<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div>Hi Gal,</div>
<div><br>
</div>
<div>Thanks for your answer. </div>
<div><br>
</div>
<div>
<div>>The question is what you mean by multi-tenancy, if you mean that different tenants each control their own bare-metal</div>
<div>>server then Kuryr already support this. (by tenant credential configuration)</div>
<div> </div>
</div>
<div> I understand kuryr can configure with tenant credential, but we still need neutron-openvswitch-agent on </div>
<div>the bare-metal server, it need admin account… </div>
<div><br>
</div>
<div>Thanks.</div>
<div><br>
</div>
<div>Regards,</div>
<div>Liping Mao</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Gal Sagie <<a href="mailto:gal.sagie@gmail.com">gal.sagie@gmail.com</a>><br>
<span style="font-weight:bold">Reply-To: </span>OpenStack List <<a href="mailto:openstack-dev@lists.openstack.org">openstack-dev@lists.openstack.org</a>><br>
<span style="font-weight:bold">Date: </span>2016年1月26日 星期二 下午12:47<br>
<span style="font-weight:bold">To: </span>OpenStack List <<a href="mailto:openstack-dev@lists.openstack.org">openstack-dev@lists.openstack.org</a>><br>
<span style="font-weight:bold">Subject: </span>Re: [openstack-dev] [kuryr] Does Kuryr support multi-tenant<br>
</div>
<div><br>
</div>
<div>
<div>
<div dir="ltr">Hi Liping Mao,
<div><br>
</div>
<div>The question is what you mean by multi-tenancy, if you mean that different tenants each control their own bare-metal</div>
<div>server then Kuryr already support this. (by tenant credential configuration)</div>
<div><br>
</div>
<div>If what i think you mean, and thats running multi tenants on the same bare-metal then the problem</div>
<div>here is that Docker and Kubernetes doesnt support something like that either (mostly for security reasons) and</div>
<div>the networking is just part of it (Which is what Kuryr focus on).</div>
<div>For this, you usually pick with what Magnum offer and thats running containers inside tenant VMs.</div>
<div><br>
</div>
<div>However, there are some interesting technologies and open source projects which enable</div>
<div>something like that and we are evaluating them, its definitely a long term goal for us.</div>
<div><br>
</div>
<div><br>
</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Tue, Jan 26, 2016 at 5:06 AM, Liping Mao (limao) <span dir="ltr">
<<a href="mailto:limao@cisco.com" target="_blank">limao@cisco.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style="word-wrap:break-word;color:rgb(0,0,0);font-size:14px;font-family:Calibri,sans-serif">
<div>Thanks Mohammad for your clear explanation.</div>
<div>Do we have any way or roadmap or idea to support kuryr in multi-tenant in bare metal servers now? </div>
<div><br>
</div>
<div>Thanks.</div>
<div><br>
</div>
<div>Regards,</div>
<div>Liping Mao</div>
<div><br>
</div>
<div><br>
</div>
<span>
<div style="font-family:Calibri;font-size:11pt;text-align:left;color:black;BORDER-BOTTOM:medium none;BORDER-LEFT:medium none;PADDING-BOTTOM:0in;PADDING-LEFT:0in;PADDING-RIGHT:0in;BORDER-TOP:#b5c4df 1pt solid;BORDER-RIGHT:medium none;PADDING-TOP:3pt">
<span style="font-weight:bold">From: </span>Mohammad Banikazemi <<a href="mailto:mb@us.ibm.com" target="_blank">mb@us.ibm.com</a>><br>
<span style="font-weight:bold">Reply-To: </span>OpenStack List <<a href="mailto:openstack-dev@lists.openstack.org" target="_blank">openstack-dev@lists.openstack.org</a>><br>
<span style="font-weight:bold">Date: </span>2016年1月26日 星期二 上午2:35<br>
<span style="font-weight:bold">To: </span>OpenStack List <<a href="mailto:openstack-dev@lists.openstack.org" target="_blank">openstack-dev@lists.openstack.org</a>><br>
<span style="font-weight:bold">Subject: </span>Re: [openstack-dev] [kuryr] Does Kuryr support multi-tenant<br>
</div>
<div>
<div class="h5">
<div><br>
</div>
<div>
<div>
<p>Considering that the underlying container technology is not multi-tenant (as of now), your observation is correct in that all neutron resources are made for a single tenant. Until Docker supports multi tenancy, we can possibly use network options and/or
wrappers for docker/swarm clients to achieve some kind of multi tenancy support. Having said that, I should add that as of now we do not have such a feature in Kuryr.<br>
<br>
Best,<br>
<br>
Mohammad<br>
<br>
<br>
<img width="16" height="16" src="cid:1__=8FBBF5D6DFF63F638f9e8a93df938690918c8FB@" border="0" alt="Inactive hide details for "Liping Mao (limao)" ---01/25/2016 06:39:44 AM---Hi Kuryr guys, I'm a new bee in kuryr, and using de"><font color="#424282">"Liping
Mao (limao)" ---01/25/2016 06:39:44 AM---Hi Kuryr guys, I'm a new bee in kuryr, and using devstack to try kuryr now, I notice when I use kur</font><br>
<br>
<font size="2" color="#5F5F5F">From: </font><font size="2">"Liping Mao (limao)" <<a href="mailto:limao@cisco.com" target="_blank">limao@cisco.com</a>></font><br>
<font size="2" color="#5F5F5F">To: </font><font size="2">"OpenStack Development Mailing List (not for usage questions)" <<a href="mailto:openstack-dev@lists.openstack.org" target="_blank">openstack-dev@lists.openstack.org</a>></font><br>
<font size="2" color="#5F5F5F">Date: </font><font size="2">01/25/2016 06:39 AM</font><br>
<font size="2" color="#5F5F5F">Subject: </font><font size="2">[openstack-dev] [kuryr] Does Kuryr support multi-tenant</font><br>
</p>
<hr width="100%" size="2" align="left" noshade="" style="color:#8091a5">
<br>
<br>
<br>
<font face="Calibri">Hi Kuryr guys,</font><br>
<br>
<font face="Calibri">I’m a new bee in kuryr, and using devstack to try kuryr now, I notice when I use kuryr to create network/port for container, the resources are in “admin”.</font><br>
<font face="Calibri">Do kuryr support multi-tenant now? For example, if I want try kuryr in demo tenant, how can I do this?</font><br>
<br>
<font face="Calibri">Thanks for your help and a</font><font size="4" face="Calibri">ny help would be appreciated.</font><br>
<br>
<font face="Calibri">Regards,</font><br>
<font face="Calibri">Liping Mao</font><tt>__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="mailto:OpenStack-dev-request@lists.openstack.org" target="_blank">
OpenStack-dev-request@lists.openstack.org</a>?subject:unsubscribe<br>
</tt><tt><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a></tt><tt><br>
</tt><br>
<br>
</div>
</div>
</div>
</div>
</span></div>
<br>
__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">
OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
<br>
</blockquote>
</div>
<br>
<br clear="all">
<div><br>
</div>
-- <br>
<div class="gmail_signature">Best Regards ,<br>
<br>
The G. </div>
</div>
</div>
</div>
</span>
</body>
</html>