{"id":128,"date":"2024-03-20T13:28:11","date_gmt":"2024-03-20T05:28:11","guid":{"rendered":"https:\/\/blog.bijiafeng.com\/?p=128"},"modified":"2024-03-20T13:28:11","modified_gmt":"2024-03-20T05:28:11","slug":"openshift-assisted-installer-networking-prerequisites","status":"publish","type":"post","link":"https:\/\/blog.bijiafeng.com\/?p=128","title":{"rendered":"Openshift Assisted Installer Networking prerequisites"},"content":{"rendered":"\n<p>A DHCP server unless using static IP addressing.<br>A base domain name.\u00a0<\/p>\n\n\n\n<p>The OpenShift Container Platform cluster\u2019s network must also meet the following requirements:<br>    <em>Connectivity between all cluster nodes<br>    Connectivity for each node to the internet<br>    Access to an NTP server for time synchronization between the cluster nodes<\/em><\/p>\n\n\n\n<p><strong>Example DNS zone database<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>$TTL 1W\n@\tIN\tSOA\tns1.example.com.\troot (\n\t\t\t2019070700\t; serial\n\t\t\t3H\t\t; refresh (3 hours)\n\t\t\t30M\t\t; retry (30 minutes)\n\t\t\t2W\t\t; expiry (2 weeks)\n\t\t\t1W )\t\t; minimum (1 week)\n\tIN\tNS\tns1.example.com.\n\tIN\tMX 10\tsmtp.example.com.\n;\n;\nns1.example.com.\t\tIN\tA\t192.168.1.1\nsmtp.example.com.\t\tIN\tA\t192.168.1.5\n;\nhelper.example.com.\t\tIN\tA\t192.168.1.5\n;\napi.ocp4.example.com.\t\tIN\tA\t192.168.1.5 <sup data-fn=\"862bd56b-1389-44ab-a33d-27326fa418b0\" class=\"fn\"><a href=\"#862bd56b-1389-44ab-a33d-27326fa418b0\" id=\"862bd56b-1389-44ab-a33d-27326fa418b0-link\">1<\/a><\/sup>\napi-int.ocp4.example.com.\tIN\tA\t192.168.1.5 <sup data-fn=\"21aa9ae8-a502-4d10-a048-0e5555b2d3cc\" class=\"fn\"><a href=\"#21aa9ae8-a502-4d10-a048-0e5555b2d3cc\" id=\"21aa9ae8-a502-4d10-a048-0e5555b2d3cc-link\">2<\/a><\/sup>\n;\n*.apps.ocp4.example.com.\tIN\tA\t192.168.1.5 <sup data-fn=\"9fffccbc-36f7-4198-857d-803a556fa915\" class=\"fn\"><a href=\"#9fffccbc-36f7-4198-857d-803a556fa915\" id=\"9fffccbc-36f7-4198-857d-803a556fa915-link\">3<\/a><\/sup>\n;\ncontrol-plane0.ocp4.example.com.\tIN\tA\t192.168.1.97 <sup data-fn=\"91934acd-985e-4941-b5cc-5f6cdf8c5900\" class=\"fn\"><a href=\"#91934acd-985e-4941-b5cc-5f6cdf8c5900\" id=\"91934acd-985e-4941-b5cc-5f6cdf8c5900-link\">4<\/a><\/sup>\ncontrol-plane1.ocp4.example.com.\tIN\tA\t192.168.1.98\ncontrol-plane2.ocp4.example.com.\tIN\tA\t192.168.1.99\n;\nworker0.ocp4.example.com.\tIN\tA\t192.168.1.11 <sup data-fn=\"c394ad9f-8a55-49c5-86da-450d28ea32b7\" class=\"fn\"><a href=\"#c394ad9f-8a55-49c5-86da-450d28ea32b7\" id=\"c394ad9f-8a55-49c5-86da-450d28ea32b7-link\">5<\/a><\/sup>\nworker1.ocp4.example.com.\tIN\tA\t192.168.1.7\n;\n;EOF<\/code><\/pre>\n\n\n<ol class=\"wp-block-footnotes\"><li id=\"862bd56b-1389-44ab-a33d-27326fa418b0\">Provides name resolution for the Kubernetes API. The record refers to the IP address of the API load balancer. <a href=\"#862bd56b-1389-44ab-a33d-27326fa418b0-link\" aria-label=\"Jump to footnote reference 1\">\u21a9\ufe0e<\/a><\/li><li id=\"21aa9ae8-a502-4d10-a048-0e5555b2d3cc\">Provides name resolution for the Kubernetes API. The record refers to the IP address of the API load balancer and is used for internal cluster communications. <a href=\"#21aa9ae8-a502-4d10-a048-0e5555b2d3cc-link\" aria-label=\"Jump to footnote reference 2\">\u21a9\ufe0e<\/a><\/li><li id=\"9fffccbc-36f7-4198-857d-803a556fa915\">Provides name resolution for the wildcard routes. The record refers to the IP address of the application ingress load balancer. The application ingress load balancer targets the machines that run the Ingress Controller pods. The Ingress Controller pods run on the worker machines by default. <a href=\"#9fffccbc-36f7-4198-857d-803a556fa915-link\" aria-label=\"Jump to footnote reference 3\">\u21a9\ufe0e<\/a><\/li><li id=\"91934acd-985e-4941-b5cc-5f6cdf8c5900\">Provides name resolution for the control plane machines. <a href=\"#91934acd-985e-4941-b5cc-5f6cdf8c5900-link\" aria-label=\"Jump to footnote reference 4\">\u21a9\ufe0e<\/a><\/li><li id=\"c394ad9f-8a55-49c5-86da-450d28ea32b7\">Provides name resolution for the worker machines. <a href=\"#c394ad9f-8a55-49c5-86da-450d28ea32b7-link\" aria-label=\"Jump to footnote reference 5\">\u21a9\ufe0e<\/a><\/li><\/ol>\n\n\n<p><strong>Example DNS zone database for reverse records<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>$$TTL 1W\n@\tIN\tSOA\tns1.example.com.\troot (\n\t\t\t2019070700\t; serial\n\t\t\t3H\t\t; refresh (3 hours)\n\t\t\t30M\t\t; retry (30 minutes)\n\t\t\t2W\t\t; expiry (2 weeks)\n\t\t\t1W )\t\t; minimum (1 week)\n\tIN\tNS\tns1.example.com.\n;\n5.1.168.192.in-addr.arpa.\tIN\tPTR\tapi.ocp4.example.com. \n5.1.168.192.in-addr.arpa.\tIN\tPTR\tapi-int.ocp4.example.com. \n;\n97.1.168.192.in-addr.arpa.\tIN\tPTR\tcontrol-plane0.ocp4.example.com. \n98.1.168.192.in-addr.arpa.\tIN\tPTR\tcontrol-plane1.ocp4.example.com.\n99.1.168.192.in-addr.arpa.\tIN\tPTR\tcontrol-plane2.ocp4.example.com.\n;\n11.1.168.192.in-addr.arpa.\tIN\tPTR\tworker0.ocp4.example.com. \n7.1.168.192.in-addr.arpa.\tIN\tPTR\tworker1.ocp4.example.com.\n;\n;EOF<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"<p>A DHCP server unless using static IP addressing.A base domain name.\u00a0 The OpenShift Container Platform cluster\u2019s network must also meet the following requirements: Connectivity between all cluster nodes Connectivity for each node to the internet Access to an NTP server for time synchronization between the cluster nodes Example DNS zone database Example DNS zone database [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"[{\"content\":\"Provides name resolution for the Kubernetes API. The record refers to the IP address of the API load balancer.\",\"id\":\"862bd56b-1389-44ab-a33d-27326fa418b0\"},{\"content\":\"Provides name resolution for the Kubernetes API. The record refers to the IP address of the API load balancer and is used for internal cluster communications.\",\"id\":\"21aa9ae8-a502-4d10-a048-0e5555b2d3cc\"},{\"content\":\"Provides name resolution for the wildcard routes. The record refers to the IP address of the application ingress load balancer. The application ingress load balancer targets the machines that run the Ingress Controller pods. The Ingress Controller pods run on the worker machines by default.\",\"id\":\"9fffccbc-36f7-4198-857d-803a556fa915\"},{\"content\":\"Provides name resolution for the control plane machines.\",\"id\":\"91934acd-985e-4941-b5cc-5f6cdf8c5900\"},{\"content\":\"Provides name resolution for the worker machines.\",\"id\":\"c394ad9f-8a55-49c5-86da-450d28ea32b7\"}]"},"categories":[17],"tags":[],"class_list":["post-128","post","type-post","status-publish","format-standard","hentry","category-openshift"],"_links":{"self":[{"href":"https:\/\/blog.bijiafeng.com\/index.php?rest_route=\/wp\/v2\/posts\/128","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.bijiafeng.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.bijiafeng.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.bijiafeng.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.bijiafeng.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=128"}],"version-history":[{"count":1,"href":"https:\/\/blog.bijiafeng.com\/index.php?rest_route=\/wp\/v2\/posts\/128\/revisions"}],"predecessor-version":[{"id":129,"href":"https:\/\/blog.bijiafeng.com\/index.php?rest_route=\/wp\/v2\/posts\/128\/revisions\/129"}],"wp:attachment":[{"href":"https:\/\/blog.bijiafeng.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=128"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.bijiafeng.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=128"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.bijiafeng.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=128"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}