Chapter 18. Load balancing on RHOSP

1. Open the kuryr-config ConfigMap. On a command line, enter:

   $ oc -n openshift-kuryr edit cm kuryr-config

   Copy to Clipboard Toggle word wrap

2. In the ConfigMap, delete the line that contains kuryr-octavia-provider: default. For example:

   ...
   kind: ConfigMap
   metadata:
     annotations:
       networkoperator.openshift.io/kuryr-octavia-provider: default 

   1

   
   ...

   Copy to Clipboard Toggle word wrap

   1

   Delete this line. The cluster will regenerate it with ovn as the value.

   Wait for the Cluster Network Operator to detect the modification and to redeploy the kuryr-controller and kuryr-cni pods. This process might take several minutes.

3. Verify that the kuryr-config ConfigMap annotation is present with ovn as its value. On a command line, enter:

   $ oc -n openshift-kuryr edit cm kuryr-config

   Copy to Clipboard Toggle word wrap

   The ovn provider value is displayed in the output:

   ...
   kind: ConfigMap
   metadata:
     annotations:
       networkoperator.openshift.io/kuryr-octavia-provider: ovn
   ...

   Copy to Clipboard Toggle word wrap

4. Verify that RHOSP recreated its load balancers.

   1. On a command line, enter:

      $ openstack loadbalancer list | grep amphora

      Copy to Clipboard Toggle word wrap

      A single Amphora load balancer is displayed. For example:

      a4db683b-2b7b-4988-a582-c39daaad7981 | ostest-7mbj6-kuryr-api-loadbalancer  | 84c99c906edd475ba19478a9a6690efd | 172.30.0.1     | ACTIVE              | amphora

      Copy to Clipboard Toggle word wrap

   2. Search for ovn load balancers by entering:

      $ openstack loadbalancer list | grep ovn

      Copy to Clipboard Toggle word wrap

      The remaining load balancers of the ovn type are displayed. For example:

      2dffe783-98ae-4048-98d0-32aa684664cc | openshift-apiserver-operator/metrics | 84c99c906edd475ba19478a9a6690efd | 172.30.167.119 | ACTIVE              | ovn
      0b1b2193-251f-4243-af39-2f99b29d18c5 | openshift-etcd/etcd                  | 84c99c906edd475ba19478a9a6690efd | 172.30.143.226 | ACTIVE              | ovn
      f05b07fc-01b7-4673-bd4d-adaa4391458e | openshift-dns-operator/metrics       | 84c99c906edd475ba19478a9a6690efd | 172.30.152.27  | ACTIVE              | ovn

      Copy to Clipboard Toggle word wrap

Procedure

1. To copy the current internal router service, on a command line, enter:

   $ oc -n openshift-ingress get svc router-internal-default -o yaml > external_router.yaml

   Copy to Clipboard Toggle word wrap

2. In the file external_router.yaml, change the values of metadata.name and spec.type to LoadBalancer.

   Example router file

   apiVersion: v1
   kind: Service
   metadata:
     labels:
       ingresscontroller.operator.openshift.io/owning-ingresscontroller: default
     name: router-external-default 

   1

   
     namespace: openshift-ingress
   spec:
     ports:
     - name: http
       port: 80
       protocol: TCP
       targetPort: http
     - name: https
       port: 443
       protocol: TCP
       targetPort: https
     - name: metrics
       port: 1936
       protocol: TCP
       targetPort: 1936
     selector:
       ingresscontroller.operator.openshift.io/deployment-ingresscontroller: default
     sessionAffinity: None
     type: LoadBalancer 

   2

   Copy to Clipboard Toggle word wrap

   1

   Ensure that this value is descriptive, like router-external-default.

   2

   Ensure that this value is LoadBalancer.

1. From a command line, create a service from the external_router.yaml file:

   $ oc apply -f external_router.yaml

   Copy to Clipboard Toggle word wrap

2. Verify that the external IP address of the service is the same as the one that is associated with the load balancer:

   1. On a command line, retrieve the external IP address of the service:

      $ oc -n openshift-ingress get svc

      Copy to Clipboard Toggle word wrap

      Example output

      NAME                      TYPE           CLUSTER-IP       EXTERNAL-IP    PORT(S)                                     AGE
      router-external-default   LoadBalancer   172.30.235.33    10.46.22.161   80:30112/TCP,443:32359/TCP,1936:30317/TCP   3m38s
      router-internal-default   ClusterIP      172.30.115.123   <none>         80/TCP,443/TCP,1936/TCP                     22h

      Copy to Clipboard Toggle word wrap

   2. Retrieve the IP address of the load balancer:

      $ openstack loadbalancer list | grep router-external

      Copy to Clipboard Toggle word wrap

      Example output

      | 21bf6afe-b498-4a16-a958-3229e83c002c | openshift-ingress/router-external-default | 66f3816acf1b431691b8d132cc9d793c | 172.30.235.33  | ACTIVE | octavia |

      Copy to Clipboard Toggle word wrap

   3. Verify that the addresses you retrieved in the previous steps are associated with each other in the floating IP list:

      $ openstack floating ip list | grep 172.30.235.33

      Copy to Clipboard Toggle word wrap

      Example output

      | e2f80e97-8266-4b69-8636-e58bacf1879e | 10.46.22.161 | 172.30.235.33 | 655e7122-806a-4e0a-a104-220c6e17bda6 | a565e55a-99e7-4d15-b4df-f9d7ee8c9deb | 66f3816acf1b431691b8d132cc9d793c |

      Copy to Clipboard Toggle word wrap