Uploaded image for project: 'OpenShift Container Platform (OCP) Strategy'
  1. OpenShift Container Platform (OCP) Strategy
  2. OCPSTRAT-1626

Solve outbound access for VMs in Azure after Azdeprecation

XMLWordPrintable

    • BU Product Work
    • False
    • Hide

      None

      Show
      None
    • False
    • 100% To Do, 0% In Progress, 0% Done
    • 0

      Feature Overview (aka. Goal Summary)  

      Microsoft is planning to  retire default outbound access connectivity for all new virtual machines in Azure. Once this takes effect no Nodes in OCP deployed in Azure will have outbound connectivity unless this is configured explicitely.

      This feature will tackle this deprecation notice from Microsoft and plan a long term solution for OpenShift once this new "policy" is applied in Azure

      Goals (aka. expected user outcomes)

      Find a solution to replace the existing default behaviour today on Azure for VMs outbound traffic that will impact future OpenShift clusters on Azure

      Requirements (aka. Acceptance Criteria):

      This needs to be solved not only for new OpenShift Clusters but also for existing ones. While existing clusters are not going to be affected straightaway (existing VMs won't loose outbound access) they will get impacted as any new Node added to the cluster won't get outbound access by default.

       

      Anyone reviewing this Feature needs to know which deployment configurations that the Feature will apply to (or not) once it's been completed.  Describe specific needs (or indicate N/A) for each of the following deployment scenarios. For specific configurations that are out-of-scope for a given release, ensure you provide the OCPSTRAT (for the future to be supported configuration) as well.

      Deployment considerations List applicable specific needs (N/A = not applicable)
      Self-managed, managed, or both  
      Classic (standalone cluster)  
      Hosted control planes  
      Multi node, Compact (three node), or Single node (SNO), or all  
      Connected / Restricted Network  
      Architectures, e.g. x86_x64, ARM (aarch64), IBM Power (ppc64le), and IBM Z (s390x)  
      Operator compatibility  
      Backport needed (list applicable versions)  
      UI need (e.g. OpenShift Console, dynamic plugin, OCM)  
      Other (please specify)  

      Background

      https://azure.microsoft.com/en-us/updates/default-outbound-access-for-vms-in-azure-will-be-retired-updates-and-more-information/

      Documentation Considerations

      Is it not clear yet that user facing documentation would be required after this change

       

            mak.redhat.com Marcos Entenza Garcia
            mak.redhat.com Marcos Entenza Garcia
            Joel Speed, Patrick Dillon
            Stephanie Stout Stephanie Stout
            Patrick Dillon Patrick Dillon
            Marcos Entenza Garcia Marcos Entenza Garcia
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated: