Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
52 changes: 51 additions & 1 deletion modules/private-clusters-setting-api-private.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -31,8 +31,58 @@ you can reconfigure the API server to use only the private zone.

.Procedure

. In the web portal or console for your cloud provider, take the following actions:

.. Locate and delete the appropriate load balancer component:
ifndef::cpmso-using-azure[]
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🤖 [error] AsciiDoc.ValidConditions: File contains unbalanced if statements. Review the file to ensure it contains matching opening and closing if statements.

*** {aws-short} clusters: Delete the external load balancer. The API DNS entry in the private zone already points to the internal load balancer, which uses an identical configuration, so you do not need to modify the internal load balancer.
endif::cpmso-using-azure[]
ifndef::cpmso-using-aws[]
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🤖 [error] AsciiDoc.ValidConditions: File contains unbalanced if statements. Review the file to ensure it contains matching opening and closing if statements.

*** {azure-short}: Delete the following resources:
** The `api-v4` rule for the public load balancer.
** The `frontendIPConfiguration` parameter that is associated with the `api-v4` rule for the public load balancer.
** The public IP that is specified in the `frontendIPConfiguration` parameter.

.. {azure-short} clusters: Configure the Ingress Controller endpoint publishing scope to `Internal`.
For more information, see "Configuring the Ingress Controller endpoint publishing scope to Internal".
+
[IMPORTANT]
====
If you configure the Ingress Controller endpoint publishing scope to `Internal` and there are no existing inbound rules in the public load balancer, you must create an outbound rule explicitly to provide outbound traffic for the backend address pool.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Starting from 4.17+, installer create the outbound rule explicitly in public load balancer to provide outbound traffic, so I think there is no need to add this IMPORTANT admonition.


For more information, see the Microsoft Azure documentation about adding outbound rules.
====

endif::cpmso-using-aws[]

.. Delete the
ifdef::cpmso-using-aws[`api.$clustername.$yourdomain`]
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🤖 [error] AsciiDoc.ValidConditions: File contains unbalanced if statements. Review the file to ensure it contains matching opening and closing if statements.

ifdef::post-install[`api.$clustername.$yourdomain` or]
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🤖 [error] AsciiDoc.ValidConditions: File contains unbalanced if statements. Review the file to ensure it contains matching opening and closing if statements.

ifndef::cpmso-using-aws[`api.$clustername`]
DNS entry in the public zone.

ifdef::cpmso-using-aws[]
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🤖 [error] AsciiDoc.ValidConditions: File contains unbalanced if statements. Review the file to ensure it contains matching opening and closing if statements.

. Remove the external load balancers by deleting the following indicated lines in the control plane machine set custom resource:
+
[source,yaml]
----
# ...
providerSpec:
value:
# ...
loadBalancers:
- name: lk4pj-ext # <1>
type: network # <2>
- name: lk4pj-int
type: network
# ...
----
<1> Delete the `name` value for the external load balancer, which ends in `-ext`.
<2> Delete the `type` value for the external load balancer.
endif::cpmso-using-aws[]

ifdef::post-install[]
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🤖 [error] AsciiDoc.ValidConditions: File contains unbalanced if statements. Review the file to ensure it contains matching opening and closing if statements.

. AWS clusters: Remove the external load balancers:
. {aws-short} clusters: Remove the external load balancers:
+
[IMPORTANT]
====
Expand Down