Open Stack

We enthusiastically announce the release of:

magnum 8.2.0: Container Management project for OpenStack

This release is part of the stein stable release series.

The source is available from:

    https://opendev.org/openstack/magnum

Download the package from:

    https://tarballs.openstack.org/null/

Please report issues through:

    https://bugs.launchpad.net/magnum/+bugs

For more details, please see below.

8.2.0
^^^^^


New Features
************

* k8s_fedora_atomic_v1 Add PodSecurityPolicy for privileged pods.
  Use privileged PSP for calico and node-problem-detector. Add PSP for
  flannel from upstream.


Other Notes
***********

* The default value of flannel_backend will be replaced with *vxlan*
  which was *udp* based on the recommendation at https://github.com/c
  oreos/flannel/blob/master/Documentation/backends.md

Changes in magnum 8.1.0..8.2.0
------------------------------

4807e647 k8s_fedora: Move rp_filter=1 for calico up
c3323938 Set a fixed cipher suite set for Traefik
261b0eea Using vxlan as default value for flannel_backend
d13c2b7c k8s: stop introspecting instance name
6762a974 k8s_fedora_atomic: Add PodSecurityPolicy
49791feb k8s_fedora: Label master nodes with kubectl
0f5f950c Fix proportional autoscaler image
7d71a148 Using Fedora Atomic 29 as default image


Diffstat (except docs and test files)
-------------------------------------

devstack/lib/magnum                                |  13 ++-
devstack/plugin.sh                                 |   3 +-
.../kubernetes/fragments/calico-service.sh         | 116 ++++++++++++++++++++-
.../fragments/configure-kubernetes-master.sh       |  14 ++-
.../fragments/configure-kubernetes-minion.sh       |  13 +--
.../kubernetes/fragments/core-dns-service.sh       |   2 +-
.../kubernetes/fragments/enable-auto-healing.sh    |  17 +++
.../kubernetes/fragments/enable-ingress-traefik.sh |  39 +++++++
.../kubernetes/fragments/enable-services-master.sh |  11 +-
.../kubernetes/fragments/flannel-service.sh        |  82 ++++++++++++---
.../fragments/kube-apiserver-to-kubelet-role.sh    |  63 ++++++++++-
.../kubernetes/fragments/make-cert-client.sh       |   3 +-
.../templates/kubernetes/fragments/make-cert.sh    |   1 -
.../fragments/write-heat-params-master.yaml        |   1 +
.../kubernetes/fragments/write-heat-params.yaml    |   1 +
.../templates/fragments/enable-kubelet-master.yaml |   4 +-
.../templates/fragments/enable-kubelet-minion.yaml |   4 +-
.../templates/kubecluster.yaml                     |   6 +-
.../k8s_fedora_atomic_v1/templates/kubemaster.yaml |   1 +
.../k8s_fedora_atomic_v1/templates/kubeminion.yaml |   1 +
.../notes/podsecuritypolicy-2400063d73524e06.yaml  |   6 ++
...vxlan-for-flannel-backend-8d82a290ca97d6e2.yaml |   6 ++
23 files changed, 360 insertions(+), 51 deletions(-)