-
Epic
-
Resolution: Done
-
Major
-
None
-
None
-
Add Azure NAT Gateway support for Control Plane
-
BU Product Work
-
False
-
None
-
False
-
Yellow
-
Done
-
OCPSTRAT-578 - Add support to NAT Gateway as outboundType for clusters in Azure (Technology Preview)
-
OCPSTRAT-578Add support to NAT Gateway as outboundType for clusters in Azure (Technology Preview)
-
0% To Do, 0% In Progress, 100% Done
-
Epic Goal
- Control Plane hosts should allow NAT Gateway for Internet egress for purposes of pulling images etc
Why is this important?
- Our current architecture is limited to the Azure feature set from when OCP 4.x went GA on Azure and NAT Gateways were not an option
- Today the preferred solution is to use a NAT Gateway for egress, see https://learn.microsoft.com/en-us/azure/load-balancer/load-balancer-outbound-connections#scenarios
Scenarios
- Install a new cluster, control plane hosts access the Internet via NAT Gateway rather than via the public load balancer
- Install a new cluster, with user defined routing, control plane hosts access Internet via previously available UDR
- Upgraded clusters maintain their existing architecture
Acceptance Criteria
- CI - MUST be running successfully with tests automated
- Release Technical Enablement - Provide necessary release enablement details and documents.
- ...
Open questions::
- Control plane hosts are a must, but likely should just NAT gateway for all, need to understand pros/cons of doing so
- It'd be nice to understand what a potential migration for legacy clusters to the new architecture looks like and what options we have to automate that in a non disruptive manner.
Done Checklist
- CI - CI is running, tests are automated and merged.
- Release Enablement <link to Feature Enablement Presentation>
- DEV - Upstream code and tests merged: <link to meaningful PR or GitHub Issue>
- DEV - Upstream documentation merged: <link to meaningful PR or GitHub Issue>
- DEV - Downstream build attached to advisory: <link to errata>
- QE - Test plans in Polarion: <link or reference to Polarion>
- QE - Automated tests merged: <link or reference to automated tests>
- DOC - Downstream documentation merged: <link to meaningful PR>