{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/24672","repository_url":"https://api.github.com/repos/kubernetes/kubernetes","labels_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/24672/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/24672/comments","events_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/24672/events","html_url":"https://github.com/kubernetes/kubernetes/issues/24672","id":150419443,"number":24672,"title":"Write CNI conf to network-plugin-dir","user":{"login":"bprashanth","id":10927820,"avatar_url":"https://avatars.githubusercontent.com/u/10927820?v=3","gravatar_id":"","url":"https://api.github.com/users/bprashanth","html_url":"https://github.com/bprashanth","followers_url":"https://api.github.com/users/bprashanth/followers","following_url":"https://api.github.com/users/bprashanth/following{/other_user}","gists_url":"https://api.github.com/users/bprashanth/gists{/gist_id}","starred_url":"https://api.github.com/users/bprashanth/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bprashanth/subscriptions","organizations_url":"https://api.github.com/users/bprashanth/orgs","repos_url":"https://api.github.com/users/bprashanth/repos","events_url":"https://api.github.com/users/bprashanth/events{/privacy}","received_events_url":"https://api.github.com/users/bprashanth/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/area/networking","name":"area/networking","color":"006b75"},{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/team/cluster","name":"team/cluster","color":"d2b48c"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":19,"created_at":"2016-04-22T16:50:36Z","updated_at":"2016-04-27T20:03:50Z","closed_at":null,"body":"Writing this https://github.com/kubernetes/kubernetes/blob/master/pkg/kubelet/network/kubenet/kubenet_linux.go#L158 to filesystem allows us to share a single kubelet generated CNI config for all runtimes (eg rkt).  Potential downside is that we'd end up with 2 type=bridge cni confs that conflict. \r\n\r\n@freehan @dcbw @yifan-gu "},"comment":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/comments/215211245","html_url":"https://github.com/kubernetes/kubernetes/issues/24672#issuecomment-215211245","issue_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/24672","id":215211245,"user":{"login":"steveeJ","id":1181362,"avatar_url":"https://avatars.githubusercontent.com/u/1181362?v=3","gravatar_id":"","url":"https://api.github.com/users/steveeJ","html_url":"https://github.com/steveeJ","followers_url":"https://api.github.com/users/steveeJ/followers","following_url":"https://api.github.com/users/steveeJ/following{/other_user}","gists_url":"https://api.github.com/users/steveeJ/gists{/gist_id}","starred_url":"https://api.github.com/users/steveeJ/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/steveeJ/subscriptions","organizations_url":"https://api.github.com/users/steveeJ/orgs","repos_url":"https://api.github.com/users/steveeJ/repos","events_url":"https://api.github.com/users/steveeJ/events{/privacy}","received_events_url":"https://api.github.com/users/steveeJ/received_events","type":"User","site_admin":false},"created_at":"2016-04-27T20:03:50Z","updated_at":"2016-04-27T20:03:50Z","body":"@dcbw \r\n\r\nPlease see https://github.com/coreos/rkt/blob/master/Documentation/subcommands/run.md#host-networking, summarized `--net=host` will tell rkt to leave the networking alone which is what I suggested in my above comment.\r\n\r\nLooking at https://github.com/coreos/rkt/pull/2525 I understand that you didn't pursue my suggestion of directly invoking CNI from kubernetes. I strongly advise against using rkt's CNI functionality like that as it will make it impossible for k8s to intercept any results that CNI passes back. Creating the Pod using the rkt invocation is an atomic operation.\r\nI'm not saying that the code that invokes the CNI plugins must live within the k8s repository, but I suggest again that we extend libcni for this purpose."}}