/os_vif_util.py | 3 +- .../unit/cni/plugins/test_k8s_cni_registry.py | 6 +- .../unit/controller/drivers/test_multi_vif.py | 1 - .../controller/drivers/test_namespace_subnet.py | 1 - .../controller/drivers/test_nested_macvlan_vif.py | 3 + .../unit/controller/drivers/test_nested_vif.py | 67 ++- .../controller/drivers/test_nested_vlan_vif.py | 7 + .../unit/controller/drivers/test_network_policy.py | 84 ++-- .../drivers/test_network_policy_security_groups.py | 20 +- .../unit/controller/drivers/test_neutron_vif.py | 9 + .../unit/controller/drivers/test_node_subnets.py | 210 ++++++++ .../unit/controller/handlers/test_kuryrnetwork.py | 1 - .../handlers/test_kuryrnetwork_population.py | 9 +- .../controller/handlers/test_kuryrnetworkpolicy.py | 15 - .../unit/controller/handlers/test_kuryrport.py | 54 ++- .../unit/controller/handlers/test_loadbalancer.py | 84 +++- .../unit/controller/handlers/test_namespace.py | 8 +- .../unit/controller/handlers/test_pod_label.py | 1 - kuryr_kubernetes/utils.py | 195 +++++++- kuryr_kubernetes/watcher.py | 18 +- lower-constraints.txt | 12 +- ...ecate-worker-nodes-subnet-e452c84df5b5ed5c.yaml | 12 + ...etwork-device-mtu-default-90faa7d685d4d0ec.yaml | 7 + ...ervices-without-selectors-fea06ab71a8a6f2a.yaml | 7 + .../svc-without-selectors-f36bab0883459b80.yaml | 8 + releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 6 + requirements.txt | 2 +- setup.cfg | 5 + tools/generate_k8s_resource_definitions.sh | 4 +- tox.ini | 8 +- 140 files changed, 4410 insertions(+), 2041 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 8df466d..cb84f72 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9 +9 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -requests>=2.18.0 # Apache-2.0 +requests>=2.18.4 # Apache-2.0