Skip to content

Commit ca99b97

Browse files
authored
Merge pull request #33611 from skrthomas/OSDOCS1834
OSDOCS1834: Adding Ingress Global Access config topic to UPI/IPI GCP install
2 parents f49b121 + b3ba8a0 commit ca99b97

4 files changed

+63
-1
lines changed

installing/installing_gcp/installing-gcp-vpc.adoc

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -28,6 +28,9 @@ include::modules/installation-configuration-parameters.adoc[leveloffset=+2]
2828

2929
include::modules/installation-gcp-config-yaml.adoc[leveloffset=+2]
3030

31+
include::modules/nw-gcp-installing-global-access-configuration.adoc[leveloffset=+2]
32+
33+
3134
== Additional resources
3235

3336
* xref:../../machine_management/creating_machinesets/creating-machineset-gcp.adoc#machineset-enabling-customer-managed-encryption_creating-machineset-gcp[Enabling customer-managed encryption keys for a machine set]

installing/installing_gcp/installing-restricted-networks-gcp-installer-provisioned.adoc

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -45,6 +45,8 @@ include::modules/installation-configuration-parameters.adoc[leveloffset=+2]
4545

4646
include::modules/installation-gcp-config-yaml.adoc[leveloffset=+2]
4747

48+
include::modules/nw-gcp-installing-global-access-configuration.adoc[leveloffset=+2]
49+
4850
include::modules/installation-configure-proxy.adoc[leveloffset=+2]
4951

5052
include::modules/installation-launching-installer.adoc[leveloffset=+1]
Lines changed: 57 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,57 @@
1+
// Module included in the following assemblies:
2+
//
3+
// * installing/installing-gcp-vpc.adoc
4+
// * installing/installing-restricted-networks-gcp
5+
6+
[id="nw-gcp-global-access-configuration_{context}"]
7+
= Create an Ingress Controller with global access on GCP
8+
You can create an Ingress Controller with global access on a new GCP cluster when your. Global access is only available to Ingress Controllers using internal load balancers.
9+
10+
.Prerequisites
11+
12+
* You created the `install-config.yaml` and complete any modifications to it.
13+
14+
.Procedure
15+
16+
Create an Ingress Controller with global access on a new GCP cluster.
17+
18+
. Change to the directory that contains the installation program and create a manifest file:
19+
+
20+
[source,terminal]
21+
----
22+
$ ./openshift-install create manifests --dir=<installation_directory> <1>
23+
----
24+
<1> For `<installation_directory>`, specify the name of the directory that
25+
contains the `install-config.yaml` file for your cluster.
26+
+
27+
After creating the file, several network configuration files are in the
28+
`manifests/` directory, as shown:
29+
+
30+
[source,terminal]
31+
----
32+
$ ls <installation_directory>/manifests/cluster-ingress-default-ingresscontroller.yaml
33+
----
34+
+
35+
.Example output
36+
[source,terminal]
37+
----
38+
cluster-ingress-default-ingresscontroller.yaml
39+
----
40+
41+
. Open the `cluster-ingress-default-ingresscontroller.yaml` file in an editor and enter a custom resource (CR) that describes the Operator configuration you want:
42+
+
43+
.Sample `clientAccess` configuration to `Global`
44+
[source,yaml]
45+
----
46+
spec:
47+
endpointPublishingStrategy:
48+
loadBalancer:
49+
providerParameters:
50+
gcp:
51+
clientAccess: Global <1>
52+
type: GCP
53+
scope: Internal <2>
54+
type: LoadBalancerService
55+
----
56+
<1> Set `gcp.clientAccess` to `Global`.
57+
<2> Global access is only available to Ingress Controllers using internal load balancers.

modules/nw-ingress-controller-configuration-gcp-global-access.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -54,7 +54,7 @@ $ oc -n openshift-ingress-operator edit ingresscontroller/default
5454
+
5555
[source,terminal]
5656
----
57-
$ oc -n openshift-ingress operator edit svc/router-default -o yaml
57+
$ oc -n openshift-ingress edit svc/router-default -o yaml
5858
----
5959
+
6060
The output shows that global access is enabled for GCP with the annotation, `networking.gke.io/internal-load-balancer-allow-global-access`.

0 commit comments

Comments
 (0)