Missing network policy support for k8s

Bug #1746379 reported by Feilong Wang
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Magnum
Fix Released
Undecided
Feilong Wang

Bug Description

Here are some information about the NetworkPolicy in k8s [1] and [2]. And Magnum does support making network driver plugable, see [3]. The idea is adding a new network driver 'calico' to support the network isolation for
k8s.

[1] https://cloud.google.com/kubernetes-engine/docs/how-to/network-policy
[2] http://blog.kubernetes.io/2017/10/enforcing-network-policies-in-kubernetes.html
[3] https://specs.openstack.org/openstack/magnum-specs/specs/pre-ocata/implemented/container-networking-model.html

Feilong Wang (flwang)
Changed in magnum:
assignee: nobody → Feilong Wang (flwang)
summary: - Missing network policy support with Flannel for k8s
+ Missing network policy support for k8s
description: updated
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to magnum (master)

Fix proposed to branch: master
Review: https://review.openstack.org/540352

Changed in magnum:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to magnum (master)

Related fix proposed to branch: master
Review: https://review.openstack.org/543101

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on magnum (master)

Change abandoned by Feilong Wang (<email address hidden>) on branch: master
Review: https://review.openstack.org/543101

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to magnum (master)

Reviewed: https://review.openstack.org/540352
Committed: https://git.openstack.org/cgit/openstack/magnum/commit/?id=838b8daf6eb7670dfb44b5058aba278734f287f1
Submitter: Zuul
Branch: master

commit 838b8daf6eb7670dfb44b5058aba278734f287f1
Author: Feilong Wang <email address hidden>
Date: Sat Feb 3 00:57:27 2018 +1300

    Support calico as network driver

    Adding calico as Kubernetes network driver to support network
    policy of Kubernetes. Network policy is a very important feature
    for k8s production use. See more information about k8s network
    policy at [1] and [2], as for calico please refer [3] and [4].

    [1] https://kubernetes.io/docs/concepts/services-networking/network-policies/
    [2] http://blog.kubernetes.io/2017/10/enforcing-network-policies-in-kubernetes.html
    [3] https://www.projectcalico.org/calico-network-policy-comes-to-kubernetes/
    [4] https://cloudplatform.googleblog.com/2017/09/network-policy-support-for-kubernetes-with-calico.html

    Closes-Bug: #1746379

    Change-Id: I135a46cd32a67d73d8e64ac5bbc4debfae6c4568

Changed in magnum:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to magnum (stable/queens)

Fix proposed to branch: stable/queens
Review: https://review.openstack.org/546569

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to magnum (stable/queens)

Reviewed: https://review.openstack.org/546569
Committed: https://git.openstack.org/cgit/openstack/magnum/commit/?id=ba5def167baed72f0ca1ce50456aa6131d1297ef
Submitter: Zuul
Branch: stable/queens

commit ba5def167baed72f0ca1ce50456aa6131d1297ef
Author: Feilong Wang <email address hidden>
Date: Sat Feb 3 00:57:27 2018 +1300

    Support calico as network driver

    Adding calico as Kubernetes network driver to support network
    policy of Kubernetes. Network policy is a very important feature
    for k8s production use. See more information about k8s network
    policy at [1] and [2], as for calico please refer [3] and [4].

    [1] https://kubernetes.io/docs/concepts/services-networking/network-policies/
    [2] http://blog.kubernetes.io/2017/10/enforcing-network-policies-in-kubernetes.html
    [3] https://www.projectcalico.org/calico-network-policy-comes-to-kubernetes/
    [4] https://cloudplatform.googleblog.com/2017/09/network-policy-support-for-kubernetes-with-calico.html

    Closes-Bug: #1746379

    Change-Id: I135a46cd32a67d73d8e64ac5bbc4debfae6c4568
    (cherry picked from commit 838b8daf6eb7670dfb44b5058aba278734f287f1)

tags: added: in-stable-queens
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/magnum 6.1.0

This issue was fixed in the openstack/magnum 6.1.0 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/magnum 7.0.0

This issue was fixed in the openstack/magnum 7.0.0 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.