Skip to content

Set Router service "Private" instead of LoadBalancerService during install #1987

@JuozasA

Description

@JuozasA

Version

$ ./openshift-install version
./openshift-install unreleased-master-1258-g1a78ab5e12aa9295b20c789c0e42c0760bb753c1
built from commit 1a78ab5e12aa9295b20c789c0e42c0760bb753c1
release image registry.svc.ci.openshift.org/origin/release:4.2

Platform:

Azure

What happened?

Is there a way to change the cluster-ingress-operator provisioned router service from LoadBalancerService to Private (or ClusterIP) so that it wont create the Loadbalancer on Azure once Openshift is installed?

What you expected to happen?

either install-config or one of the manifests accept the Endpoint Publishing Strategy parameter and wont create LoadBalancer for router on Azure/AWS. This would be useful if users would like to lock down the Internet access and only allow IPs form particular range defined in Network Security groups.

How to reproduce it (as minimally and precisely as possible)?

comes by default when installing OCP

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions