diff --git a/modules/virt-configuring-cdiuploadproxy-routes.adoc b/modules/virt-configuring-cdiuploadproxy-routes.adoc new file mode 100644 index 000000000000..4caa4d265516 --- /dev/null +++ b/modules/virt-configuring-cdiuploadproxy-routes.adoc @@ -0,0 +1,44 @@ +// Module included in the following assemblies: + +// * virt/post_installation_configuration/virt-post-install-network-config.adoc + +:_mod-docs-content-type: PROCEDURE +[id="virt-configuring-cdiuploadproxy-routes_{context}"] += Configuring additional routes to the `cdi-uploadproxy` service + +[role="_abstract"] +As a cluster administrator, you can configure additional routes to the `cdi-uploadproxy` service to allow users to upload virtual machine images from outside the cluster. + +.Prerequisites + +* You installed the {oc-first}. +* You logged in to the cluster as a user with the `cluster-admin` role. + +.Procedure + +. Configure the route to the external host by running the following command: ++ +[source,terminal] +---- +$ oc create route reencrypt -n openshift-cnv \ + --insecure-policy=Redirect \ + --hostname= \ + --service=cdi-uploadproxy +---- ++ +where: + +:: Specifies the name to assign to this custom route. +:: Specifies the fully qualified domain name or IP address of the external host providing image upload access. + +. Run the following command to annotate the route. This ensures that the correct Containerized Data Importer (CDI) CA certificate is injected when certificates are rotated: ++ +[source,terminal] +---- +$ oc annotate route -n openshift-cnv \ + operator.cdi.kubevirt.io/injectUploadProxyCert="true" +---- ++ +where: + +:: The name of the route you created. diff --git a/virt/post_installation_configuration/virt-post-install-network-config.adoc b/virt/post_installation_configuration/virt-post-install-network-config.adoc index de37e487d304..fe537cceae63 100644 --- a/virt/post_installation_configuration/virt-post-install-network-config.adoc +++ b/virt/post_installation_configuration/virt-post-install-network-config.adoc @@ -70,3 +70,5 @@ include::modules/nw-sriov-network-attachment.adoc[leveloffset=+2] endif::openshift-rosa,openshift-dedicated,openshift-rosa-hcp[] include::modules/virt-enabling-load-balancer-service-web.adoc[leveloffset=+1] +include::modules/virt-configuring-cdiuploadproxy-routes.adoc[leveloffset=+1] +