v0.8.0 This release contains bugfixes, a new component, minor public-facing API changes, and significant changes to the deployed services, but no inter-component API changes. Breaking API changes: - NeonVM: restart policy no longer applies directly to the pod (#293) Features: - Add patch for cluster-autoscaler compatability with VMs (#232) - NeonVM: implement RestartPolicy (#293) - NeonVM security and networking redesign (#245) - Runner pod no longer has Privileged: true - QEMU in the runner pod runs under its own user - Adapted generic-device-plugin for NeonVM, to give access to /dev/kvm and /dev/vhost-* - Switch from neonvm-vxlan-ipam to Whereabouts CNI -> Allows using overlay IP addresses in normal pods as well as VMs - Reconcile cycles improved - NeonVM/vm-builder: Add --enable-file-cache flag (default: off) (#265) - NeonVM: user RBAC roles (#284): - neonvm-virtualmachine-viewer-role - neonvm-virtualmachine-editor-role - neonvm-virtualmachinemigration-viewer-role - neonvm-virtualmachinemigration-editor-role - More logs for autoscaler-agent (#290, #291) - More autoscaler-agent metrics: - autoscaling_agent_runner_starts (#273) - autoscaling_agent_runner_restarts (#273) - autoscaling_agent_runner_fatal_errors_total (#274) - autoscaling_errored_vm_runners_current (#274) Fixes: - NeonVM/vm-builder: Fix command passthrough (#263) - NeonVM/vm-builder: Fix cgexec being ignored (#281) - NeonVM/vm-builder: Build without cgo (#255) - This removes the dependency on a dynamically loaded libc. - informant: Fix cgroup memory.high throttling (#223) - agent: Various logs fixes (#242, #267, #271, #272) - agent: Restart panicked/errored runners (#273) - agent/billing: Don't count VMs that aren't runnnig (#278) - agent, sched: Add ports to pod spec for metrics (#282) - agent, sched: Fix logging of MilliCPU (#261) - sched: Don't output command help on error (#253) - plugin: Handle completed pods as if deleted (#260) No protocol changes. Other changes: - Many unused RBAC (and other) items removed: - Namespace autoscaler-config (#245) - ClusterRole vm-view (#284) - ClusterRole vm-patcher (#284) - ClusterRoleBinding kube-system/autoscaler-vm-view (#284) - ClusterRoleBinding kube-system/autoscale-scheduler-as-vm-patcher (#284) - Role kube-system/autoscale-scheduler-config-reader (#284) - RoleBinding kube-system/autoscale-scheduler-config-reader (#284) - NeonVM: Rename 'runner' container to 'neonvm-runner' (#277) - agent: Network error metrics include root cause (#287) Upgrade path from v0.7.2: - No ordering requirements. - You may wish to remove old items as mentioned above.