qinling/qinling
Hunt Xu 662794bded Kubernetes: disable inter-pods connections
By default pods in Kubernetes can connect to each other. However in
Qinling, each pod should be independent acting as a worker of a function
or running an execution of a function. Disabling the inter-pods traffic
in the namespace used by Qinling would ensure the isolation of each pod.

This commit leverages the NetworkPolicy in Kubernetes[1] to isolate the
pods. So a network solution which supports NetworkPolicy (for example,
cailco) for Kubernetes must be used or there will be no effect.

[1] https://kubernetes.io/docs/concepts/services-networking/network-policies/

Story: 2001585
Task: 6534
Change-Id: I368323410e92cc23c9a7b50e4936c7070cd57ef7
2018-07-23 21:57:18 +00:00
..
api Merge "Support alias for execution creation" 2018-07-17 09:00:50 +00:00
cmd Enable oslo_config mutable configurations 2018-07-04 23:01:51 +12:00
db Function Alias API: delete and update 2018-07-04 03:48:14 +00:00
engine Support to get pool information for the runtime 2018-07-14 12:49:11 +12:00
orchestrator Kubernetes: disable inter-pods connections 2018-07-23 21:57:18 +00:00
services periodics: fix service of function version 0 not expiring issue 2018-07-13 15:10:12 +08:00
storage Fix function package downloading 2018-05-15 01:21:46 +00:00
tests Kubernetes: disable inter-pods connections 2018-07-23 21:57:18 +00:00
utils Add scope information when getting session from Keystone 2018-07-18 16:06:35 +12:00
__init__.py Initial API code structure 2017-04-14 15:24:02 +12:00
config.py config: update api_workers default value to match help message 2018-07-06 15:32:30 +08:00
context.py Fix link for keystonemiddleware page 2018-02-27 11:11:01 +08:00
exceptions.py Add scope information when getting session from Keystone 2018-07-18 16:06:35 +12:00
rpc.py Support to get pool information for the runtime 2018-07-14 12:49:11 +12:00
status.py Fix logs query for executions 2017-08-29 23:54:30 +12:00
version.py Initial API code structure 2017-04-14 15:24:02 +12:00