-
Feature
-
Resolution: Done
-
Critical
-
None
-
Strategic Portfolio Work
-
False
-
False
-
OCPSTRAT-848Consistent Ingress/Egress into OpenShift clusters across providers
-
17% To Do, 0% In Progress, 83% Done
-
S
-
0
Feature Overview (aka. Goal Summary)
Extend the actual Installer's capabilities while deploying OCP on a GCP shared VPC (XPN) adding support to BYO hosted zones and removing the SA requirements in the bootstrap process.
Goals (aka. expected user outcomes)
While deploying OpenShift to a shared VPC (XPN) in GCP, the user can bring their own DNS zone where to create the required records for the API server and Ingress and no additional SA will be required to bootstrap the cluster.
Requirements (aka. Acceptance Criteria):
The user can provide an existing DNS zone when deploying OpenShift to a shared VPC (XPN) in GCP that will be used to host the required DNS records for the API server and Ingress. At the same time, the SA today's requirements will be removed.
Background
While adding support to shared VPC (XPN) deployments in GCP the BYO hosted zone capability was removed CORS-2474 due to multiple issues found during the QE phase validation for the the feature. At that time there was no evidence from customers/users on this being required for the shared VPC use case and this capability was removed in order to declare this feature GA.
We now have evidence from this specific use case being required by users.
Documentation Considerations
Documentation about using this capability while deploying OpenShift to a shared VPC will be required.
- is related to
-
OCPBUGS-15421 GCP XPN Installs fail when authenticating with CLI
- Closed
-
OCPBUGS-11736 GCP XPN Installs Require bindPrivateDNSZone Permission in host project
- Closed
-
OCPSTRAT-1182 Enable OCP on GCP XPN deployments to support DNS Zones in a third separated project
- New
- links to