-
Notifications
You must be signed in to change notification settings - Fork 1.8k
Adds live migration procedures for sdn to ovnk #81120
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Adds live migration procedures for sdn to ovnk #81120
Conversation
5a57ace to
7c55bfc
Compare
c827292 to
12d3525
Compare
4412a4c to
6935ac5
Compare
959d428 to
576cda2
Compare
576cda2 to
cf80199
Compare
cf80199 to
d3712ef
Compare
d3712ef to
2322b2b
Compare
|
/lgtm |
|
LGTM |
Updates limited live migration procedure to find various resources Multicast enabled namespaces change Further changes
2322b2b to
f7900ce
Compare
|
New changes are detected. LGTM label has been removed. |
|
@stevsmit: all tests passed! Full PR test history. Your PR dashboard. Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
| .Procedure | ||
|
|
||
| . As an {product-title} cluster administrator, check for egress firewall resources. You can do this by using the `oc` CLI, or by using the {product-title} web console. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Colon leading into substeps, per ISG.
| . As an {product-title} cluster administrator, check for egress firewall resources. You can do this by using the `oc` CLI, or by using the {product-title} web console. | |
| . As an {product-title} cluster administrator, check for egress firewall resources. You can do this by using the `oc` CLI, or by using the {product-title} web console: |
|
|
||
| . As an {product-title} cluster administrator, check for egress firewall resources. You can do this by using the `oc` CLI, or by using the {product-title} web console. | ||
|
|
||
| .. To check for egress firewall resource by using the `oc` CLI tool: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This and line 65 could be unordered, no? Since you choose either one (or both)?
| .. To check for egress firewall resource by using the `oc` CLI tool: | |
| * To check for egress firewall resource by using the `oc` CLI tool: |
| + | ||
| Ensure that the behavior of this resource is intended because it could have changed after migration. For more information about egress firewalls, see "Configuring an egress firewall for a project". | ||
|
|
||
| .. To check for egress firewall resources by using the {product-title} web console: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
| .. To check for egress firewall resources by using the {product-title} web console: | |
| * To check for egress firewall resources by using the {product-title} web console: |
| . Check your cluster for egress IP resources. You can do this by using the `oc` CLI, or by using the {product-title} web console. | ||
|
|
||
| .. To check for egress IPs by using the `oc` CLI tool: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Same:
| . Check your cluster for egress IP resources. You can do this by using the `oc` CLI, or by using the {product-title} web console. | |
| .. To check for egress IPs by using the `oc` CLI tool: | |
| . Check your cluster for egress IP resources. You can do this by using the `oc` CLI, or by using the {product-title} web console: | |
| * To check for egress IPs by using the `oc` CLI tool: |
| + | ||
| Repeat this for all egress IPs. Ensure that the behavior of each resource is intended because it could have changed after migration. For more information about EgressIPs, see "Configuring an EgressIP address". | ||
|
|
||
| .. To check for egress IPs by using the {product-title} web console: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
| .. To check for egress IPs by using the {product-title} web console: | |
| * To check for egress IPs by using the {product-title} web console: |
| * `100.64.0.0/16`. This IP address range is used for the `internalJoinSubnet` parameter of OVN-Kubernetes by default. | ||
| * `100.88.0.0/16`. This IP address range is used for the `internalTransSwitchSubnet` parameter of OVN-Kubernetes by default. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Nit
| * `100.64.0.0/16`. This IP address range is used for the `internalJoinSubnet` parameter of OVN-Kubernetes by default. | |
| * `100.88.0.0/16`. This IP address range is used for the `internalTransSwitchSubnet` parameter of OVN-Kubernetes by default. | |
| * `100.64.0.0/16`: This IP address range is used for the `internalJoinSubnet` parameter of OVN-Kubernetes by default. | |
| * `100.88.0.0/16`: This IP address range is used for the `internalTransSwitchSubnet` parameter of OVN-Kubernetes by default. |
|
|
||
| [NOTE] | ||
| ==== | ||
| This is an optional procedure and must only be used if the migration was blocked after using the `oc patch Network.config.openshift.io cluster --type='merge' --patch '{"metadata":{"annotations":{"network.openshift.io/network-type-migration":""}},"spec":{"networkType":"OVNKubernetes"}}'` command "Initiating the limited live migration process". |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Is there maybe a missing "from" before the section title reference? Also suggest moving the long command to its own block.
| This is an optional procedure and must only be used if the migration was blocked after using the `oc patch Network.config.openshift.io cluster --type='merge' --patch '{"metadata":{"annotations":{"network.openshift.io/network-type-migration":""}},"spec":{"networkType":"OVNKubernetes"}}'` command "Initiating the limited live migration process". | |
| This is an optional procedure and must only be used if the migration was blocked after using the following command from "Initiating the limited live migration process": | |
| [source,terminal] | |
| ---- | |
| $ oc patch Network.config.openshift.io cluster --type='merge' \ | |
| --patch '{"metadata":{"annotations":{"network.openshift.io/network-type-migration":""}},"spec":{"networkType":"OVNKubernetes"}}'` | |
| ---- |
| .Procedure | ||
|
|
||
| . If the `100.64.0.0/16` IP address range is already in use, enter the following command to patch it to a different range. The following example uses `100.63.0.0/16`. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
White space and colon:
| . If the `100.64.0.0/16` IP address range is already in use, enter the following command to patch it to a different range. The following example uses `100.63.0.0/16`. | |
| . If the `100.64.0.0/16` IP address range is already in use, enter the following command to patch it to a different range. The following example uses `100.63.0.0/16`. |
| $ oc patch network.operator.openshift.io cluster --type='merge' -p='{"spec":{"defaultNetwork":{"ovnKubernetesConfig":{"ipv4":{"internalJoinSubnet": "100.63.0.0/16"}}}}}' | ||
| ---- | ||
|
|
||
| . If the `100.88.0.0/16` IP address range is already in use, enter the following command to patch it to a different range. The following example uses `100.99.0.0/16`. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
| . If the `100.88.0.0/16` IP address range is already in use, enter the following command to patch it to a different range. The following example uses `100.99.0.0/16`. | |
| . If the `100.88.0.0/16` IP address range is already in use, enter the following command to patch it to a different range. The following example uses `100.99.0.0/16`: |
| It is not possible to upgrade a cluster to {product-title} 4.17 if it is using the OpenShift SDN network plugin. You must migrate to the OVN-Kubernetes plugin before upgrading to {product-title} 4.17. | ||
| ==== | ||
|
|
||
| To learn more about OVN-Kubernetes, read xref:../../networking/ovn_kubernetes_network_provider/about-ovn-kubernetes#about-ovn-kubernetes[About the OVN-Kubernetes network plugin]. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
| To learn more about OVN-Kubernetes, read xref:../../networking/ovn_kubernetes_network_provider/about-ovn-kubernetes#about-ovn-kubernetes[About the OVN-Kubernetes network plugin]. | |
| To learn more about OVN-Kubernetes, see xref:../../networking/ovn_kubernetes_network_provider/about-ovn-kubernetes#about-ovn-kubernetes[About the OVN-Kubernetes network plugin]. |
|
@adellape I'll need to make these changes in 4.16 and CP back to 4.15 with a new PR |
This is a manual cherry pick of both f328ff3 and 0d14457. This content of this PR does not exactly match its cherry picks. The content of this PR does match the content that currently exists in OCP docs version 4.16, as it should. I used these original PRs as a base and then copied the content from each module from version 4.16.
For review: I suggest comparing this PR to the modules in 4.16. Changes suggested to this PR would need to be done in 4.16 and then cherry-picked back to 4.15, because the content must match.
tl;dr: it is a direct copy of content that exists in version 4.16.
Preview: https://81120--ocpdocs-pr.netlify.app/openshift-enterprise/latest/networking/ovn_kubernetes_network_provider/migrate-from-openshift-sdn.html
Version(s):
4.15
Issue:
Jira: https://issues.redhat.com/browse/OSDOCS-11834
Link to docs preview:
QE review: