We enthusiastically announce the release of: magnum 8.2.0: Container Management project for OpenStack This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/magnum Download the package from: https://tarballs.openstack.org/null/ Please report issues through: https://bugs.launchpad.net/magnum/+bugs For more details, please see below. 8.2.0 ^^^^^ New Features ************ * k8s_fedora_atomic_v1 Add PodSecurityPolicy for privileged pods. Use privileged PSP for calico and node-problem-detector. Add PSP for flannel from upstream. Other Notes *********** * The default value of flannel_backend will be replaced with *vxlan* which was *udp* based on the recommendation at https://github.com/c oreos/flannel/blob/master/Documentation/backends.md Changes in magnum 8.1.0..8.2.0 ------------------------------ 4807e647 k8s_fedora: Move rp_filter=1 for calico up c3323938 Set a fixed cipher suite set for Traefik 261b0eea Using vxlan as default value for flannel_backend d13c2b7c k8s: stop introspecting instance name 6762a974 k8s_fedora_atomic: Add PodSecurityPolicy 49791feb k8s_fedora: Label master nodes with kubectl 0f5f950c Fix proportional autoscaler image 7d71a148 Using Fedora Atomic 29 as default image Diffstat (except docs and test files) ------------------------------------- devstack/lib/magnum | 13 ++- devstack/plugin.sh | 3 +- .../kubernetes/fragments/calico-service.sh | 116 ++++++++++++++++++++- .../fragments/configure-kubernetes-master.sh | 14 ++- .../fragments/configure-kubernetes-minion.sh | 13 +-- .../kubernetes/fragments/core-dns-service.sh | 2 +- .../kubernetes/fragments/enable-auto-healing.sh | 17 +++ .../kubernetes/fragments/enable-ingress-traefik.sh | 39 +++++++ .../kubernetes/fragments/enable-services-master.sh | 11 +- .../kubernetes/fragments/flannel-service.sh | 82 ++++++++++++--- .../fragments/kube-apiserver-to-kubelet-role.sh | 63 ++++++++++- .../kubernetes/fragments/make-cert-client.sh | 3 +- .../templates/kubernetes/fragments/make-cert.sh | 1 - .../fragments/write-heat-params-master.yaml | 1 + .../kubernetes/fragments/write-heat-params.yaml | 1 + .../templates/fragments/enable-kubelet-master.yaml | 4 +- .../templates/fragments/enable-kubelet-minion.yaml | 4 +- .../templates/kubecluster.yaml | 6 +- .../k8s_fedora_atomic_v1/templates/kubemaster.yaml | 1 + .../k8s_fedora_atomic_v1/templates/kubeminion.yaml | 1 + .../notes/podsecuritypolicy-2400063d73524e06.yaml | 6 ++ ...vxlan-for-flannel-backend-8d82a290ca97d6e2.yaml | 6 ++ 23 files changed, 360 insertions(+), 51 deletions(-)