Skip to content

Commit f0477c1

Browse files
authored
Merge pull request #91562 from JoeAldinger/OSDOCS-10661-4.15
[enterprise-4.15] OSDOCS-10661-4.15:gateway mode added to migration procedure
2 parents c71a3e4 + 16c14ce commit f0477c1

File tree

2 files changed

+44
-3
lines changed

2 files changed

+44
-3
lines changed

modules/checking-cluster-resources-before-initiating-limited-live-migration.adoc

Lines changed: 40 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -133,4 +133,43 @@ $ oc get networkpolicy -n <namespace>
133133
----
134134
NAME POD-SELECTOR AGE
135135
allow-multicast app=my-app 11m
136-
----
136+
----
137+
138+
. Optional: If your cluster uses static routes or routing policies in the host network, set `routingViaHost` spec to `true` and the `ipForwarding` spec to `Global` in the `gatewayConfig` object during migration.
139+
+
140+
[source,terminal]
141+
----
142+
$ oc patch Network.operator.openshift.io cluster --type=merge \
143+
--patch '{
144+
"spec":{
145+
"defaultNetwork":{
146+
"ovnKubernetesConfig":{
147+
"gatewayConfig": {
148+
"ipForwarding": "Global",
149+
"routingViaHost": true
150+
}}}}}'
151+
----
152+
153+
.. Verify that the `ipForwarding` spec has been set to `Global` and the `routingViaHost` spec to `true` by running the following command:
154+
+
155+
[source,terminal]
156+
----
157+
$ oc get networks.operator.openshift.io cluster -o yaml | grep -A 5 "gatewayConfig"
158+
----
159+
+
160+
.Example output
161+
[source,terminal]
162+
----
163+
apiVersion: operator.openshift.io/v1
164+
kind: Network
165+
metadata:
166+
name: cluster
167+
# ...
168+
gatewayConfig:
169+
ipForwarding: Global
170+
ipv4: {}
171+
ipv6: {}
172+
routingViaHost: true
173+
genevePort: 6081
174+
# ...
175+
----

modules/nw-ovn-kubernetes-live-migration-about.adoc

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@
55
[id="nw-ovn-kubernetes-live-migration-about_{context}"]
66
= Limited live migration to the OVN-Kubernetes network plugin overview
77

8-
The limited live migration method is the process in which the OpenShift SDN network plugin and its network configurations, connections, and associated resources, are migrated to the OVN-Kubernetes network plugin without service interruption. For {product-title} 4.15, it is available for versions 4.15.31 and later. It is the preferred method for migrating from OpenShift SDN to OVN-Kubernetes. In the event that you cannot perform a limited live migration, you can use the offline migration method.
8+
The limited live migration method is the process in which the OpenShift SDN network plugin and its network configurations, connections, and associated resources, are migrated to the OVN-Kubernetes network plugin without service interruption. For {product-title} 4.15, it is available for versions 4.15.31 and later. It is the preferred method for migrating from OpenShift SDN to OVN-Kubernetes. In the event that you cannot perform a limited live migration, you can use the offline migration method.
99

1010
[IMPORTANT]
1111
====
@@ -98,4 +98,6 @@ During the limited live migration, both OVN-Kubernetes and OpenShift SDN run in
9898

9999
* Like OpenShift SDN, OVN-Kubernetes resources such as `EgressFirewall` resources require `ClusterAdmin` privileges. Migrating from OpenShift SDN to OVN-Kubernetes does not automatically update role-base access control (RBAC) resources. OpenShift SDN resources granted to a project administrator through the `aggregate-to-admin` `ClusterRole` must be manually reviewed and adjusted, as these changes are not included in the migration process.
100100
+
101-
After migration, manual verification of RBAC resources is required. For information about setting the `aggregate-to-admin` ClusterRole after migration, see the example in link:https://access.redhat.com/solutions/6117301[How to allow project admins to manage Egressfirewall resources in RHOCP4].
101+
After migration, manual verification of RBAC resources is required. For information about setting the `aggregate-to-admin` ClusterRole after migration, see the example in link:https://access.redhat.com/solutions/6117301[How to allow project admins to manage Egressfirewall resources in RHOCP4].
102+
103+
* When a cluster depends on static routes or routing policies in the host network so that pods can reach some destinations, users should set `routingViaHost` spec to `true` and `ipForwarding` to `Global` in the `gatewayConfig` object during migration. This will offload routing decision to host kernel. For more information, see link:https://access.redhat.com/solutions/7070870[Recommended practice to follow before Openshift SDN network plugin migration to OVNKubernetes plugin] (Red Hat Knowledgebase) and, see step five in "Checking cluster resources before initiating the limited live migration".

0 commit comments

Comments
 (0)