From 36a10a3a620fe5e8f0579eb95cdcbe40dc1668a8 Mon Sep 17 00:00:00 2001 From: Shubha Narayanan Date: Mon, 3 Jun 2024 14:00:21 +0530 Subject: [PATCH] Peer review comments --- modules/installation-aws-permissions.adoc | 7 +++++++ modules/installation-configuration-parameters.adoc | 11 +++++++++++ 2 files changed, 18 insertions(+) diff --git a/modules/installation-aws-permissions.adoc b/modules/installation-aws-permissions.adoc index cdea106990..68c2fb68c2 100644 --- a/modules/installation-aws-permissions.adoc +++ b/modules/installation-aws-permissions.adoc @@ -307,3 +307,10 @@ If you are managing your cloud provider credentials with mint mode, the IAM user ==== * `sts:AssumeRole` ==== + +.Required permissions for enabling Bring your own public IPv4 addresses (BYOIP) feature for installation +[%collapsible] +==== +* `ec2:DescribePublicIpv4Pools` +* `ec2:DisassociateAddress` +==== \ No newline at end of file diff --git a/modules/installation-configuration-parameters.adoc b/modules/installation-configuration-parameters.adoc index a38f9de2c1..14f7a0b2fd 100644 --- a/modules/installation-configuration-parameters.adoc +++ b/modules/installation-configuration-parameters.adoc @@ -1002,6 +1002,17 @@ For a private cluster, specify a private subnet for each availability zone. For clusters that use AWS Local Zones, you must add AWS Local Zone subnets to this list to ensure edge machine pool creation. |Valid subnet IDs. +|platform: + aws: + publicIpv4Pool: +|The public IPv4 pool ID that is used to allocate Elastic IPs (EIPs) when `publish` is set to `External`. You must provision and advertise the pool in the same {aws-short} account and region of the cluster. You must ensure that you have 2n + 1 IPv4 available in the pool where _n_ is the total number of {aws-short} zones used to deploy the Network Load Balancer (NLB) for API, NAT gateways, and bootstrap node. For more information about bring your own IP addresses (BYOIP) in {aws-short}, see link:https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-byoip.html#byoip-onboard[Onboard your BYOIP]. +| A valid link:https://docs.aws.amazon.com/cli/latest/reference/ec2/describe-public-ipv4-pools.html[public IPv4 pool id] + +[NOTE] +==== +BYOIP can be enabled only for customized installations that have no network restrictions. +==== + |platform: aws: preserveBootstrapIgnition: