This document provides an overview and update on the Kuryr project. Kuryr allows Docker Swarm and Kubernetes to consume native OpenStack Neutron networking and Cinder/Manila volumes, enabling containers to use the same infrastructure as VMs. New features for the upcoming Pike release include initial Kubernetes support, Load Balancer as a Service integration, and Docker Swarm mode integration. The document discusses themes, possible future features, and requests help from attendees.

1. KURYR
Project overview and update
IRENA BEREZOVSKY IRC: IRENAB
05.06.2017
ANTONI SEGURA PUIMEDON IRC: APUIMEDO

2. What does Kuryr do?
• Bring OpenStack networking and
storage to containers
• Allows Docker Swarm and
Kubernetes consumption of native
Neutron networking and
Cinder/Manila volumes. Enables
native OpenStack infrastructure for
mixed workloads (containers and
VMs).

3. Project background
• Founded during the Liberty release of
OpenStack
• 45 contributors for latest release

4. New features & enhancements for Pike
➡ KURYR-KUBERNETES
• First release
• Kubernetes Services support
• Disables kube-proxy
• Supports replication controller scaling
• Uses Neutron LBaaS v2.
• Each Service has a Load Balancer, Listener and Pool
• https://docs.openstack.org/developer/kuryr-kubernetes/devref/service_support.html
• Client and Server side SSL support
• Guru meditation reports (oslo.reports)
• RDO packaging

5. In progress for Pike
➡ KURYR-KUBERNETES
• Load balancer service type support
• Token support
• Resource pools

6. New features & enhancements for Pike
➡ KURYR-LIBNETWORK
• Swarm mode support
• As easy as docker plugin install kuryr/libnetwork2
• IPv4 and IPv6 networking.
• TLS support between Docker and the libnetwork plugin
• https://github.com/openstack/kuryr-libnetwork#running-kuryr
➡ FUXI
• Manila shares support. Allows mounting manila shares on bare-metal Docker containers
• https://github.com/openstack/fuxi/blob/master/doc/source/devref/manila_provider.rst

7. SCALABILITY RESILIENCY MANAGEABILITY MODULARITY
INTEROPERABILITY SECURITY USER EXPERIENCE
Pike release themes for Kuryr
MAJOR
FOCUS
MINOR
FOCUS
NO
INFO
NOT A
FOCUS
NO
INFO
NO
INFO
NO
INFO
MINOR
FOCUS
MAJOR
FOCUS
MAJOR
FOCUS
MINOR
FOCUS
MINOR
FOCUS

8. SCALABILITY RESILIENCY MANAGEABILITY MODULARITY
INTEROPERABILITY SECURITY USER EXPERIENCE
Queens release themes for Kuryr
MAJOR
FOCUS
MINOR
FOCUS
NO
INFO
NOT A
FOCUS
NO
INFO
NO
INFO
NO
INFO
MAJOR
FOCUS
MAJOR
FOCUS
MAJOR
FOCUS
MAJOR
FOCUS
MINOR
FOCUS
MINOR
FOCUS

9. Possible features & enhancements for Queens
➡ OCTAVIA SUPPORT FOR KUBERNETES
• Support Octavia as service Provider
➡ NETWORK POLICY AND INGRESS CONTROLLER SUPPORT FOR KUBERNETES
• Support Kubernetes Network Policy semantics by mapping to neutron Security Groups
• Support inbound connections access to cluster services
➡ CINDER AND MANILA VOLUME SUPPORT FOR BAREMETAL KUBERNETES
• Fuxi adding handlers and drivers to kuryr-kubernetes
• https://git.openstack.org/cgit/openstack/kuryr-kubernetes/tree/doc/source/specs/pike/fuxi_kubernetes.rst

10. SCALABILITY RESILIENCY MANAGEABILITY MODULARITY
INTEROPERABILITY SECURITY USER EXPERIENCE
Rocky release themes for Kuryr
MAJOR
FOCUS
MINOR
FOCUS
NO
INFO
NOT A
FOCUS
NO
INFO
NO
INFO
NO
INFO
MAJOR
FOCUS
MAJOR
FOCUS
MAJOR
FOCUS
MINOR
FOCUS
MINOR
FOCUS
MINOR
FOCUS

11. We need your help!
• QUESTION: What is your preference
regarding Bare-metal vs
container-in-VM?
• QUESTION: What is the planned scale of
your container cluster?
• QUESTION: What kind of workloads are
you targeting with containers?
• DEVELOPER REQUEST: Integration testing
• DEVELOPER REQUEST: Deployment tools
• DEVELOPER REQUEST: High availability for
the control plane

12. Want to know more?
Kuryr & Fuxi session: Tue, May 9th, 3:40pm-4:20pm
Hynes Convention Center, Level Two MR 207
Kuryr Project Onboarding: Wed, May 10, 11:00am-12:30pm
Hynes Convention Center, Plaza Level MR 105
Kuryr Kubernetes session: Wed, May 10th, 1:50pm-2:30pm
Hynes Convention Center, Level Three Ballroom B

13. @OpenStack
THANKS.
Questions?
openstack openstack OpenStackFoundation