Skip to content

GitLab

  • Projects
  • Groups
  • Snippets
  • Help
    • Loading...
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
  • Sign in
O
openstack-magnum
  • Project overview
    • Project overview
    • Details
    • Activity
    • Releases
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 0
    • Issues 0
    • List
    • Boards
    • Labels
    • Service Desk
    • Milestones
    • Iterations
  • Jira
    • Jira
  • Merge Requests 2
    • Merge Requests 2
  • CI / CD
    • CI / CD
    • Pipelines
    • Jobs
    • Schedules
  • Operations
    • Operations
    • Incidents
    • Environments
  • Packages & Registries
    • Packages & Registries
    • Container Registry
  • Analytics
    • Analytics
    • CI / CD
    • Code Review
    • Repository
    • Value Stream
  • Wiki
    • Wiki
  • Members
    • Members
  • Collapse sidebar
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
  • cloud-infrastructure
  • openstack-magnum
  • Wiki
  • updates

Last edited by Ricardo Brito Da Rocha Jan 13, 2021
Page history

updates

Wed Jan 13 2020

  • New kubernetes template
    • kubernetes-1.19.6-1
      • New patch release for 1.19
      • Multiple fixes for the fluentd/central logging integration
  • Support for alternate helm stable repo charts location

Tue Dec 08 2020

  • New kubernetes template
    • kubernetes-1.19.3-3: use containerd instead of docker as runtime

Fri Nov 13 2020

  • Fixes for kubernetes 1.19: serviceType: LoadBalancer
  • Default helm chart stable updated for core cluster components
  • Increased nofiles on cluster nodes

Wed Oct 28 2020

  • New kubernetes templates
    • kubernetes-1.19.3-1
      • Fix for EOS helm install
      • Set coredns cache to 900 secs
      • Added scheduler policies with default bin pack
  • Fixes for nvidia GPU setup for kubernetes >=1.18
  • Dropped need for annotations for serviceType: LoadBalancer

Wed Jul 22 2020

  • New kubernetes templates
    • kubernetes-1.18.6-3
      • Fix cern_chart_version.

Thu Jul 16 2020

  • New kubernetes templates
    • kubernetes-1.18.6-1
      • security fixes, csi-cinder instead of in-tree cinder volume driver, monitoring and log collection bug fixes
    • kubernetes-1.17.9-1
      • security fixes, monitoring and log collection bug fixes

Mon Jun 08 2020

  • Allow --merge-labels on cluster creation (no longer needed to pass all labels)
  • New kubernetes-1.18.2-3 template
    • Updated nginx-ingress to v1.36.3
    • Improve affinity rules for CVMFS and CephFS provisioners

Wed May 06 2020

  • Server anti-affinity enabled on all new clusters
  • New kubernetes-1.18.2-2
    • Automated detection and configuration of GPU nodes
    • Automated configuration of EOS on all nodes
    • Fixes for logging and ingress
  • New kubernetes-1.18.2-2-multi
    • Support for multi master clusters

Tue April 21 2020

  • GA of serviceType: LoadBalancer, check details here
  • New kubernetes-1.17.5-1 template
    • Update to latest upstream release
    • Significant fixes for node stability (logging and networking)
      • Update of calico and coredns to latest released versions
  • New kubernetes-1.18.2-1 template
    • Check here for detailed release notes

Tue February 18 2020

  • New kubernetes-1.17.2-2 template
    • cern_tag updated to v0.5.0

Mon February 03 2020

  • Service upgraded to Train version - OTG
    • Node groups for heterogeneous clusters (nodes with different flavors, different AZs)
    • Automatic sync of kubernetes Ingress resources with landb
    • In-place kubernetes cluster upgrades (nodes and kubelet only) - experimental
  • New cluster template for kubernetes 1.17.2
    • Move to calico for cluster networking
    • Fedora Core as backend for kubernetes nodes

Thu November 14 2019

  • New kubernetes-1.15.3-3 template
    • Update csi-cephfsplugin image with a major bug fix (OOM)
  • New kubernetes-1.14.6-2 template
    • Update csi-cephfsplugin image with a major bug fix (OOM)

Thu October 03 2019

  • New kubernetes-1.15.3-2 template
    • Updated node image, based on Fedora 29
    • Updated openstack cloud controller manager to v1.15

Mon September 30 2019

  • DCOS Support phased out, template hidden OTG0051967

Wed September 25 2019

  • New kubernetes-1.15.3-1 template
    • Improvements around CRDs like Webhook Conversion, OpenAPI Publishing and Pruning
    • Improvement of CSI including functionality like resizing, inline volumes, and more. NOTE: Pods that run as privileged, their service account will need a RoleBinding with an appropriate PodSecurityPolicy. Read more here: https://v1-15.docs.kubernetes.io/docs/concepts/policy/pod-security-policy/#what-is-a-pod-security-policy

Tue August 27 2019

  • New kubernetes-1.13.10-1 template
    • patches for a set of recent vulnerabitilties: CVE-2019-9512, CVE-2019-9514, CVE-2019-11245
    • improved resilience of keytab/host certificate generation cern_enabled=true after user reports
  • New kubernetes-1.14.6-1 template
    • patches for the set of vulnerabilities above
    • improved resilience of keytab/host certificate generation cern_enabled=true after user reports
    • cephfs
      • support for CSI 1.0: check the cephfs docs for a change in the provisioner name
      • allow cephfs access for non-root users (fixes OS-8479)
      • updated fuse client for performance improvements (fixes OS-9416)
    • cvmfs updated to CSI 1.0: check the cvmfs docs for a change in the provisioner name

Mon July 15 2019

  • New kubernetes-1.13.3-3 template
    • default flavors for master and minions updated to m2.medium (was m2.small)
    • default image updated to qcow2 format (was raw)

Thu Jun 20 2019

  • List of public cluster templates deprecated (hidden, but can still be referenced)
    • swarm, swarm-alpha, swarm-1.13.1-1
    • kubernetes, kubernetes-alpha, kubernetes-1.12.3-1, kubernetes-1.13.3-1
    • dcso-preview
  • Container service (Magnum) upgraded to Stein, bringing
    • node problem detector
    • cluster auto healing (optional, off by default for now)
    • cluster auto scaling (optional, off by default for now)
    • monitoring with prometheus (optional, off by default for now)
    • support for the nginx ingress controller
    • helm v2 available with tiller (optional, future work ongoing for v3 tiller-less)

Fri Jun 14 2019

  • New kubernetes-1.13.3-2 template made available with Fedora Atomic 29 (kernel 4.19)

Tue May 28 2019

  • Keystone authentication available for Kubernetes clusters, documentation at:
    • http://clouddocs.web.cern.ch/clouddocs/containers/tutorials/kubernetes-keystone-authentication.html
  • Kubernetes 1.14.1 now available, please use template:
    • kubernetes-1.14.1-1

Fri Feb 08 2019

  • Added versioned template names, as discussed here
    • kubernetes-1.13.3-1
    • kubernetes-1.12.3-1
    • swarm-18.06-1
    • swarm-1.13.1-1
    • dcos-1.10-1
  • In all Kubernetes templates
    • Update all reclaimPolicy in default Storage Classes to Retain (was left as Kubernetes default Delete)

Fri Nov 30 2018

  • In all Kubernetes templates
    • Kubernetes CSI updated to 0.3.0
    • Added Manila Share Types (geneva-cephfs-testing, meyrin-cephfs) as Storage Classes by default

Mon Sep 24 2018

  • Kubernetes admission control list updated to:
--admission-control=NodeRestriction,NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorageClass,DefaultTolerationSeconds,MutatingAdmissionWebhook,ValidatingAdmissionWebhook,ResourceQuota

Mon Aug 27 2018

  • Kubernetes production templates updated
    • Version upgrade to v1.11.2
    • Auto provisioning of Manila shares (cephfs)
    • CVMFS volume provisioning using CSI (check here for details on new procedure)
    • Support for TLS in Ingress
    • Admin service account added by default

Fri Jul 20 2018

  • Auto provisioning of Manila shares (cephfs) for kubernetes (-preview)
    • https://clouddocs.web.cern.ch/clouddocs/containers/tutorials/cephfs.html#auto-provisioning
  • Centralized kubernetes log collection into Timber (-alpha)
    • https://clouddocs.web.cern.ch/clouddocs/containers/tutorials/logging.html
  • Upgraded kubernetes-preview and -alpha template to v1.11.1

Tue Jul 17 2018

  • Upgraded kubernetes production template to v1.10.3
  • Upgraded kubernetes-preview and -alpha template to v1.11.0
    • NOTE: If you're using your own custom templates and want to upgrade to v1.11.0, make sure you also add label cgroup_driver=cgroupfs

Fri Jul 13 2018

  • Upgraded kubernetes-preview and -alpha to v1.10.3

Thu Jun 21 2018

  • Use CSI driver for CVMFS repositories in kubernetes-preview http://clouddocs.web.cern.ch/clouddocs/containers/tutorials/cvmfs.html

Thu Jun 14 2018

  • Added support for TLS ingress on kubernetes
    • Docs updated: http://clouddocs.web.cern.ch/clouddocs/containers/tutorials/lb.html

Fri Jun 08 2018

  • Production Kubernetes set to 1.10.1
  • CephFS support based on the CSI driver enabled in kubernetes-preview and alpha
  • Docs updated here: http://clouddocs.web.cern.ch/clouddocs/containers/tutorials/cephfs.html
  • Admin service account added by default in kubernetes-preview and alpha

Wed Mar 07 2018

  • Service upgrades to the Queens release, bringing
  • Ability to specify availability zone on cluster creation
  • RBAC (role based authorization) functionality for Kubernetes
  • Authz enabled Kubernetes dashboard by default
  • Overriding of template parameters on cluster creation (flavors, labels, ...)
  • Support for Ingress on Kubernetes, based on Traefik
  • Support for the Kubernetes Certificate Manager API
  • Kubernetes production and preview templates upgraded to v1.9.3
  • All storage drivers changed to overlay2
  • Dropped previous prometheus/grafana based monitoring solution for Kubernetes (replaced with the upstream kubernetes dashboard)

Tue Dec 05 2017

  • Kubernetes preview template updated to v1.9.0
  • Kubernetes alpha template updated to v1.10.0alpha1

Tue Nov 21 2017

  • Kubernetes production template updated to v1.8.0

Thu Oct 26 2017

  • Docker version updated to 17.09 in both swarm-preview and swarm-alpha
  • Available cluster configuration parameters document in the quickstart

Tue Oct 03 2017

  • OpenStack clients on lxplus-cloud updated with new 'openstack coe' commands for container management
    • Includes krb5 support

Tue Sep 26 2017

  • Update cloud docker image (ciadm)
  • Docker 17.06
  • Docker Compose 1.16.1

Mon Sep 25 2017

  • Added cluster template kubernetes-alpha for early access to unreleased kubernetes versions
  • v1.8.0-beta.1 right now

Wed Sep 20 2017

  • Magnum updated to OpenStack Pike release
  • Kubernetes version updated to 1.7.6 in both production and -preview templates
  • Kubernetes dashboard available
  • default is disabled now, enable with label kube_dashboard_enabled=true in a custom template
  • WARN: no authentication available right now, do not use for production setups
  • Swarm COE name is now 'swarm-mode' (updated in all existing templates)
  • Host image updated to Fedora Atomic 26 for all templates
  • Cluster nodes have a new naming scheme
  • <cluster-name>-<short random string>-<master or node>-<index of node>
  • This imposes limits in the cluster name and does not allow _ (see here)

Thu Aug 14 2017

  • Add host kerberos keytab to all hosts in all templates

Thu Aug 03 2017

  • Allow specifying the cinder volume type (standard, io1) when using volumes for docker storage (docker-volume-size != 0)

Mon May 29 2017

  • Replaced kubernetes DNS setup with CoreDNS for improved scalability

Fri Apr 07 2017

  • Added Prometheus based monitoring and Grafana visualization to kubernetes templates - details

Thu Mar 23 2017

  • Docker Swarm templates now using swarm mode driver

Thu Mar 02 2017

  • Fix for proper IP setting in kubernetes certificates
  • Kubernetes templates updated to version 1.5.2

Wed Feb 15 2017

  • Updated docker storage configuration on all node to optimize space usage (on all templates)

Fri Feb 10 2017

  • Added support for DCOS in dcos-preview template - details

Mon Feb 06 2017

  • Service account enabled by default on both kubernetes and kubernetes-preview templates

Tue Jan 24 2017

  • Added lxplus-cloud with the latest openstack, docker and kubernetes clients - details
  • Docker updated to version 1.12 on -preview templates
  • Kubernetes updated to version 1.4.7 on -preview templates
  • Support for tags and hashes on CVMFS mounts - details
  • Default flavor changed on all templates to m2.medium

Tue Jan 10 2017

  • Upgrade to Fedora Atomic 25 as base node image
  • Docker updated to 1.12 on all -preview templates
  • Kubernetes updated to 1.4.7 on kubernetes-preview template

Fri 15 Jul 2016

  • Support for CVMFS extended to all clusters, enabled by default - more details

Tue 08 Jul 2016

  • Support for CVMFS on swarm clusters, enabled by default - more details
Clone repository
  • Container Service Planning
  • updates