[MESOS-4358] Expose net_cls network handles in agent's state endpoint

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.28.0
• Component/s: containerization
• Labels: container containerizer mesosphere
• Epic Link: net_cls
• Sprint: Mesosphere Sprint 28
• Story Points: 2
• Assignee: Avinash Sridharan
• Reporter: Avinash Sridharan
• Shepherd: Jie Yu
• Created: 13/Jan/16 20:04
• Updated: 26/Nov/18 12:22
• Resolved: 26/Nov/18 12:22

Description

We need to expose net_cls network handles, associated with containers, to operators and network utilities that would use these network handles to enforce network policy.

In order to achieve the above we need to add a new field in the `NetworkInfo` protobuf (say NetHandles) and update this field when a container gets assigned to a net_cls cgroup. The `ContainerStatus` protobuf already has the `NetworkInfo` protobuf as a nested message, and the `ContainerStatus` itself is exposed to operators as part of TaskInfo (for tasks associated with the container) in an agent's state.json.

Issue Links

• is blocked by: MESOS-4487 Introduce status() interface in `Containerizer`
• is blocked by: MESOS-4488 Define a CgroupInfo protobuf to expose cgroup isolator configuration.
• is blocked by: MESOS-4489 The `cgroups/net_cls` isolator needs to expose handles in the ContainerStatus
• is blocked by: MESOS-4490 Get container status information in slave.
• links to: RB 43322
• links to: RB 43323