Commit Graph

71 Commits

Author SHA1 Message Date
Zuul 1211d7e2b5 Merge "reno: Update master for unmaintained/victoria" 2024-03-20 17:22:17 +00:00
Zuul df0b1fcac7 Merge "reno: Update master for unmaintained/wallaby" 2024-03-20 17:22:04 +00:00
OpenStack Release Bot 69c1a6af02 reno: Update master for unmaintained/xena
Update the xena release notes configuration to build from
unmaintained/xena.

Change-Id: I321e110f652ed7ad3d7f07ec679cbad7dcfc3ea6
2024-03-19 10:25:42 +00:00
OpenStack Release Bot 6924862e0c reno: Update master for unmaintained/wallaby
Update the wallaby release notes configuration to build from
unmaintained/wallaby.

Change-Id: Id4d9fd047ee07f97719eb3a6a8f0f0b33234e3ef
2024-03-19 10:25:03 +00:00
OpenStack Release Bot f7c6eb071f reno: Update master for unmaintained/victoria
Update the victoria release notes configuration to build from
unmaintained/victoria.

Change-Id: I3dd1a0cd2ebf2e5bee2e72d0702417c5d63d1062
2024-03-19 10:24:24 +00:00
OpenStack Release Bot d92cee17f0 Update master for stable/2024.1
Add file to the reno documentation build to show release notes for
stable/2024.1.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/2024.1.

Sem-Ver: feature
Change-Id: I800219473effc1cbd0d2c801a7d70abcc259aa2a
2024-03-15 14:39:46 +00:00
Takashi Kajinami fd1bacf738 Remove deprecated [pod_vif_nested] worker_nodes_subnet
This option was deprecated in 4.0.0[1] in favor of the new subnet"s"
option. The latest release is 9.0.0, so we can assume enough times has
been given to users so that they can switch to the new option.

[1] b3814a33d6

Change-Id: Ie86c019bbb560cca9b5a3a77319ed639a2245a2d
2024-02-28 18:25:54 +09:00
OpenStack Release Bot c85513970f reno: Update master for unmaintained/yoga
Update the yoga release notes configuration to build from
unmaintained/yoga.

Change-Id: If09ac6b0a50bccc8574056dff6dcb001a48637d7
2024-02-19 06:32:29 +00:00
OpenStack Release Bot 4f130a3018 Update master for stable/2023.2
Add file to the reno documentation build to show release notes for
stable/2023.2.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/2023.2.

Sem-Ver: feature
Change-Id: Iedde80a136f94cd740956f34b3efe14c9f6c303d
2023-09-15 14:06:57 +00:00
OpenStack Release Bot efd3e63b17 Update master for stable/2023.1
Add file to the reno documentation build to show release notes for
stable/2023.1.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/2023.1.

Sem-Ver: feature
Change-Id: I8577a0324694d23962fd5b6f3795929694f898b2
2023-03-02 11:31:51 +00:00
OpenStack Release Bot 3919c76ce1 Update master for stable/zed
Add file to the reno documentation build to show release notes for
stable/zed.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/zed.

Sem-Ver: feature
Change-Id: I26d76b9aa4fadfe3dbf806d8ffbcdae1375a4e8f
2022-09-16 15:17:16 +00:00
Michał Dulko 04d4439606 Remove SR-IOV support
This got decided at the PTG. The code is old, not maintained, not tested
and most likely doesn't work anymore. Moreover it gave us a hard
dependency on grpcio and protobuf, which is fairly problematic in Python
and gave us all sorts of headaches.

Change-Id: I0c8c91cdd3e1284e7a3c1e9fe04b4c0fbbde7e45
2022-06-29 12:49:37 +02:00
yangjianfeng 90088f3b0d Support specify project id by annotation
The implementation have some difference with the description of
blueprint. For more strict isolation, we only get project id from
namespace annotaion or configure option. The other resources's
project id inherit it's project or get from configiure option.

Implements: blueprint specify-project-by-annotation
Change-Id: Ia82cce6b211226599b4e1ca0d10416ed5e519ea2
2022-04-29 15:22:50 +08:00
OpenStack Release Bot 1c4a1a5ead Update master for stable/yoga
Add file to the reno documentation build to show release notes for
stable/yoga.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/yoga.

Sem-Ver: feature
Change-Id: I089e60c64c4a734749a84e2b106606575318fa50
2022-03-11 10:37:28 +00:00
OpenStack Release Bot 195c8e3abd Update master for stable/xena
Add file to the reno documentation build to show release notes for
stable/xena.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/xena.

Sem-Ver: feature
Change-Id: Ief61397c9323e3504de07051a2279afc116f023b
2021-09-15 02:34:15 +00:00
Roman Dobosz c034b0060e Use kubeadm for installing Kubernetes on devstack.
Till now, for installing kuryr-kubernetes and one of the crucial service
- kubernetes, there has been used manual method for installing it in
specified version. Over time it became a burden to follow requirements
and constraints, therefore decision has been made to use recommended way
of installing Kubernetes - kubeadm. In this patch devstack installation
of the kuryr-kubernetes and its dependences has been heavily reworked.

Other than that, OpenShift related functions has been removed, since
they were all outdated and non-working for the long time.

Change-Id: Ife21874c0a71ba07723094c0f880aabcf5825b77
2021-05-21 13:07:21 +02:00
Zuul e21d2f3d8b Merge "Add option to set listener timeouts for lb created by Kuryr" 2021-03-25 16:58:26 +00:00
OpenStack Release Bot 32e883ebfa Update master for stable/wallaby
Add file to the reno documentation build to show release notes for
stable/wallaby.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/wallaby.

Sem-Ver: feature
Change-Id: I09330e8b98e14599ee39c6e49e78682ef90710ca
2021-03-25 14:46:17 +00:00
Tabitha Fasoyin 87f6c66d31 Add option to set listener timeouts for lb created by Kuryr
The timeout-client-data and timeout-member-data configurations
for Octavia listeners default to 50 seconds for load balancers
created by Kuryr. This patch allows the creation and modification
of load balancers handled by Kuryr with different timeouts values.

Implements: blueprint configure-lb-listeners-timeout
Change-Id: I99016001c2263023d1fa2637d7b5aeb23b3b2d9d
2021-03-17 14:58:37 +00:00
Maysa Macedo 5a08f265d4 Include release notes for Service without selectors
Add a release not for services without selectors feature.

Change-Id: I0572e03ee039aa3b927b4b1c7dd4575f9535bab1
2021-03-10 14:43:06 -03:00
Michał Dulko b3814a33d6 Multiple nodes subnets support
This commit deprecates `[pod_vif_nested]worker_nodes_subnet` in favor of
`[pod_vif_nested]worker_nodes_subnets` that will accept a list instead.
All the code using the deprecated options is updated to expect a list
and iterate over possible nodes subnets.

Change-Id: I7671fb06863d58b58905bec43555d8f21626f640
2021-01-22 13:41:39 +01:00
Maysa Macedo 525dc1521d Ensure egress NP works with Service without selectors
This commit ensures egress Network policy can also work with
services without selectors.

Change-Id: I26e1dce0b6e363f027ee6d4dfea99053ffe80bbe
2020-11-16 14:15:47 +01:00
Maysa Macedo a80c79168c Add release note about update of mtu config value
This commit adds a release note announcing the update
of the mtu config value and the reason behind it.

Change-Id: Ieeea42a49e358f48f0d567d9450dc9b2dcc14173
2020-10-29 18:15:29 +00:00
OpenStack Release Bot 1f8da63a6f Update master for stable/victoria
Add file to the reno documentation build to show release notes for
stable/victoria.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/victoria.

Change-Id: Ic8a64b13dfc7387a379937ae32313949c6439c35
Sem-Ver: feature
2020-09-28 15:11:27 +00:00
Andreas Jaeger 110a8ba12d Switch to newer openstackdocstheme and reno versions
Switch to openstackdocstheme 2.2.1 and reno 3.1.0 versions. Using
these versions will allow especially:
* Linking from HTML to PDF document
* Allow parallel building of documents
* Fix some rendering problems

Update Sphinx version as well.

Change pygments_style to 'native' since old theme version always used
'native' and the theme now respects the setting and using 'sphinx' can
lead to some strange rendering.

Remove docs requirements from lower-constraints, they are not needed
during install or test but only for docs building.

openstackdocstheme renames some variables, so follow the renames
before the next release removes them. A couple of variables are also
not needed anymore, remove them.

See also
http://lists.openstack.org/pipermail/openstack-discuss/2020-May/014971.html

Change-Id: I4c358db3b0aae6370875c61120182443532c8e7b
2020-05-30 18:40:53 +02:00
Maysa Macedo 213483fd09 Remove lb sg creation when octavia provider is ovn-octavia
When deleting services and the respective load balancer
with using ovn-octavia provider, the lb sg is not deleted.
This commit fixes the issue by removing the LB sg creation
when the octavia provider is ovn-octavia, as that sg is not
really enforced.

Closes-bug: 1880207
Change-Id: I2c77b1d0ac682008ff6c31781d6075c208c689d0
2020-05-28 08:08:16 +00:00
OpenStack Release Bot 3ad10bb484 Update master for stable/ussuri
Add file to the reno documentation build to show release notes for
stable/ussuri.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/ussuri.

Change-Id: If662119ee01ef4f3ff11473919411eed75f0a778
Sem-Ver: feature
2020-04-23 15:26:49 +00:00
Danil Golov 8d162a3bd5 Remove excess physnet to device mapping
Since sriov binding driver uses pod resource
service and compute particular virtual function
which was returned by pod resource service, there
is no need to have physycal_device_mapping.

Also this commit fixes documentation and
adds release note regarding physical_device_mapping removal.

Change-Id: Ibf793b78727da40283b6221c6df0da969bf5e829
Signed-off-by: Danil Golov <d.golov@samsung.com>
2020-03-24 12:11:07 +03:00
ITD27M01 9cdd1c8112 Ensures accurate quota calculation during the readiness checks
Current deployments of OpenShift platform with Kuryr CNI
in real OpenStack installations (multi-projects environments)
are crashing because of kuryr-controller cannot come to
READY state.

This is due to inaccurate quota calculations in the readiness
process and an unscalable fetching of objects from Neutron API
to count and comparing with limits.

This commit ensures accurate quota calculation for installation
project during the readiness checks and removes the harsh
Neutron API calls. It will dramatically speedup readiness checks.

Change-Id: Ia5e90d6bd5a8d30d0596508abd541e1508dc23ec
Closes-Bug: 1864327
2020-02-25 16:58:02 +03:00
Michał Dulko d1a12bf27b Deprecate unmaintaned features
Support for OpenShift Routes (Ingress) is not maintained by anyone, not
really tested and there are better ways to do it, so let's remove that
code from Kuryr.

Support for namespace isolation was done to mimic one of the modes of
openshift-sdn. It doesn't seem to make any sense to keep supporting it
if Network Policy support can provide the same isolation.

Change-Id: I8cfb3c50f491a5dbbfe6fa20b81ee1d0f8c6b4a7
2020-02-01 16:18:02 +00:00
Luis Tomas Bolivar 0e581caa2d Add support to Octavia ACLs
Since Train, Octavia has a new API to restrict lbs access on
listeners. This is important when enforcing Network Policies
on services.

Before this patch, Kuryr required either admin priviledges to
change the security group rules associated to the loadbalancer,
or use the ovn-octavia loadbalancer that does not require those
rules as the source IP is not changed when passing through the
LoadBalancer VIP.

By adopting the new Octavia ACL API, there is no need for admin
priviledges to limit the access to the loadbalancers.

Implements: blueprint octavia-acls
Change-Id: I8f6bae00413aa181e9c2cac72c87bd93161796bc
2020-01-15 12:34:01 +01:00
Luis Tomas Bolivar 1e3ebc9783 Set defaults for certs and token on the k8s client
Change-Id: Id74eb4d8a7b1ea7ec97085de85f29244bbda25ea
2019-12-20 15:09:41 +01:00
Michał Dulko 7ed6e86744 Basic Python 3 compatibility fixes
This is result of running 2to3 without dict fix (as it seems
unnecessary for most of our cases).

In Python 3 {}.values() returns a view that is not indexable. This
commit uses list() on that to make AddHandler.should_callback compatible
with Python 3.

Change-Id: I354597f43d43630f9fb875dd8c9ab741c35af723
2019-11-22 09:19:14 +01:00
Michał Dulko 28b27c5de2 Remove Python 2 support
Ussuri release is the one in which we drop Python 2 support, as its EOL
is pretty close now. This commit does so in kuryr-kubernetes by
removing Python 2 unit test jobs, switching all tempest jobs to Python
3, removing specific jobs for Python 3 and updating Dockerfiles to
centos:8 that includes Python 3 from the box.

Also CentOS 7 job is removed from check queue as it seems it doesn't
play well with Python 3. A CentOS 8 job will get created soon.

Change-Id: Id9983d2fd83cef89e3198b2760816cf4a851008b
2019-11-19 12:34:54 +01:00
Roman Dobosz 80b5ecd41b Change inline hyperlinks to link-target pairs.
Inline, named hyperlinks seems to be fine, but often they just provides
noise to the paragrafs. In this patch we propose to use link-target
style for hyperlinks, where named link(s) is (are) placed in paragraph
while its target is at the bottom of the document.

Change-Id: Ia4f4c66f51ea193dc201b3dba5be2788f20765e0
2019-11-13 12:50:05 +01:00
Roman Dobosz c3c270c752 Fix text blocks formatting
There are the cases, where text blocks in restructuredtext files are
exceeding text 79 column, or are formatted in weeird way. In this patch
it is fixed. Also couple of typos were tided up.

Change-Id: I78c20cbb45c74e817d60582439acc7b01b577a83
2019-11-13 11:39:10 +01:00
Roman Dobosz e32d796ac7 Fix inconsistency in headlines format.
There are several restructuredtext files, which don't follow guide for
document contribution. Also made a rule for having additional line
between section body and folowing section headline.

Change-Id: I2dfe9aea36299e3986acb16b1805a4dc0cd952d2
2019-11-13 11:39:10 +01:00
OpenStack Release Bot 1f3cb1f52f Update master for stable/train
Add file to the reno documentation build to show release notes for
stable/train.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/train.

Change-Id: I535e44db70b583f58f80cbe533507dac177fdedf
Sem-Ver: feature
2019-09-15 19:07:12 +00:00
pengyuesheng 00470c03b6 Bump the openstackdocstheme extension to 1.20
Some options are now automatically configured by the version 1.20:
- project
- html_last_updated_fmt
- latex_engine
- latex_elements
- version
- release.

Change-Id: If6fb08ed3e47c6981b9dd6092d57adf7fa914066
2019-08-15 13:50:20 +08:00
Michał Dulko 3aa486d342 Add release note and docs about golang kuryr-cni
This is follow-up commit that adds documentation regarding golang
implementation of kuryr-cni.

Change-Id: I2a9488a59141016655e7a356722a1c012aa94aec
Implements: blueprint golang-kuryr-cni
2019-06-19 16:24:05 +02:00
Alexey Perevalov c8a87bf2fd Use non local port for CNI Daemon
This port 50036 can be already used in the system, due
to it's in range for egress ports.

Closes-Bug: 1829188

Change-Id: Ieee291893ca342867eb408d65402a8576327ac6d
Signed-off-by: Alexey Perevalov <a.perevalov@samsung.com>
2019-06-07 11:15:38 +02:00
OpenStack Release Bot 4a3b23d17b Update master for stable/stein
Add file to the reno documentation build to show release notes for
stable/stein.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/stein.

Change-Id: Id2e91402871abb54b2ae365ac95c26daa1610c53
Sem-Ver: feature
2019-03-27 18:38:44 +00:00
Michał Dulko bee4997f4e Add option to tag Octavia resources created by us
This patch extends If75028e17d13ec62fb414fa9797ee7ac02d948d1 with
Octavia resources tagging.

Change-Id: I0a2f89007994fbd7696b0f487affc1b7b643be74
Implements: blueprint kuryr-resources-tagging
2019-03-18 17:27:59 +01:00
Zuul 53fba9a478 Merge "Use same pool_driver for different pod_vif_drivers" 2019-02-06 01:04:48 +00:00
Michał Dulko 3e3ed9dbb3 Remove way of running without kuryr-daemon
Deploying without kuryr-daemon is deprecated since Rocky and we
announced that it will be removed in the Rocky release notes. This
commit removes all the code that allows that, updates the documentation,
DevStack plugin and gates definitions.

Implements: blueprint remove-non-daemon

Change-Id: I65598d4a6ecb5c3dfde04dc5fefd7b02fc72a0cb
2019-02-04 12:53:00 +01:00
Yash Gupta b0dfd35d76 Use same pool_driver for different pod_vif_drivers
New config option vif_pool_mapping is added and pools_vif_drivers is
deprecated. The newer vif_pool_mapping is simply inverted mapping of
pools_vif_drivers.
Also, with the scoping ability added in cb2d308f84, independent
drv_pool instances can be acquired from base driver manager.

Earlier as a single instance of drv_pool was used by all
pod_drivers. This meant only the pod_driver which was
passed to drv_pool.set_vif_driver finally was used (for a given
drv_pool).

Please see release notes for further details.

Related-Bug: 1747406
Change-Id: Id0137f6b1a78e7aa3e3d3de639a5e989f4fd408c
Signed-off-by: Yash Gupta <y.gupta@samsung.com>
2019-02-04 11:44:02 +03:00
Michał Dulko eecd44d335 cri-o support
This commit adds support for cri-o by changing the binary initially used
to run CNI plugin to runc and falling back to docker only in case it's
not available.

Also DevStack support for installing and configuring Kubernetes with
cri-o is added.

Implements: blueprint crio-support
Depends-On: Ib049d66058429e499f5d0932c4a749820bec73ff
Depends-On: Ic3c7d355a455298f43e37fb2aceddfd1e7eefaf2
Change-Id: I081edf0dbd4eb57826399c4820376381950080ed
2018-12-03 19:31:11 +01:00
Daniel Mellado aa5ec451f7 Rename kuryr-status to kuryr-k8s-status
As there's another kuryr-status binary in kuryr repo this creates issues
when creating packags out of the repo and could get confusing, therefore
I'm renaming this one.

Change-Id: I4b958d53c6530dd5099b3ac1dbcde4648055ff38
2018-11-20 15:28:57 +01:00
Michał Dulko 5358702c26 Add kuryr-status utility for upgrade-checkers
This commit adds kuryr-status utility that can be used to check if
upgrade is possible, convert annotations to new format and rollback
those changes if needed.

Implements: blueprint upgrade-checkers

Change-Id: I7a40a68518d7fbba18146b64befb6f585176ec8d
2018-10-03 15:09:53 +02:00
Michał Dulko 8a38f84dd7 Add non-containerized Python 3.6 gate
Patch also changes the way we run kuryr-controller in the DevStack
plugin by removing the scripts/run_server.py and using the Python
executable in the system directly.

Implements: blueprint goal-python36

Change-Id: I1e1c62023b6018bf49163be12fdca5b42d5f46d6
2018-09-17 14:57:53 +02:00