Bug 1444144 - [RFE] Enable openshift-sdn using "oc cluster up"
Summary: [RFE] Enable openshift-sdn using "oc cluster up"
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: RFE
Version: 3.5.0
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
: ---
Assignee: Paul Weil
QA Contact: Xiaoli Tian
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2017-04-20 16:33 UTC by Jonathan Yu
Modified: 2017-08-08 18:05 UTC (History)
6 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2017-08-08 18:05:15 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Jonathan Yu 2017-04-20 16:33:34 UTC
Customers want to be able to try the new NetworkPolicy option locally, but this is not currently possible using "oc cluster up" because openshift-sdn is not initialized/configured in this mode. The SDN may also be needed for the experimental "oc cluster join" feature.

Comment 1 Paul Weil 2017-04-20 16:55:03 UTC
oc cluster up is more targeted at quick start use cases.  I feel like moving into the space of advanced configuration conflicts with our desire to push for Ansible as the method for configuring and installing real clusters.  SDN configuration would fall into the advanced use case category for me.

Granted, the result is that for features relying on underlying implementations (like NetworkPolicy) this means they are not usable with oc cluster up.  

I'd rather document the purpose of oc cluster up than try to support things like this.

Thoughts here Cesar?

Comment 3 Dan Winship 2017-04-20 17:30:33 UTC
(In reply to Paul Weil from comment #1)
> SDN configuration would fall into the advanced use case category for me.

There's not any configuration to it, other than setting networkPluginName. And SDN is the default for "real" OpenShift installs, so if it isn't going to be configurable, then it seems like "you get ovs-multitenant and you can't change it" is a more reasonable default than "you get kubenet and you can't change it"...

(Although I guess for this particular customer use case they'd need to be able to specify that they wanted the Tech Preview redhat/openshift-ovs-networkpolicy plugin rather than the standard multitenant one.)

OTOH, this would add another dependency (openvswitch), and probably even more dependencies in the future (OVN).

Comment 4 Cesar Wong 2017-05-15 12:16:31 UTC
Regardless of whether it should be done or not, the biggest technical limitation I see is that afaik installing our networking plugin requires restarting Docker. Cluster up is simple in that we can connect to any Docker and get a cluster started without knowing much more about the machine that Docker is running on. Doing something like this would require us to know a little bit more of the machine which is getting more into the realm of what Ansible should do. Maybe what we should do is focus on getting the Ansible experience of setting up a single node cluster to the level of ease of use of cluster up.

Comment 5 Dan Winship 2017-05-15 13:04:08 UTC
We don't require restarting docker any more (as of 3.4)

Comment 6 Cesar Wong 2017-05-15 13:10:57 UTC
Thanks Dan, that is really good to know. Without looking, as far as the required binaries, are those shipped inside any Docker image? Are they inside the origin image?

Comment 7 Dan Winship 2017-05-15 13:23:46 UTC
Yes, they're in openshift/node. (It looks like openshift/origin is targeted at the all-in-one use case and doesn't have support for SDN or storage plugins, while openshift/node is targeted at separate master/node installations and supports everything.)

There's also openshift/openvswitch, which runs *just* openvswitch, and is used as part of the containerized atomic-host install. Not sure if that would be easier to integrate with cluster up.

Comment 8 Paul Weil 2017-08-08 18:05:15 UTC
Closing this for now, we can reconsider in the future if this is something that more folks would find useful


Note You need to log in before you can comment on or make changes to this bug.