Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding "Networking requirements" section to the Preparing the installation documentation #21648

Closed
ibuziuk opened this issue Aug 22, 2022 · 2 comments · Fixed by eclipse-che/che-docs#2432
Assignees
Labels
area/doc Issues related to documentation kind/task Internal things, technical debt, and to-do tasks to be performed. severity/P1 Has a major impact to usage or development of the system. sprint/current

Comments

@ibuziuk
Copy link
Member

ibuziuk commented Aug 22, 2022

Is your task related to a problem? Please describe

by default, k8s / OpenShift has a flat network where pods from different namespaces can communicate with one another. However, if some NetworkPolicies are applied that could cause networking issues for Eclipse Che e.g. pods from user namespaces can not communicate with the pod in the namespace where the operator is installed. Need to document the NetworkPolicies on the clusters for k8s / OpenShift

Describe the solution you'd like

https://www.eclipse.org/che/docs/stable/administration-guide/preparing-the-installation/ should contain a section that describes requirments for Network Policies requirements

Describe alternatives you've considered

N/A

Additional context

No response

@ibuziuk ibuziuk added kind/task Internal things, technical debt, and to-do tasks to be performed. severity/P1 Has a major impact to usage or development of the system. sprint/next team/doc labels Aug 22, 2022
@ibuziuk ibuziuk mentioned this issue Aug 24, 2022
82 tasks
@tolusha
Copy link
Contributor

tolusha commented Aug 24, 2022

If there are any restriction on the cluster, then we have explicitly allow traffic from openshift-devspaces namespace:

  - apiVersion: networking.k8s.io/v1
    kind: NetworkPolicy
    metadata:
      name: allow-from-openshift-devspaces
    spec:
      ingress:
        - from:
            - namespaceSelector:
                matchLabels:
                  kubernetes.io/metadata.name: openshift-devspaces
      podSelector: {}
      policyTypes:
        - Ingress

@ibuziuk
Copy link
Member Author

ibuziuk commented Aug 26, 2022

@dkwon17 has added some details during the WTO onboarding - https://issues.redhat.com/projects/WTO/issues/WTO-142

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/doc Issues related to documentation kind/task Internal things, technical debt, and to-do tasks to be performed. severity/P1 Has a major impact to usage or development of the system. sprint/current
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants