Open Stack

We are satisfied to announce the release of:

magnum 11.1.0: Container Management project for OpenStack

This release is part of the victoria stable release series.

The source is available from:

    https://opendev.org/openstack/magnum

Download the package from:

    https://tarballs.openstack.org/magnum/

Please report issues through:

    https://bugs.launchpad.net/magnum/+bugs

For more details, please see below.

11.1.0
^^^^^^


Upgrade Notes
*************

* Now the default admission controller list is updated by as
  "NodeRestriction, PodSecurityPolicy, NamespaceLifecycle,
  LimitRanger, ServiceAccount, ResourceQuota, TaintNodesByCondition,
  Priority, DefaultTolerationSeconds, DefaultStorageClass,
  StorageObjectInUseProtection, PersistentVolumeClaimResize,
  MutatingAdmissionWebhook, ValidatingAdmissionWebhook, RuntimeClass"

* The default containerd version is updated with 1.4.3.


Bug Fixes
*********

* Fixes a regression which left behind trustee user accounts and
  certificates when a cluster is deleted.

* Fixes database migrations with SQLAlchemy 1.3.20.

* Fixes an issue with cluster deletion if load balancers do not
  exist. See *story 2008548
  <https://storyboard.openstack.org/#!/story/2008548>* for details.

Changes in magnum 11.0.0..11.1.0
--------------------------------

0047a647 Download correct cri-containerd-cni tarball
ade228f5 [K8S] Enable --use-service-account-credentials
c35d4e25 Fix debug logging during cluster upgrade
79791a4b [hca] Use victoria-stable-1 as default for stable/victoria
7f5c6354 Make kubelet and kube-proxy use the secure port
aed84462 Fix misquoted comment
3360b8d8 [k8s] Fix default admission controller
90f89276 Update containerd version and tarball URL
7f46d690 k8s: Do not use insecure api port
4b134688 k8s-fcos: Source bashrc for clusterconfig
2f623e2d Re-use transport for rpc server
c6782e63 Add image prefix for grafana images
b4a5008a Fix validation for master_lb_enabled
210984fa Do not create constraints for boolean fields
bcf65b73 Fix Cinder CSI
111c6f57 Update helm charts origin repository
8e4daeba [k8s-fcos] Fix insecure registry
c6640478 Use kube_master_ip for monitoring when no floating ip is used
7bda74fd Re-use transport for rpc calls
9621d8e4 Fix cluster deletion when load balancers don't exist
97c6bdad Drop lower constraints testing
a3b43bca Drop dockerhub password from stable/victoria
3ced2fa8 [fix] Sync nodegroup status before delete_complete
d79fb45b Remove cloud-config from k8s worker node
c73afa8a Update default values for docker nofile and vm.max_map_count
039fc599 Update TOX_CONSTRAINTS_FILE for stable/victoria
e9b5c32e Update .gitreview for stable/victoria


Diffstat (except docs and test files)
-------------------------------------

.gitreview                                         |  1 +
.zuul.yaml                                         | 27 --------
magnum/api/attr_validator.py                       |  2 +-
magnum/common/octavia.py                           |  2 +
magnum/common/rpc.py                               | 10 ---
magnum/common/rpc_service.py                       | 22 ++-----
magnum/conductor/api.py                            |  5 +-
.../1d045384b966_add_insecure_baymodel_attr.py     |  9 ++-
...304554e2_adding_magnum_service_functionality.py |  8 ++-
...3c9c6191_add_public_column_to_baymodel_table.py |  4 +-
...98132c7_change_cluster_to_support_nodegroups.py |  2 +-
...380964133d_add_network_subnet_fip_to_cluster.py |  2 +-
.../versions/4e263f236334_add_registry_enabled.py  |  2 +-
.../versions/5ad410481b88_rename_insecure.py       |  2 +-
...d_master_lb_enabled_column_to_baymodel_table.py |  4 +-
.../87e62e3c7abc_add_hidden_to_cluster_template.py |  6 +-
...5096e2334ee_add_master_lb_enabled_to_cluster.py |  4 +-
.../versions/ac92cbae311c_add_nodegoup_table.py    |  4 +-
...612248cab_add_floating_ip_enabled_column_to_.py |  2 +-
...onfigure_docker_storage_driver_fedora_coreos.sh |  3 +
.../kubernetes/fragments/calico-service-v3-3-x.sh  |  2 +-
.../kubernetes/fragments/calico-service.sh         |  6 +-
.../fragments/configure-kubernetes-master.sh       | 74 ++++++++++------------
.../fragments/configure-kubernetes-minion.sh       | 11 ++--
.../kubernetes/fragments/core-dns-service.sh       |  2 +-
.../kubernetes/fragments/enable-auto-healing.sh    |  2 +-
.../kubernetes/fragments/enable-auto-scaling.sh    |  2 +-
.../kubernetes/fragments/enable-cinder-csi.sh      | 11 +++-
.../kubernetes/fragments/enable-helm-tiller.sh     |  2 +-
.../kubernetes/fragments/enable-ingress-octavia.sh |  2 +-
.../kubernetes/fragments/enable-ingress-traefik.sh |  2 +-
.../kubernetes/fragments/enable-keystone-auth.sh   |  2 +-
.../fragments/enable-prometheus-monitoring.sh      |  2 +-
.../kubernetes/fragments/enable-services-master.sh |  2 +-
.../kubernetes/fragments/flannel-service.sh        |  2 +-
.../kubernetes/fragments/install-clients.sh        |  3 +-
.../templates/kubernetes/fragments/install-cri.sh  |  4 +-
.../kubernetes/fragments/install-helm-modules.sh   |  2 +-
.../fragments/kube-apiserver-to-kubelet-role.sh    |  2 +-
.../kubernetes/fragments/kube-dashboard-service.sh |  2 +-
.../kubernetes/fragments/wc-notify-master.sh       |  2 +-
.../kubernetes/fragments/write-kube-os-config.sh   |  1 -
.../templates/kubernetes/helm/ingress-nginx.sh     |  2 +-
.../templates/kubernetes/helm/metrics-server.sh    |  2 +-
.../kubernetes/helm/prometheus-adapter.sh          |  2 +-
.../kubernetes/helm/prometheus-operator.sh         |  7 +-
magnum/drivers/heat/driver.py                      | 22 ++++---
.../templates/kubecluster.yaml                     |  8 +--
.../k8s_fedora_atomic_v1/templates/kubemaster.yaml |  1 +
.../templates/fcct-config.yaml                     | 22 +++++--
.../templates/kubecluster.yaml                     | 13 ++--
.../k8s_fedora_coreos_v1/templates/kubemaster.yaml |  9 +++
.../k8s_fedora_coreos_v1/templates/kubeminion.yaml |  9 ++-
.../k8s_fedora_coreos_v1/templates/user_data.json  | 45 +++++++------
...ault-admission-controller-04398548cf63597c.yaml |  5 ++
.../ensure-delete-complete-2f9bb53616e1e02b.yaml   |  5 ++
.../notes/migrations-1.3.20-60e5f990422f2ca5.yaml  |  4 ++
.../notes/story-2008548-65a571ad15451937.yaml      |  6 ++
...te-containerd-version-url-c095c0ee3c1a538b.yaml |  4 ++
tox.ini                                            |  2 +-
66 files changed, 276 insertions(+), 246 deletions(-)