Update version to v2.3.0-rc2. Update changelog

CHANGELOG.md

@@ -1,6 +1,34 @@
 # Changelog
 
+## 2.3.0-rc2 (2019-04-21)
+
+### Changes since 2.3.0-rc1
++ Support parameter substitution in the volumes attribute (#1238)
+- Fix regression where argoexec wait would not return when podname was too long
+- wait will conditionally become privileged if main/sidecar privileged (issue #1323)
+- `argo list` was not displaying non-zero priorities correctly
+- Pod creation with secret volumemount (#1318)
+- Export the methods of `KubernetesClientInterface` (#1294)
+
+
 ## 2.3.0-rc1 (2019-04-10)
+
+### Notes about upgrading from v2.2
+
+* Secrets are passed to the wait sidecar using volumeMounts instead of performing K8s API calls
+ performed by the. This is much more secure since it limits the privileges of the workflow pod
+ to no longer require namespace level secret access. However, as a consequence, workflow pods which
+ reference a secret that does not exist, will now indefinitely stay in a Pending state, as opposed
+ to the previous behavior of failing during runtime.
+
+
+### Deprecation Notice
+The workflow-controller-configmap introduces a new config field, `executor`, which is a container 
+spec and provides controls over the executor sidecar container (i.e. `init`/`wait`). The fields
+`executorImage`, `executorResources`, and `executorImagePullPolicy` are deprecated and will be
+removed in a future release.
+
+### New Features:
 + Support for PNS (Process Namespace Sharing) executor (#1214)
 + Support for K8s API based Executor (#1010) (@dtaniwaki)
 + Adds limited support for Kubelet/K8s API artifact collection by mirroring volume mounts to wait sidecar
@@ -26,6 +54,7 @@
 + Secrets should be passed to pods using volumes instead of API calls (#1302)
 + Azure AKS authentication issues #1079 (@gerardaus)
 
+### New Features:
 * Update dependencies to K8s v1.12 and client-go 9.0
 * Add namespace explicitly to pod metadata (#1059) (@dvavili)
 * Raise not implemented error when artifact saving is unsupported (#1062) (@dtaniwaki)
@@ -36,6 +65,7 @@
 * Git cloning via SSH was not verifying host public key (#1261)
 * Speed up podReconciliation using parallel goroutine (#1286) (@xianlubird)
 
+
 - Initialize child node before marking phase. Fixes panic on invalid `When` (#1075) (@jmcarp)
 - Submodules are dirty after checkout -- need to update (#1052) (@andreimc)
 - Fix output artifact and parameter conflict (#1125) (@Ark-kun)
@@ -59,12 +89,6 @@
 - Fix for Resource creation where template has same parameter templating (#1283)
 - Fixes an issue where daemon steps were not getting terminated properly
 
-### Deprecation Notice
-The workflow-controller-configmap introduces a new config field, `executor`, which is a container 
-spec and provides controls over the executor sidecar container (i.e. `init`/`wait`). The fields
-`executorImage`, `executorResources`, and `executorImagePullPolicy` are deprecated and will be
-removed in a future release.
-
 ## 2.2.1 (2018-10-18)
 
 ### Changelog since v2.2.0

ROADMAP.md

@@ -1,19 +1,12 @@
 # Roadmap
 
-## v2.3
-* Priority - ability to set a priority per workflow
-* Queuing - ability to limit number of concurrent workflows
-* PNS (Proccess Namespace Sharing) Executor
-
 ## v2.4
 * Persistence - support offloading of workflow state into database layer
 * Large workflow support (enabled by persistence feature)
-* Argo API server (integration with argo events, persistence layer)
-
-## v2.5
-* Argo API server enhancements (pagination, SSO, etc...)
+* Backlog and bug fixes
 
-### Proposed Items
+## Proposed Items
+* Argo API server
 * Best effort workflow steps
 * Template level finalizers
 * Artifact loop aggregation

VERSION

@@ -1 +1 @@
-2.3.0-rc1
+2.3.0-rc2

api/openapi-spec/swagger.json

@@ -2,7 +2,7 @@
  "swagger": "2.0",
  "info": {
  "title": "Argo",
- "version": "v2.3.0-rc1"
+ "version": "v2.3.0-rc2"
  },
  "paths": {},
  "definitions": {

docs/workflow-controller-configmap.yaml

@@ -76,6 +76,7 @@ data:
  key: secretKey
 
  # Specifies the container runtime interface to use (default: docker)
+ # must be one of: docker, kubelet, k8sapi, pns
  containerRuntimeExecutor: docker
 
  # kubelet port when using kubelet executor (default: 10250)
@@ -103,7 +104,7 @@ data:
  - --gloglevel
  - "6"
  env:
- - name: DEBUG_FLAG
+ - name: SOME_ENV_VAR
  value: "1"
 
  # metricsConfig controls the path and port for prometheus metrics

manifests/base/kustomization.yaml

@@ -9,7 +9,7 @@ bases:
 images:
 - name: argoproj/argoui
  newName: argoproj/argoui
- newTag: v2.3.0-rc1
+ newTag: v2.3.0-rc2
 - name: argoproj/workflow-controller
  newName: argoproj/workflow-controller
- newTag: v2.3.0-rc1
+ newTag: v2.3.0-rc2

manifests/install.yaml

@@ -228,7 +228,7 @@ spec:
  value: "false"
  - name: BASE_HREF
  value: /
- image: argoproj/argoui:v2.3.0-rc1
+ image: argoproj/argoui:v2.3.0-rc2
  name: argo-ui
  serviceAccountName: argo-ui
 ---
@@ -250,9 +250,9 @@ spec:
  - --configmap
  - workflow-controller-configmap
  - --executor-image
- - argoproj/argoexec:v2.3.0-rc1
+ - argoproj/argoexec:v2.3.0-rc2
  command:
  - workflow-controller
- image: argoproj/workflow-controller:v2.3.0-rc1
+ image: argoproj/workflow-controller:v2.3.0-rc2
  name: workflow-controller
  serviceAccountName: argo

manifests/namespace-install.yaml

@@ -170,7 +170,7 @@ spec:
  value: "false"
  - name: BASE_HREF
  value: /
- image: argoproj/argoui:v2.3.0-rc1
+ image: argoproj/argoui:v2.3.0-rc2
  name: argo-ui
  serviceAccountName: argo-ui
 ---
@@ -192,9 +192,9 @@ spec:
  - --configmap
  - workflow-controller-configmap
  - --executor-image
- - argoproj/argoexec:v2.3.0-rc1
+ - argoproj/argoexec:v2.3.0-rc2
  command:
  - workflow-controller
- image: argoproj/workflow-controller:v2.3.0-rc1
+ image: argoproj/workflow-controller:v2.3.0-rc2
  name: workflow-controller
  serviceAccountName: argo