|
| 1 | +--- |
| 2 | +title: Overview of OVN-Kubernetes network provider for Azure Red Hat OpenShift clusters |
| 3 | +description: Overview of OVN-Kubernetes network provider for Azure Red Hat OpenShift clusters. |
| 4 | +author: johnmarco |
| 5 | +ms.service: azure-redhat-openshift |
| 6 | +ms.topic: conceptual |
| 7 | +ms.author: johnmarc |
| 8 | +ms.date: 04/17/2023 |
| 9 | +topic: how-to |
| 10 | +keywords: azure, openshift, aro, red hat, azure CLI, azure portal, ovn, ovn-kubernetes, CNI, Container Network Interface |
| 11 | +#Customer intent: I need to configure OVN-Kubernetes network provider for Azure Red Hat OpenShift clusters. |
| 12 | +--- |
| 13 | + |
| 14 | +# OVN-Kubernetes network provider for Azure Red Hat OpenShift clusters |
| 15 | + |
| 16 | +The OpenShift Container Platform cluster uses a virtualized network for pod and service networks. The OVN-Kubernetes Container Network Interface (CNI) plug-in is a network provider for the default cluster network. OVN-Kubernetes, which is based on the Open Virtual Network (OVN), provides an overlay-based networking implementation. |
| 17 | + |
| 18 | +A cluster that uses the OVN-Kubernetes network provider also runs Open vSwitch (OVS) on each node. OVN configures OVS on each node to implement the declared network configuration. |
| 19 | + |
| 20 | +## OVN-Kubernetes features |
| 21 | + |
| 22 | +The OVN-Kubernetes CNI cluster network provider offers the following features: |
| 23 | + |
| 24 | +* Uses OVN to manage network traffic flows. OVN is a community developed, vendor-agnostic network virtualization solution. |
| 25 | +* Implements Kubernetes network policy support, including ingress and egress rules. |
| 26 | +* Uses the Generic Network Virtualization Encapsulation (Geneve) protocol rather than the Virtual Extensible LAN (VXLAN) protocol to create an overlay network between nodes. |
| 27 | + |
| 28 | +For more information about OVN-Kubernetes CNI network provider, see [About the OVN-Kubernetes default Container Network Interface (CNI) network provider](https://docs.openshift.com/container-platform/4.10/networking/ovn_kubernetes_network_provider/about-ovn-kubernetes.html). |
| 29 | + |
| 30 | +<!-- remove |
| 31 | +## Prerequisites |
| 32 | +
|
| 33 | +Complete the following prerequisites. |
| 34 | +### Install and use the preview Azure Command-Line Interface (CLI) |
| 35 | +
|
| 36 | +> [!NOTE] |
| 37 | +> The Azure CLI extension is required for the preview feature only. |
| 38 | +
|
| 39 | +If you choose to install and use the CLI locally, ensure you're running Azure CLI version 2.37.0 or later. Run `az --version` to find the version. For details on installing or upgrading Azure CLI, see [Install Azure CLI](/cli/azure/install-azure-cli). |
| 40 | +
|
| 41 | +1. Use the following URL to download both the Python wheel and the CLI extension: |
| 42 | +
|
| 43 | + [https://aka.ms/az-aroext-latest.whl](https://aka.ms/az-aroext-latest.whl) |
| 44 | +
|
| 45 | +2. Run the following command: |
| 46 | +
|
| 47 | +```azurecli-interactive |
| 48 | +az extension add --upgrade -s <path to downloaded .whl file> |
| 49 | +``` |
| 50 | +
|
| 51 | +3. Verify the CLI extension is being used: |
| 52 | +
|
| 53 | +```azurecli-interactive |
| 54 | +az extension list |
| 55 | +[ |
| 56 | + { |
| 57 | + "experimental": false, |
| 58 | + "extensionType": "whl", |
| 59 | + "name": "aro", |
| 60 | + "path": "<path may differ depending on system>", |
| 61 | + "preview": true, |
| 62 | + "version": "1.0.6" |
| 63 | + } |
| 64 | +] |
| 65 | +``` |
| 66 | +
|
| 67 | +4. Run the following command: |
| 68 | +
|
| 69 | +```azurecli-interactive |
| 70 | +az aro create --help |
| 71 | +``` |
| 72 | +
|
| 73 | +The result should show the `–sdn-type` option, as follows: |
| 74 | +
|
| 75 | +```json |
| 76 | +--sdn-type --software-defined-network-type : SDN type either "OpenShiftSDN" (default) or "OVNKubernetes". Allowed values: OVNKubernetes, OpenShiftSDN |
| 77 | +``` |
| 78 | +
|
| 79 | +## Create an Azure Red Hat OpenShift cluster with OVN as the network provider |
| 80 | +
|
| 81 | +The process to create an Azure Red Hat OpenShift cluster with OVN is exactly the same as the existing process explained in [Tutorial: Create an Azure Red Hat OpenShift 4 cluster](tutorial-create-cluster.md), with the following exception. You must also pass in the SDN type of `OVNKubernetes` in step 4 below. |
| 82 | +
|
| 83 | +The following high-level procedure outlines the steps to create an Azure Red Hat OpenShift cluster with OVN as the network provider: |
| 84 | +
|
| 85 | +1. Verify your permissions. |
| 86 | +2. Register the resource providers. |
| 87 | +3. Create a virtual network containing two empty subnets. |
| 88 | +4. Create an Azure Red Hat OpenShift cluster by using OVN CNI network provider. |
| 89 | +5. Verify the Azure Red Hat OpenShift cluster is using OVN CNI network provider. |
| 90 | +
|
| 91 | +
|
| 92 | +## Verify your permissions |
| 93 | +
|
| 94 | +Using OVN CNI network provider for Azure Red Hat OpenShift clusters requires you to create a resource group, which will contain the virtual network for the cluster. You must have either Contributor and User Access Administrator permissions or have Owner permissions either directly on the virtual network or on the resource group or subscription containing it. |
| 95 | +
|
| 96 | +You'll also need sufficient Azure Active Directory permissions (either a member user of the tenant, or a guest user assigned with role Application administrator) for the tooling to create an application and service principal on your behalf for the cluster. For more information about user roles, see [Member and guest users](../active-directory/fundamentals/users-default-permissions.md#member-and-guest-users) and [Assign administrator and non-administrator roles to users with Azure Active Directory](../active-directory/fundamentals/active-directory-users-assign-role-azure-portal.md). |
| 97 | +
|
| 98 | +## Register the resource providers |
| 99 | +
|
| 100 | +If you have multiple Azure subscriptions, you must register the resource providers. For information about the registration procedure, see [Register the resource providers](tutorial-create-cluster.md#register-the-resource-providers). |
| 101 | +
|
| 102 | +## Create a virtual network containing two empty subnets |
| 103 | +
|
| 104 | +If you have an existing virtual network that meets your needs, you can skip this step. To know the procedure of creating a virtual network, see [Create a virtual network containing two empty subnets](tutorial-create-cluster.md#create-a-virtual-network-containing-two-empty-subnets). |
| 105 | +
|
| 106 | +## Create an Azure Red Hat OpenShift cluster by using OVN-Kubernetes CNI network provider |
| 107 | +
|
| 108 | +Run the following command to create an Azure Red Hat OpenShift cluster that uses the OVN CNI network provider: |
| 109 | +
|
| 110 | +``` |
| 111 | +az aro create --resource-group $RESOURCEGROUP \ |
| 112 | + --name $CLUSTER \ |
| 113 | + --vnet aro-vnet \ |
| 114 | + --master-subnet master-subnet \ |
| 115 | + --worker-subnet worker-subnet \ |
| 116 | + --sdn-type OVNKubernetes \ |
| 117 | + --pull-secret @pull-secret.txt |
| 118 | +``` |
| 119 | +
|
| 120 | +## Verify an Azure Red Hat OpenShift cluster is using the OVN CNI network provider |
| 121 | +
|
| 122 | +After the cluster is successfully configured to use the OVN CNI network provider, sign in to your account and run the following command: |
| 123 | +
|
| 124 | +``` |
| 125 | +oc get network.config/cluster -o jsonpath='{.status.networkType}{"\n"}' |
| 126 | +``` |
| 127 | +
|
| 128 | +The value of `status.networkType` must be `OVNKubernetes`. |
| 129 | +
|
| 130 | +--> |
| 131 | +## Recommended content |
| 132 | + |
| 133 | +[Tutorial: Create an Azure Red Hat OpenShift 4 cluster](tutorial-create-cluster.md) |
0 commit comments