Section Number and Name:
User-provisioned DNS requirements
Describe the issue:
In the aforementioned section, this is said about api-int.<cluster_name>.<base_domain> DNS record:
"This DNS record must point to the load balancer for the control plane machines." However, as far as I can tell, queries to api-int.<cluster_name>.<base_domain> are made by master and worker node during their ignition phase. When ignition runs on masters and workers, they expect to be served additional ignition content at api-int.<cluster_name>.<base_domain>:22623. This additional ignition content is however server by bootstrap node.
Suggestions for improvement:
Readers should understand that the api-int.<cluster_name>.<base_domain> must point to bootstrap node or that the loadbalancer must forward requests for ignition content to bootstrap node.
Actually, this maybe not be a bug, maybe just my understanding of this area is incomplete. So I noticed that during the bootstrap phase of OCP installation, master and worker nodes query api-int.<cluster_name>.<base_domain>:22623 for additional ignition content. However then, during later installation stages, some pods query api-int.<cluster_name>.<base_domain>:6443 and at that point, the bootstrap machine does not exist any more. Does that mean that this DNS entry should indeed point to load balancer and the load balancer should forward queries to port 22623 to bootstrap node and queries to port 6443 to control plane?