Missing network policy support for k8s

[Feilong Wang]

Here are some information about the NetworkPolicy in k8s [1] and [2]. And Magnum does support making network driver plugable, see [3]. The idea is adding a new network driver 'calico' to support the network isolation for
k8s.

[1] https://cloud.google.com/kubernetes-engine/docs/how-to/network-policy
[2] http://blog.kubernetes.io/2017/10/enforcing-network-policies-in-kubernetes.html
[3] https://specs.openstack.org/openstack/magnum-specs/specs/pre-ocata/implemented/container-networking-model.html

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/540352

[OpenStack Infra (hudson-openstack)]

Related fix proposed to branch: master
Review: https://review.openstack.org/543101

[OpenStack Infra (hudson-openstack)]

Change abandoned by Feilong Wang (<email address hidden>) on branch: master
Review: https://review.openstack.org/543101

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/540352
Committed: https://git.openstack.org/cgit/openstack/magnum/commit/?id=838b8daf6eb7670dfb44b5058aba278734f287f1
Submitter: Zuul
Branch: master

commit 838b8daf6eb7670dfb44b5058aba278734f287f1
Author: Feilong Wang <email address hidden>
Date: Sat Feb 3 00:57:27 2018 +1300

    Support calico as network driver

    Adding calico as Kubernetes network driver to support network
    policy of Kubernetes. Network policy is a very important feature
    for k8s production use. See more information about k8s network
    policy at [1] and [2], as for calico please refer [3] and [4].

    [1] https://kubernetes.io/docs/concepts/services-networking/network-policies/
    [2] http://blog.kubernetes.io/2017/10/enforcing-network-policies-in-kubernetes.html
    [3] https://www.projectcalico.org/calico-network-policy-comes-to-kubernetes/
    [4] https://cloudplatform.googleblog.com/2017/09/network-policy-support-for-kubernetes-with-calico.html

    Closes-Bug: #1746379

    Change-Id: I135a46cd32a67d73d8e64ac5bbc4debfae6c4568

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/queens
Review: https://review.openstack.org/546569

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/546569
Committed: https://git.openstack.org/cgit/openstack/magnum/commit/?id=ba5def167baed72f0ca1ce50456aa6131d1297ef
Submitter: Zuul
Branch: stable/queens

commit ba5def167baed72f0ca1ce50456aa6131d1297ef
Author: Feilong Wang <email address hidden>
Date: Sat Feb 3 00:57:27 2018 +1300

    Support calico as network driver

    Adding calico as Kubernetes network driver to support network
    policy of Kubernetes. Network policy is a very important feature
    for k8s production use. See more information about k8s network
    policy at [1] and [2], as for calico please refer [3] and [4].

    [1] https://kubernetes.io/docs/concepts/services-networking/network-policies/
    [2] http://blog.kubernetes.io/2017/10/enforcing-network-policies-in-kubernetes.html
    [3] https://www.projectcalico.org/calico-network-policy-comes-to-kubernetes/
    [4] https://cloudplatform.googleblog.com/2017/09/network-policy-support-for-kubernetes-with-calico.html

    Closes-Bug: #1746379

    Change-Id: I135a46cd32a67d73d8e64ac5bbc4debfae6c4568
    (cherry picked from commit 838b8daf6eb7670dfb44b5058aba278734f287f1)

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/magnum 6.1.0 release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/magnum 7.0.0 release.