We are satisfied to announce the release of: magnum 9.2.0: Container Management project for OpenStack This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/magnum Download the package from: https://tarballs.openstack.org/null/ Please report issues through: https://bugs.launchpad.net/magnum/+bugs For more details, please see below. 9.2.0 ^^^^^ New Features ************ * Added label heapster_enabled to control heapster installation in the cluster. * Installs the metrics-server service that is replacing kubernetes deprecated heapster as a cluster wide metrics reporting service used by schedulling, HPA and others. This service is installed and configured using helm and so tiller_enabled flag must be True. The label metrics_server_chart_tag can be used to specify the stable /metrics-server chart tag to be used. The label metrics_server_enabled is used to enable disable the installation of the metrics server (default: true). * Added custom.metrics.k8s.io API installer by means of stable /prometheus-adapter helm chart. The label prometheus_adapter_enabled (default: true) controls configuration. You can also use prometheus_adapter_chart_tag to select helm chart version, and prometheus_adapter_configmap if you would like to setup your own metrics (specifying this other than default overwrites default configurations). This feature requires the usage of label monitoring_enabled=true. Upgrade Notes ************* * nginx-ingress-controller QoS changed from Guaranteed to Burstable. Priority class 'system-cluster-critical' or higher for nginx- ingress-controller. Bug Fixes ********* * A regression issue about downloading images has been fixed. Now both Fedora Atomic driver and Fedora CoreOS driver can support using proxy in template to create cluster. * nginx-ingress-controller requests.memory increased to 256MiB. This is a result of tests that showed the pod getting oom killed by the node on a relatively generic use case. * k8s-keystone-auth now uses the upstream k8scloudprovider docker repo instead of the openstackmagnum repo. * Fixes the next url in the list nodegroups API response. * Bump up prometheus operator chart version to 8.2.2 so that it is compatible with k8s 1.16.x. * Bump up traefik to 1.7.19 for compatibility with Kubernetes 1.16.x. Changes in magnum 9.1.0..9.2.0 ------------------------------ 57479b18 Fix proxy issue for k8s fedora drivers 7ed86653 k8s_fedora: Bump up default kube_tag to v1.15.7 4810b861 [k8s] Enable services before starting them dda0adaf [k8s] Fix RBAC for OCCM v1.17.0 d5910a92 Fix entrypoint for k8s components in podman dba4ab71 [k8s] Remove indentation in /etc/sysconfig/heat-params 9deca03b [fix] Allow cluster OS upgrade without specifying kube_tag da2474e3 [k8s] Update metrics-server 1ab6abb1 Increase backoffLimit to 10 for helm installer 0cf32964 nodegroup list with --limit gives wrong next URL 7f40b9bb Bump up prometheus operator chart to 8.2.2 0d94ccb9 Fix nginx getting OOM killed 8a4bf2f9 Make traefik compatible with 1.16.x 18c45855 [k8s] Add heapster_enabled label 47a86d47 Add prometheus-adapter 9d6b9b49 Scrape prometheus metrics from nginx cdeb5631 bug: Only query Cinder API if volume size > 0 1c568721 Add nginx_ingress_controller_chart_tag 6a219eef [k8s] Fix rolling upgrade with podman 57e7eddb Change k8s-keystone-auth docker repo 717b7d10 bug: Use configured heat-container-agent tag afc1cced Support TimeoutStartSec for etcd and heat agent systemd services b4721c79 Fix cert_manager_api with x509keypair Diffstat (except docs and test files) ------------------------------------- magnum/api/controllers/v1/nodegroup.py | 8 +- .../kubernetes/fragments/configure-etcd.sh | 1 + .../fragments/configure-kubernetes-master.sh | 17 +- .../fragments/configure-kubernetes-minion.sh | 8 +- .../kubernetes/fragments/enable-ingress-traefik.sh | 4 + .../kubernetes/fragments/enable-keystone-auth.sh | 2 +- .../kubernetes/fragments/enable-services-master.sh | 9 +- .../kubernetes/fragments/enable-services-minion.sh | 9 +- .../kubernetes/fragments/install-helm-modules.sh | 13 +- .../fragments/kube-apiserver-to-kubelet-role.sh | 10 +- .../kubernetes/fragments/kube-dashboard-service.sh | 34 ++-- .../kubernetes/fragments/start-container-agent.sh | 6 +- .../kubernetes/fragments/upgrade-kubernetes.sh | 33 ++-- .../fragments/write-heat-params-master.sh | 211 +++++++++++---------- .../kubernetes/fragments/write-heat-params.sh | 3 + .../templates/kubernetes/helm/ingress-nginx.sh | 28 ++- .../templates/kubernetes/helm/metrics-server.sh | 35 +++- .../kubernetes/helm/prometheus-adapter.sh | 122 ++++++++++++ .../kubernetes/helm/prometheus-operator.sh | 6 +- magnum/drivers/heat/driver.py | 15 +- magnum/drivers/heat/k8s_fedora_template_def.py | 37 ++-- .../templates/kubecluster.yaml | 59 +++++- .../k8s_fedora_atomic_v1/templates/kubemaster.yaml | 38 ++++ .../k8s_fedora_atomic_v1/templates/kubeminion.yaml | 3 + .../templates/kubecluster.yaml | 59 +++++- .../k8s_fedora_coreos_v1/templates/kubemaster.yaml | 38 ++++ .../k8s_fedora_coreos_v1/templates/kubeminion.yaml | 3 + .../k8s_fedora_coreos_v1/templates/user_data.json | 4 +- .../unit/api/controllers/v1/test_nodegroup.py | 24 ++- .../handlers/test_k8s_cluster_conductor.py | 12 +- .../notes/fix-fedora-proxy-a4b8d5fc4ec65e80.yaml | 6 + ...-nginx-getting-oom-killed-76139fd8b57e6c15.yaml | 11 ++ .../heapster-enabled-label-292ca1ddac68a156.yaml | 5 + ...m-install-metrics-service-e7a5459417504a75.yaml | 10 + .../notes/keystone-auth-repo-6970c05f44299326.yaml | 5 + .../notes/nodegroup-limit-89930d45ee06c621.yaml | 4 + .../notes/prometheus-adapter-15fba9d739676e70.yaml | 10 + ...-compatible-with-k8s-1-16-f8be99cf527075b8.yaml | 5 + ...-compatible-with-k8s-1-16-9a9ef6d3ccc92fb4.yaml | 4 + 41 files changed, 769 insertions(+), 240 deletions(-)