Goal

Provide a user-guide describing how to configure HCP, so it isolates tenant workers into their dedicated VLANs.

User Stories

• As an HCP customer, I want to connect my tenant clusters directly to the underlay VLAN to: Avoid double encapsulation, provide direct connectivity to and from my existing infrastructure, or to isolate my tenants using VLANs.

Non-Requirements

• <List of things not included in this epic, to alleviate any doubt raised during the grooming process.>

Notes

• Configuring this today requires lot of help from account teams and engineering.
• This request (tenants connecting to VLANs) is not uncommon.
• All we have today AFAIK is example of the API connecting tenant to a selected NAD.
• We should document something fuller, explain the use-case, show the NNCP, CUDN/NAD and NodePool configuration, explain how to handle control plane traffic and its own isolation.