Commit Graph

371 Commits

Author SHA1 Message Date
OpenStack Release Bot 735ececa51 Update master for stable/2024.1
Add file to the reno documentation build to show release notes for
stable/2024.1.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/2024.1.

Sem-Ver: feature
Change-Id: Ie52bc49730f040e8cd4a815ec5d0eab025add620
2024-03-12 17:23:24 +00:00
Zuul 9d6eae72cc Merge "Drop k8s_fedora_atomic_v1 driver" 2024-03-06 10:14:19 +00:00
Jakub Darmach e3aaa89376 Removing Tiller support
Removed Tiller support from Helm modules install kubernetes fragment.

Change-Id: I81db0055ae82c64218498ae3e2a4fcc802f8d0e4
2024-02-29 14:41:29 +00:00
Jake Yip a41c884463 Update cloud-provider-openstack registry
cloud-provider-openstack has changed their image repo. To use the
plugins matching later versions of k8s, this needs to be updated.

Also update tags for CI test to match version being tested.

[1] https://github.com/kubernetes/cloud-provider-openstack/pull/2169

Change-Id: I9390db5e1aa357c17a39a7c208d837befafd3820
2024-02-28 18:57:55 +11:00
Michal Nasiadka ed699b0c9a Drop k8s_fedora_atomic_v1 driver
Change-Id: I3551ae244ecf99f67a9b142c964c020a5fae70a3
2024-02-27 16:35:35 +00:00
Jakub Darmach fde7f8e73a Removing legacy calico v3.3
Removed legacy Calico v3.3 manifest and conditional.
 -

Change-Id: Ica52a670452e65c5ae012012895080c9c8d9abf7
2024-02-27 07:15:21 +00:00
Jake Yip 8a30ad3462 Add feature to specify driver explicitly
Allow ClusterTemplate to explicitly specify a driver to use for creating
Clusters.

This is initially sourced from the image property 'magnum_driver', but
may be improved to be specified via client in the future.

Falls back to old driver discovery using (coe, server_type, os) tuple to
keep existing behaviour.

Change-Id: I9e206b589951a02360d3cef0282a9538236ef53b
2024-02-26 14:50:18 +11:00
Zuul c2567f202a Merge "Drop k8s_fedora_ironic_v1 driver" 2024-02-21 23:52:53 +00:00
Zuul 007c0cd73d Merge "Drop k8s_coreos_v1 driver" 2024-02-21 23:50:02 +00:00
OpenStack Release Bot 0c82bb57a1 reno: Update master for unmaintained/yoga
Update the yoga release notes configuration to build from
unmaintained/yoga.

Change-Id: Iade07aaf251fd1b561ed3e18539f2aea3223c3d0
2024-02-20 11:01:55 +00:00
okozachenko1203 9c31886a80 add cilium in the supported network driver list of k8s
Change-Id: I67d879e4939d92c88641cb97ee2284afbf7359fe
2024-02-09 07:04:17 +01:00
Michal Nasiadka fa5aa8f625 Drop k8s_fedora_ironic_v1 driver
Change-Id: Ic7114e5923b74a4202a043388701826b4e47326e
2024-02-05 08:14:56 +00:00
Michal Nasiadka 5c0c27807a Drop k8s_coreos_v1 driver
Change-Id: I64884677cf05c59c64988dfbee9bf22e97a3466b
2024-02-05 07:04:05 +00:00
Michal Nasiadka bc79012f46 Drop Swarm support
Label validator function has been left behind, although it's not
checking for anything right now - might be useful in future.

Change-Id: I74c744dc957d73aef7556aff00837611dadbada7
2024-01-24 13:20:21 +13:00
Dale Smith 2fd3059f38 Remove support for in-place upgrades with the Heat driver.
Heat stack SoftwareConfig is unable to provide a reliable upgrade
experience, so is being disabled. More details in code comments.

A Cluster API driver provides a way forward for Magnum to support
these again, and implement upgrade_cluster.

Change-Id: Ibea354ebfe36e8d689a95c30820709ec2b633964
2023-12-20 21:54:44 +13:00
ricolin a48df816cb Enable secure rbac
This setting policies (RBAC) new defaults and scope to ``True`` by default.
Note: This should only merged, after at least a cycle gap to allow
operators to adopt new changes.

Depends-On: https://review.opendev.org/c/openstack/magnum-tempest-plugin/+/877086

Change-Id: I6db4eaa64e2efd455dc3d37ccc74ebd8e7a5dbb2
2023-10-26 13:20:40 +08:00
Michal Nasiadka 58a6bb69a4 docs: Change Storyboard links to Launchpad
Change-Id: I84d5a3b516f3e46b82e4a87b00013c5c942b96e8
2023-10-03 14:17:45 +02:00
OpenStack Proposal Bot ce3003a4ab Imported Translations from Zanata
For more information about this automatic import see:
https://docs.openstack.org/i18n/latest/reviewing-translation-import.html

Change-Id: I5cae7742a3705eb4d2b1b44e21f20d2aba2fac1b
2023-09-19 02:23:31 +00:00
OpenStack Release Bot 544f59bb3f Update master for stable/2023.2
Add file to the reno documentation build to show release notes for
stable/2023.2.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/2023.2.

Sem-Ver: feature
Change-Id: Icf2e3fa1363ac0cddb05ad18d58dd2d2c6f82829
2023-09-15 14:16:22 +00:00
Jake Yip 098d78a023 Deprecate CoreOS (not Fedora CoreOS) support
Deprecate CoreOS (not to be confused with Fedora CoreOS) as announced in
the mailing list [1].

CoreOS has been EOL since 2020.

[1] https://lists.openstack.org/pipermail/openstack-discuss/2023-February/032371.html
[2] https://www.redhat.com/en/technologies/cloud-computing/openshift/what-was-coreos

Change-Id: Ifb5513ae91a3b2d7531a747e10ca08c14d62482d
2023-09-11 10:41:02 +10:00
Zuul 327861ac43 Merge "Remove unused policy rule for Certificate APIs" 2023-09-04 14:41:04 +00:00
Zuul 2b0a7f684c Merge "Allow Admin to perform all API requests" 2023-09-01 16:39:55 +00:00
Zuul 06e7368517 Merge "Support enables rbac policies new defaults" 2023-09-01 16:39:53 +00:00
ricolin 0ff50c542e Remove unused policy rule for Certificate APIs
Cluster user is no longer used for drivers in Magnum since [1].
Remove unused policy rule to reflect that fix.

[1] https://review.opendev.org/c/openstack/magnum/+/889144

Change-Id: Ic7ef89a61835a7045d81dbf5af77714a3270cd7c
2023-08-30 00:38:27 +08:00
ricolin 74897768e3 Allow Admin to perform all API requests
This propose changes is base on same concerns as this bug in neutron
https://bugs.launchpad.net/neutron/+bug/1997089

This propose to keep and make sure ADMIN can perform all API requests.

Change-Id: I9a3003963bf13a591cc363fa04ec8e5719ae9114
2023-08-30 00:35:35 +08:00
ricolin 5971243169 Support enables rbac policies new defaults
The Magnum service allow enables policies (RBAC) new defaults and scope by
default. The Default value of config options ``[oslo_policy] enforce_scope``
and ``[oslo_policy] oslo_policy.enforce_new_defaults`` are both to
``False``, but will change to ``True`` in following cycles.

To enable them then modify the below config options value in
``magnum.conf`` file::

  [oslo_policy]
  enforce_new_defaults=True
  enforce_scope=True

reference tc goal for more detail:
https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html

Related blueprint secure-rbac

Change-Id: I249942a355577c4f1ef51b3988f0cc4979959d0b
2023-08-30 00:35:24 +08:00
ricolin 4bca51b72e Add releasenote for Trust token scope fix
Change-Id: I78963daae55c11f1d4154c49e102e910fbcdef5e
2023-08-28 17:40:32 +10:00
Zuul f241d15f93 Merge "Deprecate k8s fedora ironic driver" 2023-08-21 02:11:51 +00:00
Zuul 392120ab13 Merge "Remove PodSecurityPolicy" 2023-05-10 13:56:04 +00:00
Jake Yip 05d9dd5cd1 Deprecate k8s fedora ironic driver
Deprecate k8s fedora ironic driver as announced in the mailing list [1].

[1] https://lists.openstack.org/pipermail/openstack-discuss/2023-February/032371.html

Change-Id: Ifaae1a953b44d159aa249313d833cf7253d031a0
2023-05-10 19:58:01 +10:00
OpenStack Proposal Bot e2626f5e34 Imported Translations from Zanata
For more information about this automatic import see:
https://docs.openstack.org/i18n/latest/reviewing-translation-import.html

Change-Id: Ida3a7688ace166287854ad3b954b16f4bdc18945
2023-05-09 02:11:32 +00:00
Jake Yip 71ede8257c Deprecate Docker Swarm COE
Deprecate docker swarm as announced in the mailing list [1].

Docker Swarm relies on Fedora Atomic OS which is EOL and is being
deprecated too.

[1] https://lists.openstack.org/pipermail/openstack-discuss/2023-February/032371.html

Change-Id: I0e94c81cbba9c3d289e164f7405fcac5244f4e44
2023-05-05 09:55:24 +10:00
OpenStack Proposal Bot afdb7cd3bf Imported Translations from Zanata
For more information about this automatic import see:
https://docs.openstack.org/i18n/latest/reviewing-translation-import.html

Change-Id: Ic69249420d341488dd1976daafb5d86527537c86
2023-04-27 03:34:22 +00:00
Jake Yip 1b1c2122f0 Remove PodSecurityPolicy
PodSecurityPolicy has been removed in Kubernetes v1.25 [1]. To allow Magnum
to support Kubernetes v1.25 and above, PodSecurityPolicy Admission
Controller has has been removed.

[1] https://kubernetes.io/docs/concepts/security/pod-security-policy/

Change-Id: I0fb0c372b484275b0677114193289469ee788b84
2023-04-26 20:33:44 +10:00
OpenStack Release Bot e4a4481485 Update master for stable/2023.1
Add file to the reno documentation build to show release notes for
stable/2023.1.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/2023.1.

Sem-Ver: feature
Change-Id: I41b10eb5fd865b0cce1b98193dd48ee382ec78d5
2023-03-08 13:13:18 +00:00
guilhermesteinmuller 6e8657912c Drop Mesos code
The coe mesos has not been maintained for quite some
time and hasn't got much attention from the community
in general. As discussed in the mailing list [1] we
are dropping for now.

[1] http://lists.openstack.org/pipermail/openstack-discuss/2021-December/026230.html

Co-Authored-By: jake.yip@ardc.edu.au

Change-Id: Ie7de9a37bfad6214f52d0605409e74d62a51df47
2023-03-07 14:02:05 +11:00
Jake Yip fdfb8d4b79 Deprecated fedora_atomic driver
Log a warning about fedora-atomic driver deprecation this cycle, so that
users can start migrating to using fedora-coreos.

fedora-atomic driver will be removed in a future cycle.

Change-Id: I026d4fa722cd132e5989998bf902b8a2c73c5a8d
2023-03-01 08:32:57 +00:00
Jake Yip 6cdb367cfc Remove send_cluster_metrics
This period job has been deprecated since Change
I3ca0f2e96fe63870406cc5323f08fa018ac6e8be in Rocky/Stein.

As it defaults to disabled, it causes logs like the following to be sent
over and over again.

 Running periodic task MagnumPeriodicTasks._send_cluster_metrics
 Skip sending cluster metrics _send_cluster_metrics

Remove the code totally as it has basically been a noop for a few
cycles.

Change-Id: Ib9142ab17d562b1d7ccf1409a9e0d934585a094d
2023-02-27 02:39:13 +00:00
guilhermesteinmuller d3d28594b3 Drop mesos driver
The coe mesos has not been maitenaned for quite some
time and hasn't got much attetion from the community
in general. As discussed in the mailing list [1] we
are dropping for now.

In this patch, we start by removing the mesos driver
and its test cases. This part of the code has no impact
for other drivers. Then we can clean up mesos references
that affect the API.

[1] http://lists.openstack.org/pipermail/openstack-discuss/2021-December/026230.html

Conflicts:
	lower-constraints.txt
	tox.ini

Change-Id: Ied76095f1f1c57c6af93d1a6094baa6c7cc31c9b
2022-11-11 23:01:43 +11:00
Zuul b6dd18d51a Merge "remove unicode literal from code" 2022-11-09 11:35:43 +00:00
OpenStack Proposal Bot c762071385 Imported Translations from Zanata
For more information about this automatic import see:
https://docs.openstack.org/i18n/latest/reviewing-translation-import.html

Change-Id: I459b421b3e9f20e2d55fc8b0c19091583bc8515f
2022-11-05 02:46:17 +00:00
Zuul 0748588e79 Merge "Support K8s 1.24+" 2022-09-26 17:11:03 +00:00
LeopardMa 64e8d5f599 Update python testing as per zed cycle teting runtime
In Zed cycle, we have dropped the python 3.6/3.7[1] testing
and its support. Removing the py36 centos8 job as well as
updating the python classifier also to reflect the same.

[1] https://governance.openstack.org/tc/reference/runtimes/zed.html

Change-Id: Ife222160c3ad40668a90450226fd45ba37d4ec51
2022-09-26 14:09:35 +00:00
OpenStack Release Bot b21da65dce Update master for stable/zed
Add file to the reno documentation build to show release notes for
stable/zed.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/zed.

Sem-Ver: feature
Change-Id: I27ac9995b6907ca9ef7a5887730b7bc819c761ca
2022-09-16 15:11:15 +00:00
OpenStack Proposal Bot fe0d9fc353 Imported Translations from Zanata
For more information about this automatic import see:
https://docs.openstack.org/i18n/latest/reviewing-translation-import.html

Change-Id: I6c1cf7c3a9742722569122808589b8f61d76c2ae
2022-09-06 02:33:31 +00:00
niuke 6bc060ee06 remove unicode literal from code
Change-Id: I8d43a5864b5deb37be6c850115aa7edfe8ae9d30
2022-08-06 20:54:06 +08:00
Daniel Meyerholt f7cd2928d6 Support K8s 1.24+
Only specify dockershim options when container runtime is not containerd.
Those options were ignored in the past when using containerd but since 1.24
kubelet refuses to start.

Task: 45282
Story: 2010028

Signed-off-by: Daniel Meyerholt <dxm523@gmail.com>
Change-Id: Ib44cc30285c8bd4219d4a45dc956696505ddd570
2022-05-28 13:32:51 +02:00
Michal Nasiadka 5af49aa2fa Add support for choosing Octavia provider
Story: 2008805

Add support for:
* choosing Octavia provider
* setting octavia_lb_algorithm
* disabling Octavia healthcheck

Change-Id: I2d424fc2e2f8967e4b3007faedbc089f37126968
2022-05-03 09:32:24 +00:00
OpenStack Release Bot 9d454a63b3 Update master for stable/yoga
Add file to the reno documentation build to show release notes for
stable/yoga.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/yoga.

Sem-Ver: feature
Change-Id: I7f2ff18f1ac1d542e896f4768bcc2e70d447b355
2022-03-18 22:26:33 +00:00
Zuul 4c4bba1333 Merge "Upgrade chart source and version" 2022-03-03 14:13:41 +00:00