Uploaded image for project: 'OpenShift Request For Enhancement'
  1. OpenShift Request For Enhancement
  2. RFE-7176

[Doc] Update the documentation to mention projects whitelist when constraints/compute.trustedImageProjects policy is enabled when deploying OSD on GCP

XMLWordPrintable

    • Icon: Feature Request Feature Request
    • Resolution: Done
    • Icon: Undefined Undefined
    • None
    • None
    • Installer
    • None
    • Product / Portfolio Work
    • None
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      1. Proposed title of this feature request

      [Doc] Update the documentation to mention projects whitelist when constraints/compute.trustedImageProjects policy is enabled when deploying OSD

      2. What is the nature and description of the request?

      Openshift dedicated installer should be able to pull images from redhat-marketplace-public and rhcos-cloud projects in order to create the Openshift nodes (msters and workers)
      When having constraint/compute.trustedImageProjects [1] policy enabled for a GCP organization, the installer will be prevented from accessing the Coreos images and thus the installer will fail.
      In order to successfully deploy the cluster, we should whitelist the projects: redhat-marketplace-public and rhcos-cloud in the constraints/compute.trustedImageProjects policy.

      We need to update the documentation to add a note about the projects whitelist.

      [1] https://cloud.google.com/compute/docs/images/restricting-image-access#trusted_images

      3. Why does the customer need this? (List the business requirements here)
      This is a requirement for the OSD cluster to successfully finish the install when constraints/compute.trustedImageProjects policy is enabled for an organization.

      4. List any affected packages or components.

      OSD installer on GCP

              rh-ee-smulkutk Shreyans Mulkutkar
              rhn-support-mtleilia Mohamed Tleilia
              None
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved:
                None
                None