9c2fcbc3e3
After applying a Network Policy and updating an existent Service so that all 'targetPorts' are allowed by the policy, the SG rules are not being created with the required 'remote_ip_prefix'. Also, when the service is again updated with a 'targetPort' that is not allowed by the policy the respective SG rule is not deleted. This commit fixes the issue by associating 'targetPort' field to the 'LBaaSPortSpec' versioned object, which allows Kuryr to accounts for changes in not only 'name', 'port' and 'protocol' Kubernetes services' fields, but also 'targetPorts'. In addition, the LBaaS SG from the LBaaS state annotation is updated to match the SG stated in the LBaaS spec annotation, which has the updated SG to be applied. Closes-Bug: #1814920 Change-Id: Ifcdd1889a813c1eb078064facfb2ede83a179887 |
||
---|---|---|
.zuul.d | ||
contrib | ||
devstack | ||
doc | ||
etc | ||
kubernetes_crds | ||
kuryr_kubernetes | ||
playbooks | ||
releasenotes | ||
tools | ||
.coveragerc | ||
.dockerignore | ||
.gitignore | ||
.gitreview | ||
.pre-commit-config.yaml | ||
.stestr.conf | ||
.testr.conf | ||
CONTRIBUTING.rst | ||
HACKING.rst | ||
LICENSE | ||
README.rst | ||
babel.cfg | ||
cni.Dockerfile | ||
cni_ds_init | ||
cni_py3.Dockerfile | ||
controller.Dockerfile | ||
controller_py3.Dockerfile | ||
lower-constraints.txt | ||
requirements.txt | ||
setup.cfg | ||
setup.py | ||
test-requirements.txt | ||
tox.ini |
README.rst
Team and repository tags
Project description
Kubernetes integration with OpenStack networking
The OpenStack Kuryr project enables native Neutron-based networking in Kubernetes. With Kuryr-Kubernetes it's now possible to choose to run both OpenStack VMs and Kubernetes Pods on the same Neutron network if your workloads require it or to use different segments and, for example, route between them.
- Free software: Apache license
- Documentation: https://docs.openstack.org/kuryr-kubernetes/latest
- Source: https://git.openstack.org/cgit/openstack/kuryr-kubernetes
- Bugs: https://bugs.launchpad.net/kuryr-kubernetes
- Overview and demo: https://superuser.openstack.org/articles/networking-kubernetes-kuryr
- Release notes: https://docs.openstack.org/releasenotes/kuryr-kubernetes/
Contribution guidelines
For the process of new feature addition, refer to the Kuryr Policy