Kuryr

networking-calico works with Kuryr; this means using Neutron, with the Calico ML2 driver, to provide networking for container workloads.

You can use DevStack to install a single node Calico/Kuryr system, with a local.conf file like this:

  1. [[local|localrc]]
  2. ADMIN_PASSWORD=015133ea2bdc46ed434c
  3. DATABASE_PASSWORD=d0060b07d3f3631ece78
  4. RABBIT_PASSWORD=6366743536a8216bde26
  5. SERVICE_PASSWORD=91eb72bcafb4ddf246ab
  6. SERVICE_TOKEN=c5680feca5e2c9c8f820
  8. enable_plugin networking-calico git://git.openstack.org/openstack/networking-calico
  9. enable_plugin kuryr git://git.openstack.org/openstack/kuryr
  10. enable_service kuryr
  11. enable_service etcd-server
  12. enable_service docker-engine
  14. LOGFILE=stack.log
  15. LOG_COLOR=False

Please follow general Kuryr instructions for creating a Docker network that uses Kuryr as its backend, and for launching containers on that network. Then if you look at the IP routing table and iptables, you will see Calico routes to the containers.

Calico for containers without Kuryr

The Calico project also provides networking for containers more directly, without Neutron and Kuryr as intermediaries. Please see Getting Started for details.