Bug 1403927

Summary: [DOCS] Egress router require both IP and MAC adresses to be whitelisted on OpenStack
Product: OpenShift Container Platform Reporter: Javier Ramirez <javier.ramirez>
Component: DocumentationAssignee: brice <bfallonf>
Status: CLOSED CURRENTRELEASE QA Contact: Meng Bo <bmeng>
Severity: unspecified Docs Contact: Vikram Goyal <vigoyal>
Priority: unspecified    
Version: 3.4.0CC: aos-bugs, jokerman, mmccomas
Target Milestone: ---Keywords: Reopened
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-02-09 01:27:10 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Javier Ramirez 2016-12-12 16:12:51 UTC 
Document URL: 
https://access.redhat.com/documentation/en/openshift-container-platform/3.3/single/cluster-administration/#admin-guide-limit-pod-access-egress-router

Section Number and Name: 
5.5.1. Limiting Pod Access with an Egress Router

Describe the issue: 
If you deploy an egress router in OCP 3.3 on top of Openstack with the instructions provided it will not work, because you still need to whitelist the IP and MAC addresses on the openstack environment. 


Suggestions for improvement: 

To add a note clarifying this.

Additional information: 

In case needed the command used in openstack was:

neutron port-update $neutron_port_uuid --allowed_address_pairs list=true type=dict mac_address=11:22:33:44:55:66,ip_address=192.168.1.111
Comment 1 brice 2016-12-19 01:58:16 UTC 
Created PR:

https://github.com/openshift/openshift-docs/pull/3410

It's straight-forward. Asking for peer review.
Comment 2 openshift-github-bot 2016-12-20 05:37:46 UTC 
Commit pushed to master at https://github.com/openshift/openshift-docs

https://github.com/openshift/openshift-docs/commit/7dace35286e7b7a3ff6708d11240a56ef303879c
Merge pull request #3410 from bfallonf/ingress_1403927

Bug 1403927 added important box about limiting egress router with openstack
Comment 3 brice 2017-01-24 05:22:17 UTC 
Link to released docs:

https://access.redhat.com/documentation/en/openshift-container-platform/3.4/single/cluster-administration/#admin-guide-limit-pod-access-egress-router
Comment 5 openshift-github-bot 2017-01-30 05:08:36 UTC 
Commit pushed to master at https://github.com/openshift/openshift-docs

https://github.com/openshift/openshift-docs/commit/b79f2318ec9af9f07a7971c3472fd0f20ce7f477
Merge pull request #3602 from bfallonf/one_1403927

Bug 1403927 Fixed typo
Comment 6 brice 2017-01-30 05:09:33 UTC 
Thanks, Javier.

I've fixed it in the above PR. I'll move this back to release_pending.
Comment 7 brice 2017-02-09 01:27:10 UTC 
Link to released docs:

https://access.redhat.com/documentation/en/openshift-container-platform/3.4/single/cluster-administration/#admin-guide-limit-pod-access-egress-router