Skip to content

Commit 8993749

Browse files
authored
Merge pull request #57297 from dfitzmau/OSDOCS-5380-new
OSDOCS-5380: Documented configuring external LB for multiple subnets
2 parents 5478548 + 655a386 commit 8993749

File tree

1 file changed

+50
-8
lines changed

1 file changed

+50
-8
lines changed

modules/nw-osp-configuring-external-load-balancer.adoc

Lines changed: 50 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,40 @@
33
// * networking/TBD
44
// * networking/load-balancing-openstack.adoc
55
// * installing/installing_bare_metal_ipi/ipi-install-post-installation-configuration.adoc jowilkin
6-
// For thinking and reviewing, adding to networking/load-balancing-openstack.adoc
6+
// * installing/installing-vsphere-installer-provisioned.adoc
7+
// * installing/installing-vsphere-installer-provisioned-customizations.adoc
8+
// * installing/installing-vsphere-installer-provisioned-network-customizations.adoc
9+
// * installing/installing-restricted-networks-installer-provisioned-vsphere.adoc
10+
// * installing_vmc/installing-vmc.adoc
11+
// * installing_vmc/installing-vmc-customizations.adoc
12+
// * installing_vmc/installing-vmc-network-customizations.adoc
13+
// * installing_vmc/installing-restricted-networks-vmc.adoc
14+
15+
16+
ifeval::["{context}" == "installing-vsphere-installer-provisioned"]
17+
:vsphere:
18+
endif::[]
19+
ifeval::["{context}" == "installing-vsphere-installer-provisioned-customizations"]
20+
:vsphere:
21+
endif::[]
22+
ifeval::["{context}" == "installing-vsphere-installer-provisioned-network-customizations"]
23+
:vsphere:
24+
endif::[]
25+
ifeval::["{context}" == installing-restricted-networks-installer-provisioned-vsphere]
26+
:vsphere:
27+
endif::[]
28+
ifeval::["{context}" == "installing-vmc"]
29+
:vmc:
30+
endif::[]
31+
ifeval::["{context}" == "installing-vmc-customizations"]
32+
:vmc:
33+
endif::[]
34+
ifeval::["{context}" == "installing-vmc-network-customizations"]
35+
:vmc:
36+
endif::[]
37+
ifeval::["{context}" == "installing-restricted-networks-vmc"]
38+
:vmc:
39+
endif::[]
740

841
:_content-type: PROCEDURE
942
[id="nw-osp-configuring-external-load-balancer_{context}"]
@@ -15,23 +48,32 @@ on {rh-openstack-first}
1548
endif::[]
1649
to use an external load balancer in place of the default load balancer.
1750

18-
// Maybe an About mod in support
51+
You can also configure an {product-title} cluster to use an external load balancer that supports multiple subnets. If you use multiple subnets, you can explicitly list all the IP addresses in any networks that are used by your load balancer targets. This configuration can reduce maintenance overhead because you can create and destroy nodes within those networks without reconfiguring the load balancer targets.
1952

53+
If you deploy your ingress pods by using a machine set on a smaller network, such as a `/27` or `/28`, you can simplify your load balancer targets.
2054

55+
[NOTE]
56+
====
57+
You do not need to specify API and Ingress static addresses for your installation program. If you choose this configuration, you must take additional actions to define network targets that accept an IP address from each referenced vSphere subnet.
58+
====
2159

2260
.Prerequisites
2361

24-
* On your load balancer, TCP over ports 6443, 443, and 80 must be available to any users of your system.
62+
* On your load balancer, TCP over ports 6443, 443, and 80 must be reachable by all users of your system that are located outside the cluster.
2563
26-
* Load balance the API port, 6443, between each of the control plane nodes.
64+
* Load balance the application ports, 443 and 80, between all the compute nodes.
2765
28-
* Load balance the application ports, 443 and 80, between all of the compute nodes.
66+
* Load balance the API port, 6443, between each of the control plane nodes.
2967
3068
* On your load balancer, port 22623, which is used to serve ignition startup configurations to nodes, is not exposed outside of the cluster.
3169
32-
* Your load balancer must be able to access every machine in your cluster. Methods to allow this access include:
33-
** Attaching the load balancer to the cluster's machine subnet.
34-
** Attaching floating IP addresses to machines that use the load balancer.
70+
* Your load balancer can access the required ports on each node in your cluster. You can ensure this level of access by completing the following actions:
71+
** The API load balancer can access ports 22623 and 6443 on the control plane nodes.
72+
** The ingress load balancer can access ports 443 and 80 on the nodes where the ingress pods are located.
73+
74+
ifdef::vsphere,vmc[]
75+
* Optional: If you are using multiple networks, you can create targets for every IP address in the network that can host nodes. This configuration can reduce the maintenance overhead of your cluster.
76+
endif::vsphere,vmc[]
3577

3678
[IMPORTANT]
3779
====

0 commit comments

Comments
 (0)