openstack/zun
Code Issues Proposed changes

Configure kuryr not creating SGs

Browse Source 
Zun will manage security groups by itself so it is unnecessary for
kuryr to create additional security groups if it is used with Zun.
Disable it will significant improve the performance on
starting/stopping containers.

Depends-On: I6d6d176512e6b30bb7372408aec1a7bac12335ab
Change-Id: Ic281e17ef3920c0e85c3b52b97e1b43887040caf
This commit is contained in:
Hongbin Lu 2018-04-22 17:18:35 +00:00
parent 5e243d8ba7
commit b4897d0385
5 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
devstack/local.conf.sample
View File

@ -16,6 +16,7 @@ enable_plugin devstack-plugin-container https://git.openstack.org/openstack/devs
# but we must change it to `global` in the multinode scenario. # but we must change it to `global` in the multinode scenario.
KURYR_CAPABILITY_SCOPE=global KURYR_CAPABILITY_SCOPE=global
KURYR_ETCD_PORT=2379 KURYR_ETCD_PORT=2379
KURYR_PROCESS_EXTERNAL_CONNECTIVITY=False
enable_plugin kuryr-libnetwork https://git.openstack.org/openstack/kuryr-libnetwork enable_plugin kuryr-libnetwork https://git.openstack.org/openstack/kuryr-libnetwork
# install python-zunclient from git # install python-zunclient from git

1
devstack/local.conf.subnode.sample
View File

@ -9,6 +9,7 @@ enable_plugin devstack-plugin-container https://git.openstack.org/openstack/devs
enable_plugin zun https://git.openstack.org/openstack/zun enable_plugin zun https://git.openstack.org/openstack/zun
KURYR_CAPABILITY_SCOPE=global KURYR_CAPABILITY_SCOPE=global
KURYR_PROCESS_EXTERNAL_CONNECTIVITY=False
enable_plugin kuryr-libnetwork https://git.openstack.org/openstack/kuryr-libnetwork enable_plugin kuryr-libnetwork https://git.openstack.org/openstack/kuryr-libnetwork
# Following is for multi host settings # Following is for multi host settings

4
doc/source/install/compute-install-ubuntu.rst
View File

@ -204,13 +204,15 @@ Install and configure components
# systemctl restart docker # systemctl restart docker
* Edit the Kuryr config file ``/etc/kuryr/kuryr.conf``. * Edit the Kuryr config file ``/etc/kuryr/kuryr.conf``.
Set capability_scope to global: Set ``capability_scope`` to ``global`` and
``process_external_connectivity`` to ``False``:
.. code-block:: ini .. code-block:: ini
[DEFAULT] [DEFAULT]
... ...
capability_scope = global capability_scope = global
process_external_connectivity = False
* Restart Kuryr-libnetwork: * Restart Kuryr-libnetwork:

1
playbooks/zun-devstack-base-multinode/run.yaml
View File

@ -32,6 +32,7 @@
enable_plugin zun git://git.openstack.org/openstack/zun enable_plugin zun git://git.openstack.org/openstack/zun
LIBS_FROM_GIT="python-zunclient" LIBS_FROM_GIT="python-zunclient"
KURYR_CAPABILITY_SCOPE=global KURYR_CAPABILITY_SCOPE=global
KURYR_PROCESS_EXTERNAL_CONNECTIVITY=False
EOF EOF
executable: /bin/bash executable: /bin/bash

1
playbooks/zun-devstack-base/run.yaml
View File

@ -31,6 +31,7 @@
[[local|localrc]] [[local|localrc]]
enable_plugin zun git://git.openstack.org/openstack/zun enable_plugin zun git://git.openstack.org/openstack/zun
LIBS_FROM_GIT="python-zunclient" LIBS_FROM_GIT="python-zunclient"
KURYR_PROCESS_EXTERNAL_CONNECTIVITY=False
EOF EOF
executable: /bin/bash executable: /bin/bash