VPC NAT UI screenshots and Guest cluster using Overlay Networks - #1085
Conversation
|
437ef52 to
daa6ce9
Compare
| --- | ||
| sidebar_position: 11 | ||
| sidebar_label: Guest Cluster using Overlay Network | ||
| title: "Guest Cluster using Overlay Network" |
There was a problem hiding this comment.
| title: "Guest Cluster using Overlay Network" | |
| title: "Guest Cluster Provisioning Using Underlay and Overlay Networks" |
There was a problem hiding this comment.
If this title is appropriate, we can shorten it for the sidebar.
| <link rel="canonical" href="https://docs.harvesterhci.io/v1.9/rancher/guest-cluster-overlay-network"/> | ||
| </head> | ||
|
|
||
| ## Provisioning Downstream Kubernetes Clusters on Harvester Using Rancher and Kube-OVN Networking |
There was a problem hiding this comment.
The subject of the page must be reflected in the title. This heading is not necessary. Please remove it.
bd2e10c to
2edb74d
Compare
jillian-maroket
left a comment
There was a problem hiding this comment.
@rrajendran17 I restructured some parts to make the procedures flow better.
| ### SNAT for external connectivity from Overlay VMs | ||
|
|
||
| ##### Create EIP and SNAT resource | ||
| #### Create EIP |
There was a problem hiding this comment.
| ### SNAT for external connectivity from Overlay VMs | |
| ##### Create EIP and SNAT resource | |
| #### Create EIP | |
| ### SNAT Rules for Outbound Access (Overlay to External Networks) | |
| #### Create an External IP |
6bfa449 to
f07038f
Compare
jillian-maroket
left a comment
There was a problem hiding this comment.
Approving now so we can merge and close the related issue. Note that I found some issues (capitalization, punctuation, markup, etc.) but I prefer to create my own PR for such cleanup work.
|
Tick the box to add this pull request to the merge queue (same as
|
starbops
left a comment
There was a problem hiding this comment.
Thank you for the document update! I have a few nits below.
|
|
||
| For VMs provisioned as downstream cluster nodes, ensure external connectivity is available by enabling DHCP and configuring dns_server=8.8.8.8 and natOutgoing=true on the subnet. This allows the VMs to obtain a default route and perform DNS resolution. | ||
|
|
||
| Since VMs attached to Kube-OVN overlay networks use private IP addresses, a route to the VM subnet must be configured on the rancher VM via the external IP used for SNAT/DNAT. This enables SSH access to the VM nodes from the Rancher UI. |
There was a problem hiding this comment.
This line is a bit confusing. Do we need a route to the VM subnet installed on the Rancher VM, or have DNAT/SNAT configured for the VM subnet? Or both?
There was a problem hiding this comment.
A route is required for the private subnet with EIP (configured in the vpc nat gw) as nexthop.
I have rephrased the wording for better understanding in the latest commit.
65723a5 to
5104125
Compare
Co-authored-by: Jillian Maroket <67180770+jillian-maroket@users.noreply.github.com> Signed-off-by: Renuka Devi Rajendran <renuka.rajendran@suse.com>
Co-authored-by: Jillian Maroket <67180770+jillian-maroket@users.noreply.github.com> Signed-off-by: Renuka Devi Rajendran <renuka.rajendran@suse.com>
6f0dfd5 to
a0bb796
Compare
Co-authored-by: Jillian Maroket <67180770+jillian-maroket@users.noreply.github.com> Signed-off-by: Renuka Devi Rajendran <renuka.rajendran@suse.com>
a0bb796 to
18c71c7
Compare
|
LGTM, thank you for the document updates! |
Co-authored-by: Jillian Maroket <67180770+jillian-maroket@users.noreply.github.com> Signed-off-by: Renuka Devi Rajendran <renuka.rajendran@suse.com>
Co-authored-by: Jillian Maroket <67180770+jillian-maroket@users.noreply.github.com> Signed-off-by: Renuka Devi Rajendran <renuka.rajendran@suse.com>
Co-authored-by: Jillian Maroket <67180770+jillian-maroket@users.noreply.github.com> Signed-off-by: Renuka Devi Rajendran <renuka.rajendran@suse.com>
Co-authored-by: Jillian Maroket <67180770+jillian-maroket@users.noreply.github.com> Signed-off-by: Renuka Devi Rajendran <renuka.rajendran@suse.com>
Co-authored-by: Jillian Maroket <67180770+jillian-maroket@users.noreply.github.com> Signed-off-by: Renuka Devi Rajendran <renuka.rajendran@suse.com>
Co-authored-by: Jillian Maroket <67180770+jillian-maroket@users.noreply.github.com> Signed-off-by: Renuka Devi Rajendran <renuka.rajendran@suse.com>
Co-authored-by: Jillian Maroket <67180770+jillian-maroket@users.noreply.github.com> Signed-off-by: Renuka Devi Rajendran <renuka.rajendran@suse.com>
Co-authored-by: Jillian Maroket <67180770+jillian-maroket@users.noreply.github.com> Signed-off-by: Renuka Devi Rajendran <renuka.rajendran@suse.com>
Co-authored-by: Jillian Maroket <67180770+jillian-maroket@users.noreply.github.com> Signed-off-by: Renuka Devi Rajendran <renuka.rajendran@suse.com>
Co-authored-by: Jillian Maroket <67180770+jillian-maroket@users.noreply.github.com> Signed-off-by: Renuka Devi Rajendran <renuka.rajendran@suse.com>
Co-authored-by: Jillian Maroket <67180770+jillian-maroket@users.noreply.github.com> Signed-off-by: Renuka Devi Rajendran <renuka.rajendran@suse.com>
Co-authored-by: Jillian Maroket <67180770+jillian-maroket@users.noreply.github.com> Signed-off-by: Renuka Devi Rajendran <renuka.rajendran@suse.com>
Problem:
document for guest cluster using overlay networks
Solution:
document for guest cluster using overlay networks
Related Issue(s):
harvester/harvester#9682
Test plan:
Additional documentation or context