openstack
/
qinling
Code Issues Proposed changes

Merge "Add upgrade description to release note"

This commit is contained in:
Zuul 2018-07-26 03:34:55 +00:00 committed by Gerrit Code Review
parent fffe13519f af6da47e58
commit 0cf35cbf7e
1 changed files with 8 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
releasenotes/notes/isolate-k8s-pods-617fec5dc5fbd2d8.yaml
View File

@ -1,8 +1,12 @@
--- ---
security: security:
- | - |
When using Kubernetes as the orchestrator, Qinling will create Kubernetes When using Kubernetes as the orchestrator, Qinling will create Kubernetes
pods to run executions of functions. In Kubernetes, pods are non-isolated pods to run executions of functions. In Kubernetes, pods are non-isolated
unless the NetworkPolicy is configured and enforced. In Qinling, we create unless the NetworkPolicy is configured and enforced. In Qinling, we create
NetworkPolicy to disable the communication between pods and the traffic NetworkPolicy to disable the communication between pods and the traffic
from outside the cluster. from outside the cluster.
upgrade:
- Re-apply the Kubernetes manifest file to grant NetworkPolicy resource
operation permission to ``qinling`` user in Kubernetes,
``curl -sSL https://raw.githubusercontent.com/openstack/qinling/master/example/kubernetes/k8s_qinling_role.yaml | kubectl apply -f -``