Skip to content

Commit d611349

Browse files
authored
Merge pull request #72354 from JoeAldinger/OCPBUGS-21726
/lgtm OCPBUGS-21726:moves verification step into procedure module
2 parents 931622e + ad0523a commit d611349

File tree

4 files changed

+44
-50
lines changed

4 files changed

+44
-50
lines changed

modules/nw-ovn-ipsec-enable.adoc

Lines changed: 44 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -44,3 +44,47 @@ where:
4444
--
4545

4646
. Optional: If you need to encrypt traffic to external hosts, complete the "Configuring IPsec encryption for external traffic" procedure.
47+
48+
.Verification
49+
50+
. To find the names of the OVN-Kubernetes data plane pods, enter the following command:
51+
+
52+
[source,terminal]
53+
----
54+
$ oc get pods -n openshift-ovn-kubernetes -l=app=ovnkube-node
55+
----
56+
+
57+
.Example output
58+
[source,terminal]
59+
----
60+
ovnkube-node-5xqbf 8/8 Running 0 28m
61+
ovnkube-node-6mwcx 8/8 Running 0 29m
62+
ovnkube-node-ck5fr 8/8 Running 0 31m
63+
ovnkube-node-fr4ld 8/8 Running 0 26m
64+
ovnkube-node-wgs4l 8/8 Running 0 33m
65+
ovnkube-node-zfvcl 8/8 Running 0 34m
66+
----
67+
68+
. Verify that IPsec is enabled on your cluster by running the following command:
69+
+
70+
[NOTE]
71+
====
72+
As a cluster administrator, you can verify that IPsec is enabled between pods on your cluster when IPsec is configured in `Full` mode. This step does not verify whether IPsec is working between your cluster and external hosts.
73+
====
74+
+
75+
[source,terminal]
76+
----
77+
$ oc -n openshift-ovn-kubernetes rsh ovnkube-node-<XXXXX> ovn-nbctl --no-leader-only get nb_global . ipsec
78+
----
79+
+
80+
--
81+
where:
82+
83+
`<XXXXX>`:: Specifies the random sequence of letters for a pod from the previous step.
84+
--
85+
+
86+
.Example output
87+
[source,text]
88+
----
89+
true
90+
----

modules/nw-ovn-ipsec-verification.adoc

Lines changed: 0 additions & 48 deletions
This file was deleted.

networking/ovn_kubernetes_network_provider/configuring-ipsec-ovn.adoc

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -63,7 +63,6 @@ include::modules/nw-ovn-ipsec-external.adoc[leveloffset=+1]
6363
include::modules/nw-ovn-ipsec-enable.adoc[leveloffset=+1]
6464
include::modules/nw-ovn-ipsec-north-south-enable.adoc[leveloffset=+1]
6565

66-
include::modules/nw-ovn-ipsec-verification.adoc[leveloffset=+1]
6766
include::modules/nw-ovn-ipsec-north-south-disable.adoc[leveloffset=+1]
6867
include::modules/nw-ovn-ipsec-disable.adoc[leveloffset=+1]
6968

post_installation_configuration/network-configuration.adoc

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -71,7 +71,6 @@ IPsec is disabled by default.
7171
- Your cluster must use the OVN-Kubernetes network plugin.
7272

7373
include::modules/nw-ovn-ipsec-enable.adoc[leveloffset=+3]
74-
include::modules/nw-ovn-ipsec-verification.adoc[leveloffset=+3]
7574

7675
[id="post-install-configuring-network-policy"]
7776
== Configuring network policy

0 commit comments

Comments
 (0)