Ce contenu n'est pas disponible dans la langue sélectionnée.
Chapter 2. Required allowlist IP addresses for SRE cluster access
2.1. Overview
For Red Hat SREs to troubleshoot any issues within OpenShift Dedicated clusters, they must have ingress access to the API server through allowlist IP addresses.
2.2. Obtaining allowlisted IP addresses
OpenShift Dedicated users can use an OpenShift Cluster Manager CLI command to obtain the most up-to-date allowlist IP addresses for the Red Hat machines that are necessary for SRE access to OpenShift Dedicated clusters.
Note
These allowlist IP addresses are not permanent and are subject to change. You must continuously review the API output for the most current allowlist IP addresses.
Prerequisites
-
You installed the OpenShift Cluster Manager API command-line interface (
ocm). - You are able to configure your firewall to include the allowlist IP addresses.
Procedure
To get the current allowlist IP addresses needed for SRE access to your OpenShift Dedicated cluster, run the following command:
$ ocm get /api/clusters_mgmt/v1/trusted_ip_addresses|jq -r '.items[].id'
- Configure your firewall to grant access to the allowlist IP addresses.
