qinling/releasenotes/notes
Hunt Xu 662794bded Kubernetes: disable inter-pods connections
By default pods in Kubernetes can connect to each other. However in
Qinling, each pod should be independent acting as a worker of a function
or running an execution of a function. Disabling the inter-pods traffic
in the namespace used by Qinling would ensure the isolation of each pod.

This commit leverages the NetworkPolicy in Kubernetes[1] to isolate the
pods. So a network solution which supports NetworkPolicy (for example,
cailco) for Kubernetes must be used or there will be no effect.

[1] https://kubernetes.io/docs/concepts/services-networking/network-policies/

Story: 2001585
Task: 6534
Change-Id: I368323410e92cc23c9a7b50e4936c7070cd57ef7
2018-07-23 21:57:18 +00:00
..
.placeholder Initial commit for qinling project 2017-04-11 15:13:10 +12:00
enable-mutable-configuration-a0527660fa58532c.yaml Enable oslo_config mutable configurations 2018-07-04 23:01:51 +12:00
function-versioning-6e23fc021c2a7c7e.yaml Add release note for function versioning feature 2018-04-30 19:18:07 +12:00
get-runtime-pool-information-440351400ad7f0b8.yaml Support to get pool information for the runtime 2018-07-14 12:49:11 +12:00
isolate-k8s-pods-617fec5dc5fbd2d8.yaml Kubernetes: disable inter-pods connections 2018-07-23 21:57:18 +00:00
qinling-k8s-apiserver-certs-1651e26de5ca001c.yaml Add missing release note for the k8s certs change 2018-04-12 15:10:13 +08:00
resources-customized-5f5382d40e375dc1.yaml Add release note for customized memory and cpu resources feature 2018-06-07 23:09:23 +00:00