|
1 | 1 | // Module included in the following assemblies: |
2 | 2 | // |
3 | | -// * networking/cluster-network-operator.adoc |
4 | 3 | // * installing/installing_aws/installing-aws-network-customizations.adoc |
5 | 4 | // * installing/installing_azure/installing-azure-network-customizations.adoc |
6 | 5 | // * installing/installing_bare_metal/installing-bare-metal-network-customizations.adoc |
| 6 | +// * installing/installing_gcp/installing-gcp-network-customizations.adoc |
| 7 | +// * installing/installing_ibm_power/installing-ibm-power.adoc |
| 8 | +// * installing/installing_ibm_power/installing-restricted-networks-ibm-power.adoc |
| 9 | +// * installing/installing_ibm_z/installing-ibm-z-kvm.adoc |
| 10 | +// * installing/installing_ibm_z/installing-ibm-z.adoc |
| 11 | +// * installing/installing_ibm_z/installing-restricted-networks-ibm-z-kvm.adoc |
| 12 | +// * installing/installing_ibm_z/installing-restricted-networks-ibm-z.adoc |
7 | 13 | // * installing/installing_vmc/installing-vmc-network-customizations-user-infra.adoc |
8 | 14 | // * installing/installing_vmc/installing-vmc-network-customizations.adoc |
9 | | -// * installing/installing_vsphere/installing-vsphere-network-customizations.adoc |
10 | 15 | // * installing/installing_vsphere/installing-vsphere-installer-provisioned-network-customizations.adoc |
11 | | -// * installing/installing_gcp/installing-gcp-network-customizations.adoc |
| 16 | +// * installing/installing_vsphere/installing-vsphere-network-customizations.adoc |
| 17 | +// * networking/cluster-network-operator.adoc |
| 18 | +// * networking/network_policy/logging-network-policy.adoc |
12 | 19 | // * post_installation_configuration/network-configuration.adoc |
13 | | -// * installing/installing_ibm_z/installing-ibm-z.adoc |
14 | | -// * installing/installing_ibm_z/installing-ibm-z-kvm.adoc |
15 | | -// * installing/installing_ibm_z/installing-restricted-networks-ibm-z.adoc |
16 | | -// * installing/installing_ibm_z/installing-restricted-networks-ibm-z-kvm.adoc |
17 | | -// * installing/installing_ibm_power/installing-ibm-power.adoc |
18 | | -// * installing/installing_ibm_power/installing-restricted-networks-ibm-power.adoc |
19 | 20 |
|
20 | 21 | // Installation assemblies need different details than the CNO operator does |
21 | 22 | ifeval::["{context}" == "cluster-network-operator"] |
@@ -268,6 +269,14 @@ endif::operator[] |
268 | 269 | |`object` |
269 | 270 | |Specify a configuration object for customizing network policy audit logging. If unset, the defaults audit log settings are used. |
270 | 271 |
|
| 272 | +|`gatewayConfig` |
| 273 | +|`object` |
| 274 | +|Optional: Specify a configuration object for customizing how egress traffic is sent to the node gateway. |
| 275 | + |
| 276 | +[NOTE] |
| 277 | +==== |
| 278 | + While migrating egress traffic, you can expect some disruption to workloads and service traffic until the Cluster Network Operator (CNO) successfully rolls out the changes. |
| 279 | +==== |
271 | 280 | |==== |
272 | 281 |
|
273 | 282 | // tag::policy-audit[] |
@@ -301,8 +310,25 @@ One of the following additional audit log targets: |
301 | 310 | |==== |
302 | 311 | // end::policy-audit[] |
303 | 312 |
|
| 313 | +.`gatewayConfig` object |
| 314 | +[cols=".^2,.^2,.^6a",options="header"] |
| 315 | +|==== |
| 316 | +|Field|Type|Description |
| 317 | + |
| 318 | +|`routingViaHost` |
| 319 | +|`boolean` |
| 320 | +|Set this field to `true` to send egress traffic from pods to the host networking stack. |
| 321 | +For highly-specialized installations and applications that rely on manually configured routes in the kernel routing table, you might want to route egress traffic to the host networking stack. |
| 322 | +By default, egress traffic is processed in OVN to exit the cluster and is not affected by specialized routes in the kernel routing table. |
| 323 | +The default value is `false`. |
| 324 | + |
| 325 | +This field has an interaction with the Open vSwitch hardware offloading feature. |
| 326 | +If you set this field to `true`, you do not receive the performance benefits of the offloading because egress traffic is processed by the host networking stack. |
| 327 | + |
| 328 | +|==== |
| 329 | + |
304 | 330 | ifdef::operator[] |
305 | | -NOTE: You can only change the configuration for your cluster network provider during cluster installation. |
| 331 | +NOTE: You can only change the configuration for your cluster network provider during cluster installation, except for the `gatewayConfig` field that can be changed at runtime as a post-installation activity. |
306 | 332 | endif::operator[] |
307 | 333 |
|
308 | 334 | .Example OVN-Kubernetes configuration |
|
0 commit comments