This release contains bugfixes, a new component, minor public-facing API
changes, and significant changes to the deployed services, but no
inter-component API changes.
Breaking API changes:
- NeonVM: restart policy no longer applies directly to the pod (#293)
Features:
- Add patch for cluster-autoscaler compatability with VMs (#232)
- NeonVM: implement RestartPolicy (#293)
- NeonVM security and networking redesign (#245)
- Runner pod no longer has Privileged: true
- QEMU in the runner pod runs under its own user
- Adapted generic-device-plugin for NeonVM, to give access to /dev/kvm
and /dev/vhost-*
- Switch from neonvm-vxlan-ipam to Whereabouts CNI
-> Allows using overlay IP addresses in normal pods as well as VMs
- Reconcile cycles improved
- NeonVM/vm-builder: Add --enable-file-cache flag (default: off) (#265)
- NeonVM: user RBAC roles (#284):
- neonvm-virtualmachine-viewer-role
- neonvm-virtualmachine-editor-role
- neonvm-virtualmachinemigration-viewer-role
- neonvm-virtualmachinemigration-editor-role
- More logs for autoscaler-agent (#290, #291)
- More autoscaler-agent metrics:
- autoscaling_agent_runner_starts (#273)
- autoscaling_agent_runner_restarts (#273)
- autoscaling_agent_runner_fatal_errors_total (#274)
- autoscaling_errored_vm_runners_current (#274)
Fixes:
- NeonVM/vm-builder: Fix command passthrough (#263)
- NeonVM/vm-builder: Fix cgexec being ignored (#281)
- NeonVM/vm-builder: Build without cgo (#255)
- This removes the dependency on a dynamically loaded libc.
- informant: Fix cgroup memory.high throttling (#223)
- agent: Various logs fixes (#242, #267, #271, #272)
- agent: Restart panicked/errored runners (#273)
- agent/billing: Don't count VMs that aren't runnnig (#278)
- agent, sched: Add ports to pod spec for metrics (#282)
- agent, sched: Fix logging of MilliCPU (#261)
- sched: Don't output command help on error (#253)
- plugin: Handle completed pods as if deleted (#260)
No protocol changes.
Other changes:
- Many unused RBAC (and other) items removed:
- Namespace autoscaler-config (#245)
- ClusterRole vm-view (#284)
- ClusterRole vm-patcher (#284)
- ClusterRoleBinding kube-system/autoscaler-vm-view (#284)
- ClusterRoleBinding kube-system/autoscale-scheduler-as-vm-patcher (#284)
- Role kube-system/autoscale-scheduler-config-reader (#284)
- RoleBinding kube-system/autoscale-scheduler-config-reader (#284)
- NeonVM: Rename 'runner' container to 'neonvm-runner' (#277)
- agent: Network error metrics include root cause (#287)
Upgrade path from v0.7.2:
- No ordering requirements.
- You may wish to remove old items as mentioned above.