mirror of
https://github.com/openshift/openshift-docs.git
synced 2026-02-05 12:46:18 +01:00
62 lines
2.0 KiB
Plaintext
62 lines
2.0 KiB
Plaintext
// Module included in the following assemblies:
|
|
//
|
|
// * ingress/configure-ingress-operator.adoc
|
|
|
|
:_mod-docs-content-type: PROCEDURE
|
|
[id="nw-ingress-controller-configuration-gcp-global-access_{context}"]
|
|
= Configuring global access for an Ingress Controller on {gcp-short}
|
|
|
|
An Ingress Controller created on {gcp-short} with an internal load balancer generates an internal IP address for the service. A cluster administrator can specify the global access option, which enables clients in any region within the same VPC network and compute region as the load balancer, to reach the workloads running on your cluster.
|
|
|
|
For more information, see the {gcp-short} documentation for link:https://cloud.google.com/kubernetes-engine/docs/how-to/internal-load-balancing#global_access[global access].
|
|
|
|
.Prerequisites
|
|
|
|
* You deployed an {product-title} cluster on {gcp-short} infrastructure.
|
|
* You configured an Ingress Controller to use an internal load balancer.
|
|
* You installed the OpenShift CLI (`oc`).
|
|
|
|
.Procedure
|
|
|
|
. Configure the Ingress Controller resource to allow global access.
|
|
+
|
|
[NOTE]
|
|
====
|
|
You can also create an Ingress Controller and specify the global access option.
|
|
====
|
|
+
|
|
.. Configure the Ingress Controller resource:
|
|
+
|
|
[source,terminal]
|
|
----
|
|
$ oc -n openshift-ingress-operator edit ingresscontroller/default
|
|
----
|
|
+
|
|
.. Edit the YAML file:
|
|
+
|
|
.Sample `clientAccess` configuration to `Global`
|
|
[source,yaml]
|
|
----
|
|
spec:
|
|
endpointPublishingStrategy:
|
|
loadBalancer:
|
|
providerParameters:
|
|
gcp:
|
|
clientAccess: Global <1>
|
|
type: GCP
|
|
scope: Internal
|
|
type: LoadBalancerService
|
|
----
|
|
<1> Set `gcp.clientAccess` to `Global`.
|
|
|
|
.. Save the file to apply the changes.
|
|
+
|
|
. Run the following command to verify that the service allows global access:
|
|
+
|
|
[source,terminal]
|
|
----
|
|
$ oc -n openshift-ingress edit svc/router-default -o yaml
|
|
----
|
|
+
|
|
The output shows that global access is enabled for {gcp-short} with the annotation, `networking.gke.io/internal-load-balancer-allow-global-access`.
|