1
0
mirror of https://github.com/openshift/openshift-docs.git synced 2026-02-05 12:46:18 +01:00

Additional ADV updates to core net docs

This commit is contained in:
Steven Smith
2026-01-22 13:53:30 -05:00
committed by openshift-cherrypick-robot
parent 7fa0ef5851
commit e1994996a9
7 changed files with 58 additions and 40 deletions

View File

@@ -6,7 +6,8 @@ include::_attributes/common-attributes.adoc[]
toc::[]
To ensure secure communication between internal components, your {product-title} cluster uses a shared set of trusted Certificate Authorities (CAs). If your organization uses its own private certificates (a custom PKI), you must add your CA to the cluster so that all components trust it.
[role="_abstract"]
To ensure secure communication between internal components in your {product-title} cluster, you can add your organization's custom Certificate Authority (CA) certificates to the cluster-wide truststore.
You can add your custom CA certificates to the cluster-wide truststore in one of two ways:

View File

@@ -6,12 +6,11 @@ include::_attributes/common-attributes.adoc[]
toc::[]
As a cluster administrator, you can expand the cluster network range after cluster installation. You might want to expand the cluster network range if you need more IP addresses for additional nodes.
[role="_abstract"]
To expand the cluster network range in {product-title} to support more nodes and IP addresses, you can modify the cluster network CIDR mask after cluster installation. This procedure requires the OVN-Kubernetes network plugin and provides more IP space for additional nodes.
For example, if you deployed a cluster and specified `10.128.0.0/19` as the cluster network range and a host prefix of `23`, you are limited to 16 nodes. You can expand that to 510 nodes by changing the CIDR mask on a cluster to `/14`.
When expanding the cluster network address range, your cluster must use the xref:../../networking/ovn_kubernetes_network_provider/about-ovn-kubernetes.adoc#about-ovn-kubernetes[OVN-Kubernetes network plugin]. Other network plugins are not supported.
The following limitations apply when modifying the cluster network IP address range:
- The CIDR mask size specified must always be smaller than the currently configured CIDR mask size, because you can only increase IP space by adding more nodes to an installed cluster
@@ -21,8 +20,9 @@ The following limitations apply when modifying the cluster network IP address ra
include::modules/nw-cluster-network-range-edit.adoc[leveloffset=+1]
[role="_additional-resources"]
[id="configuring-cluster-network-range-additional-resources"]
[id="additional-resources_{context}"]
== Additional resources
* xref:../../networking/ovn_kubernetes_network_provider/about-ovn-kubernetes.adoc#about-ovn-kubernetes[OVN-Kubernetes network plugin]
* link:https://access.redhat.com/labs/ocpnc/[Red Hat OpenShift Network Calculator]
* xref:../../networking/ovn_kubernetes_network_provider/about-ovn-kubernetes.adoc#about-ovn-kubernetes[About the OVN-Kubernetes network plugin]