Skip to content

VPC NAT UI screenshots and Guest cluster using Overlay Networks - #1085

Merged
rrajendran17 merged 32 commits into
harvester:mainfrom
rrajendran17:gc-overlaynetwork
Aug 13, 2026
Merged

rrajendran17 merged 32 commits into
harvester:mainfrom
rrajendran17:gc-overlaynetwork

Conversation

@rrajendran17

Copy link
Copy Markdown
Contributor

Problem:

document for guest cluster using overlay networks

Solution:

document for guest cluster using overlay networks

Related Issue(s):

harvester/harvester#9682

Test plan:

Additional documentation or context

@rrajendran17
rrajendran17 requested review from a team and jillian-maroket as code owners July 15, 2026 19:40
@rrajendran17
rrajendran17 requested a review from starbops July 15, 2026 19:40
@rrajendran17 rrajendran17 changed the title VPC NAT UI screenshots and Guest cluster using Overlay Networks Draft:VPC NAT UI screenshots and Guest cluster using Overlay Networks Jul 15, 2026
@github-actions

github-actions Bot commented Jul 15, 2026

Copy link
Copy Markdown
Name Link
🔨 Latest commit 18d8483
😎 Deploy Preview https://6a7c8e2f15d2ba947523e9ac--harvester-preview.netlify.app

@rrajendran17
rrajendran17 force-pushed the gc-overlaynetwork branch 5 times, most recently from 437ef52 to daa6ce9 Compare July 17, 2026 00:06
@rrajendran17 rrajendran17 changed the title Draft:VPC NAT UI screenshots and Guest cluster using Overlay Networks VPC NAT UI screenshots and Guest cluster using Overlay Networks Jul 17, 2026

@jillian-maroket jillian-maroket left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Review done for the new page. I'll go through the rest later.

---
sidebar_position: 11
sidebar_label: Guest Cluster using Overlay Network
title: "Guest Cluster using Overlay Network"

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
title: "Guest Cluster using Overlay Network"
title: "Guest Cluster Provisioning Using Underlay and Overlay Networks"

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If this title is appropriate, we can shorten it for the sidebar.

<link rel="canonical" href="https://docs.harvesterhci.io/v1.9/rancher/guest-cluster-overlay-network"/>
</head>

## Provisioning Downstream Kubernetes Clusters on Harvester Using Rancher and Kube-OVN Networking

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The subject of the page must be reflected in the title. This heading is not necessary. Please remove it.

Comment thread docs/rancher/guest-cluster-overlay-network.md Outdated
Comment thread docs/rancher/guest-cluster-overlay-network.md Outdated
Comment thread docs/rancher/guest-cluster-overlay-network.md Outdated
Comment thread docs/rancher/guest-cluster-overlay-network.md Outdated
Comment thread docs/rancher/guest-cluster-overlay-network.md Outdated

@jillian-maroket jillian-maroket left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@rrajendran17 I restructured some parts to make the procedures flow better.

Comment thread docs/networking/kubeovn-pureunderlay.md Outdated
Comment thread docs/networking/kubeovn-pureunderlay.md Outdated
Comment thread docs/networking/kubeovn-vpcnatgateway.md
Comment thread docs/networking/kubeovn-vpcnatgateway.md Outdated
Comment thread docs/networking/kubeovn-vpcnatgateway.md Outdated
Comment thread docs/networking/kubeovn-vpcnatgateway.md Outdated
Comment thread docs/networking/kubeovn-vpcnatgateway.md Outdated
Comment thread docs/networking/kubeovn-vpcnatgateway.md Outdated
Comment thread docs/networking/kubeovn-vpcnatgateway.md Outdated
Comment on lines +378 to +380
### SNAT for external connectivity from Overlay VMs

##### Create EIP and SNAT resource
#### Create EIP

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
### SNAT for external connectivity from Overlay VMs
##### Create EIP and SNAT resource
#### Create EIP
### SNAT Rules for Outbound Access (Overlay to External Networks)
#### Create an External IP

@rrajendran17
rrajendran17 force-pushed the gc-overlaynetwork branch 4 times, most recently from 6bfa449 to f07038f Compare July 24, 2026 18:03

@jillian-maroket jillian-maroket left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approving now so we can merge and close the related issue. Note that I found some issues (capitalization, punctuation, markup, etc.) but I prefer to create my own PR for such cleanup work.

@mergify

mergify Bot commented Jul 30, 2026

Copy link
Copy Markdown

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

  • Queue this pull request

@starbops starbops left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for the document update! I have a few nits below.

Comment thread docs/networking/kubeovn-pureunderlay.md Outdated
Comment thread docs/networking/kubeovn-vpcnatgateway.md Outdated
Comment thread docs/networking/kubeovn-vpcnatgateway.md Outdated
Comment thread docs/networking/kubeovn-vpcnatgateway.md Outdated
Comment thread docs/networking/kubeovn-vpcnatgateway.md Outdated
Comment thread docs/networking/kubeovn-vpcnatgateway.md Outdated
Comment thread docs/networking/kubeovn-vpcnatgateway.md Outdated
Comment thread docs/rancher/guest-cluster-kubeovn-network.md Outdated
Comment thread docs/rancher/guest-cluster-kubeovn-network.md Outdated

For VMs provisioned as downstream cluster nodes, ensure external connectivity is available by enabling DHCP and configuring dns_server=8.8.8.8 and natOutgoing=true on the subnet. This allows the VMs to obtain a default route and perform DNS resolution.

Since VMs attached to Kube-OVN overlay networks use private IP addresses, a route to the VM subnet must be configured on the rancher VM via the external IP used for SNAT/DNAT. This enables SSH access to the VM nodes from the Rancher UI.

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This line is a bit confusing. Do we need a route to the VM subnet installed on the Rancher VM, or have DNAT/SNAT configured for the VM subnet? Or both?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

A route is required for the private subnet with EIP (configured in the vpc nat gw) as nexthop.
I have rephrased the wording for better understanding in the latest commit.

rrajendran17 and others added 2 commits August 10, 2026 09:24
Co-authored-by: Jillian Maroket <67180770+jillian-maroket@users.noreply.github.com>
Signed-off-by: Renuka Devi Rajendran <renuka.rajendran@suse.com>
Co-authored-by: Jillian Maroket <67180770+jillian-maroket@users.noreply.github.com>
Signed-off-by: Renuka Devi Rajendran <renuka.rajendran@suse.com>
@rrajendran17
rrajendran17 force-pushed the gc-overlaynetwork branch 2 times, most recently from 6f0dfd5 to a0bb796 Compare August 10, 2026 16:55
Co-authored-by: Jillian Maroket <67180770+jillian-maroket@users.noreply.github.com>
Signed-off-by: Renuka Devi Rajendran <renuka.rajendran@suse.com>
starbops
starbops previously approved these changes Aug 11, 2026
@starbops

Copy link
Copy Markdown
Member

LGTM, thank you for the document updates!

@jillian-maroket jillian-maroket left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Review done

Comment thread docs/networking/kubeovn-vpcnatgateway.md Outdated
Comment thread docs/networking/kubeovn-vpcnatgateway.md Outdated
Comment thread docs/networking/kubeovn-vpcnatgateway.md Outdated
Comment thread docs/networking/kubeovn-vpcnatgateway.md Outdated
Comment thread docs/networking/kubeovn-vpcnatgateway.md Outdated
Comment thread docs/networking/kubeovn-vpcnatgateway.md Outdated
Comment thread docs/networking/kubeovn-vpcnatgateway.md Outdated
Comment thread docs/networking/kubeovn-vpcnatgateway.md Outdated
Comment thread docs/rancher/guest-cluster-kubeovn-network.md Outdated
Comment thread docs/rancher/guest-cluster-kubeovn-network.md Outdated
Co-authored-by: Jillian Maroket <67180770+jillian-maroket@users.noreply.github.com>
Signed-off-by: Renuka Devi Rajendran <renuka.rajendran@suse.com>
rrajendran17 and others added 12 commits August 12, 2026 08:08
Co-authored-by: Jillian Maroket <67180770+jillian-maroket@users.noreply.github.com>
Signed-off-by: Renuka Devi Rajendran <renuka.rajendran@suse.com>
Co-authored-by: Jillian Maroket <67180770+jillian-maroket@users.noreply.github.com>
Signed-off-by: Renuka Devi Rajendran <renuka.rajendran@suse.com>
Co-authored-by: Jillian Maroket <67180770+jillian-maroket@users.noreply.github.com>
Signed-off-by: Renuka Devi Rajendran <renuka.rajendran@suse.com>
Co-authored-by: Jillian Maroket <67180770+jillian-maroket@users.noreply.github.com>
Signed-off-by: Renuka Devi Rajendran <renuka.rajendran@suse.com>
Co-authored-by: Jillian Maroket <67180770+jillian-maroket@users.noreply.github.com>
Signed-off-by: Renuka Devi Rajendran <renuka.rajendran@suse.com>
Co-authored-by: Jillian Maroket <67180770+jillian-maroket@users.noreply.github.com>
Signed-off-by: Renuka Devi Rajendran <renuka.rajendran@suse.com>
Co-authored-by: Jillian Maroket <67180770+jillian-maroket@users.noreply.github.com>
Signed-off-by: Renuka Devi Rajendran <renuka.rajendran@suse.com>
Co-authored-by: Jillian Maroket <67180770+jillian-maroket@users.noreply.github.com>
Signed-off-by: Renuka Devi Rajendran <renuka.rajendran@suse.com>
Co-authored-by: Jillian Maroket <67180770+jillian-maroket@users.noreply.github.com>
Signed-off-by: Renuka Devi Rajendran <renuka.rajendran@suse.com>
Co-authored-by: Jillian Maroket <67180770+jillian-maroket@users.noreply.github.com>
Signed-off-by: Renuka Devi Rajendran <renuka.rajendran@suse.com>
Co-authored-by: Jillian Maroket <67180770+jillian-maroket@users.noreply.github.com>
Signed-off-by: Renuka Devi Rajendran <renuka.rajendran@suse.com>
@rrajendran17
rrajendran17 merged commit 661d6e0 into harvester:main Aug 13, 2026
4 checks passed
@rrajendran17
rrajendran17 deleted the gc-overlaynetwork branch August 13, 2026 01:12
@jillian-maroket jillian-maroket added the product-doc/added Content added to SUSE Virtualization doc label Aug 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

product-doc/added Content added to SUSE Virtualization doc

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants