Update git submodules
* Update kuryr-kubernetes from branch 'master' - Merge "Pools support with Network Policies" - Pools support with Network Policies This patch adapts the pools support to the use of Network Policies. Unlike with the other drivers, when Network Policies are applied the pods' ports changes their security groups while being used. That means their original pool will not fit them anymore with the next two consequences: 1.- Ports will have their original SG reapplied when pods are deleted, with the consequent performance impact do to increasing the number of calls to neutron 2.- Original pools may become useless, as different SGs are being used, therefore wasting neutron ports To accomodate for network policies, this patch removes the SG ids from the pool key, merging all the pools with same network/project/host ids but with different security groups into the same pool. This will not change the behavior of the other drivers as there was a unique pool per network/project/host ids already, i.e., the same SG ids were being used. However, this will helps to avoid problem 1) as it is no longer re-applying the SG, but simply putting the port back into its current pool. And it will fix problem 2) as it will pick a port for an existing pool that matches network/project/host ids. First it will search for one with already matching SGs, and if not found, it will recycle one of the others by reapplying the needed SGs (note it picks a port from one of the pools that are less frequently used -- assumes they may belong to a deleted NP that it is not needed anymore, thus removing the port wastage problem) Partially Implements: blueprint k8s-network-policies Change-Id: I2c1e47fd5112c64b8e9984e5ac5d8572d91ac202
This commit is contained in:
parent
ae80d6f9c2
commit
21aaa60c4b
@ -1 +1 @@
|
||||
Subproject commit 5a93e919ec9c90d197f975b0b0fcc18fd404e7b6
|
||||
Subproject commit 5a6a396854dc8186d15d30e26d0391e5adb141ff
|
Loading…
Reference in New Issue
Block a user