From e8ad9e735505e40175e10787b81aba650747d76c Mon Sep 17 00:00:00 2001 From: Vara Date: Thu, 2 Jan 2025 11:54:03 -0800 Subject: [PATCH] Add required steps for installing enterprise on Openshift v4.16+ on AWS --- .../_includes/components/InstallOpenShift.js | 33 +++++++++---------- 1 file changed, 16 insertions(+), 17 deletions(-) diff --git a/calico-enterprise/_includes/components/InstallOpenShift.js b/calico-enterprise/_includes/components/InstallOpenShift.js index f9873e93a7..5d3e11d7f5 100644 --- a/calico-enterprise/_includes/components/InstallOpenShift.js +++ b/calico-enterprise/_includes/components/InstallOpenShift.js @@ -84,23 +84,22 @@ export default function InstallOpenShift(props) {

For OpenShift v4.16 or newer on AWS, configure AWS security groups to allow BGP, typha and IP-in-IP encapsulation traffic by editing the OpenShift cluster-api manifests.

Edit spec.network.cni.cniIngressRules in the cluster-api/02_infra-cluster.yaml file to add

- {` - cniIngressRules: - (...) - - description: BGP (calico enterprise) - fromPort: 179 - protocol: tcp - toPort: 179 - - description: IP-in-IP (calico enterprise) - fromPort: -1 - protocol: "4" - toPort: -1 - - description: Typha (calico enterprise) - fromPort: 5473 - protocol: tcp - toPort: 5473 - `} - + {`cniIngressRules: +(...) +- description: BGP (calico enterprise) + fromPort: 179 + protocol: tcp + toPort: 179 +- description: IP-in-IP (calico enterprise) + fromPort: -1 + protocol: "4" + toPort: -1 +- description: Typha (calico enterprise) + fromPort: 5473 + protocol: tcp + toPort: 5473 +`} +