Uploaded image for project: 'OpenShift Specialist Platform Team'
  1. OpenShift Specialist Platform Team
  2. SPLAT-1432

[aws][BYO-IPv4] Implement BYO Public IPv4 Pool support on Installer (Terraform)

Details

    • A[aws][BYO-IPv4] Implement BYO Public IPv4 Pool support on Installer (Terraform)
    • 12
    • False
    • None
    • False
    • Not Selected
    • To Do
    • OCPSTRAT-1154 - AWS Public IPv4 Address cost mitigation
    • OCPSTRAT-1154AWS Public IPv4 Address cost mitigation
    • 33
    • 33% 33%
    • S
    • Hide

      C/I/T: 7/5/12

      Show
      C/I/T: 7/5/12

    Description

      Epic Goal

      • Implement support in the install config to receive a Public IPv4 Pool ID and create resources* which consumes Public IP when publish strategy is "External".
      • The implementation must cover the installer changes in Terraform to provision the infrastructure

      *Resources which consumes public IPv4: bootstrap, API Public NLB, Nat Gateways

      Why is this important?

      • The default OpenShift installation on AWS uses multiple IPv4 public IPs which Amazon will start charging for starting in February 2024. 

      Scenarios

      1. As a customer with BYO Public IPv4 pools in AWS, I would like to install OpenShift cluster on AWS consuming public IPs for my own CIDR blocks, so I can have control of IPs used by my the services provided by me and will not be impacted by AWS Public IPv4 charges
      2.  

      Acceptance Criteria

      • CI - MUST be running successfully with tests automated
      • Release Technical Enablement - Provide necessary release enablement details and documents.
      • ...

      Dependencies (internal and external)

      1. ...

      Previous Work (Optional):

      Open questions::

      1. Will the terraform implementation be backported to supported releases to be used in CI for previous e2e test infra?
      2. Is there a method to use the pool by default for all Public IPv4 claims from a given VPC/workload? So the implementation doesn't need to create EIP and associations for each resource and subnet/zone.

      Done Checklist

      • CI - CI is running, tests are automated and merged.
      • Release Enablement <link to Feature Enablement Presentation>
      • DEV - Upstream code and tests merged: <link to meaningful PR or GitHub Issue>
      • DEV - Upstream documentation merged: <link to meaningful PR or GitHub Issue>
      • DEV - Downstream build attached to advisory: <link to errata>
      • QE - Test plans in Polarion: <link or reference to Polarion>
      • QE - Automated tests merged: <link or reference to automated tests>
      • DOC - Downstream documentation merged: <link to meaningful PR>

      Attachments

        Issue Links

          Activity

            People

              rhn-support-mrbraga Marco Braga
              rhn-support-mrbraga Marco Braga
              Yunfei Jiang Yunfei Jiang
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated: