openstack
/
qinling
Code Issues Proposed changes
RETIRED, Function as a Service for OpenStack
456 Commits 3 Branches 23 Tags 4.4 MiB
Go to file
Lingxian Kong 6e56154652 Remove the network policy creation in k8s orchestrator 
Previously, the network policy(based on ipBlock) is created during k8s
orchestrator initialization to restrict the function pod access from
outside.

However, the network policy is actually designed to use inside the k8s
cluster, it doesn't make sense to define the network policy in order to
restrict the inbound traffic from outside. A typical example is when
Calico is used as network plugin in the k8s cluster, the source IP
address from the pod's perspective is coming from the worker node rather
than the original IP address of outside.

We need to remove the network policy creation for now and leave that
part of security concerns to the future design.

The config option `CONF.kubernetes.trusted_cidrs` is deprecated for
removal.

Change-Id: I91905ba36b36f152a987ce2b742de33e423ed2db
Story: #2005777
Task: #33500
Story: #2005710
Task: #31036
 		2019-05-27 13:27:40 +12:00
devstack Remove the network policy creation in k8s orchestrator 2019-05-27 13:27:40 +12:00
doc Merge "Some improvements for the doc" 2018-11-06 10:02:21 +00:00
etc Support to get pool information for the runtime 2018-07-14 12:49:11 +12:00
example Kubernetes: disable inter-pods connections 2018-07-23 21:57:18 +00:00
playbooks zuul: create Neutron config dir for the devstack job 2018-03-20 14:28:12 +08:00
qinling Remove the network policy creation in k8s orchestrator 2019-05-27 13:27:40 +12:00
qinling_tempest_plugin Skip the external network connection test 2019-02-21 14:53:57 +13:00
releasenotes Update master for stable/stein 2019-03-20 13:45:29 +00:00
runtimes Function timeout support for python runtime 2018-09-07 14:33:31 +12:00
tools Use k8s 1.13 in devstack 2019-05-17 13:32:35 +12:00
.coveragerc Exclude tests and db migrations from coverage report 2018-03-21 14:25:27 +08:00
.gitignore tests: replace .testr.conf with .stestr.conf 2017-10-10 18:03:00 +08:00
.gitreview OpenDev Migration Patch 2019-04-19 19:49:19 +00:00
.mailmap Make api service work 2017-04-14 15:17:05 +12:00
.stestr.conf tests: replace .testr.conf with .stestr.conf 2017-10-10 18:03:00 +08:00
.zuul.yaml OpenDev Migration Patch 2019-04-19 19:49:19 +00:00
CONTRIBUTING.rst Improve contributing page 2018-06-08 01:38:57 +00:00
HACKING.rst Update and replace http with https for doc links in qinling 2017-08-13 19:28:54 -07:00
LICENSE Initial commit for qinling project 2017-04-11 15:13:10 +12:00
README.rst README: make it us-ascii 2019-05-23 10:03:00 -04:00
babel.cfg Initial commit for qinling project 2017-04-11 15:13:10 +12:00
lower-constraints.txt Add framework for qinling-status upgrade check 2018-10-24 17:34:20 +05:30
requirements.txt Add framework for qinling-status upgrade check 2018-10-24 17:34:20 +05:30
setup.cfg Change openstack-dev to openstack-discuss 2018-12-04 08:31:58 +00:00
setup.py Use uWSGI for python runtime 2018-03-01 17:52:54 +13:00
test-requirements.txt Fix first_execution_time when used together with pattern 2018-08-28 16:33:58 +12:00
tox.ini fix tox python3 overrides 2018-06-06 16:59:42 -04:00

README.rst

Qinling

Note

Qinling (is pronounced "tchinling") refers to Qinling Mountains in southern Shaanxi Province in China. The mountains provide a natural boundary between North and South China and support a huge variety of plant and wildlife, some of which is found nowhere else on Earth.

Qinling is Function as a Service for OpenStack. This project aims to provide a platform to support serverless functions (like AWS Lambda). Qinling supports different container orchestration platforms (Kubernetes/Swarm, etc.) and different function package storage backends (local/Swift/S3) by nature using plugin mechanism.