Connecting Kubernetes and OpenStack with simple/scalable L3 networking and Network policy

http://openstacknordic.org OSDN2017 Breakout session by Karthik Prabhakar. As OpenStack embraces Kubernetes as the container platform of choice, it becomes imperative to connect VM’s and containers seamlessly. This talk outlines Project Calico’s pure-L3 network approach combined with declarative (Kubernetes) Network Policy to interconnect OpenStack with Kubernetes. As the OpenStack community embraces Kubernetes as the container orchestration platform of choice, it becomes imperative to seamlessly connect applications across VM’s and containers. Early OpenStack Neutron plugin implementations approached network isolation by creating network overlays on top of convoluted paths through vswitches, bridges and L3-agents on compute nodes, along with coarse security groups. In contrast, Kubernetes and other container orchestrators provide rich network policy constructs while assuming IP connectivity between nodes and containers/pods, facilitating simple, scalable network design and isolation with network policy. This talk explores a pure-L3 network approach combined with declarative (Kubernetes) Network Policy, espoused by Project Calico, to interconnect OpenStack with Kubernetes across 3 scenario’s: 1. Kubernetes alongside OpenStack (with application instances in either) 2. Kubernetes running within OpenStack VM’s 3. OpenStack as a (containerized) application orchestrated by Kubernetes

Видео Connecting Kubernetes and OpenStack with simple/scalable L3 networking and Network policy автора Python анализ данных в области географии