Created
June 24, 2025 00:12
-
-
Save dmc5179/473a484f524eed83e69885ecead4ced2 to your computer and use it in GitHub Desktop.
OpenShift example install-config.yaml for existing VPCs
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
apiVersion: v1 | |
additionalTrustBundlePolicy: Always | |
baseDomain: mydomain.com | |
#credentialsMode: Mint | |
controlPlane: | |
hyperthreading: Enabled | |
name: master | |
platform: | |
aws: | |
# zones: # typically derived from the subnets listed later in the file | |
# - us-gov-west-1a | |
type: m6i.xlarge # Should be at least an m5.xlarge or m6.xlarge | |
replicas: 3 | |
compute: | |
- hyperthreading: Enabled | |
name: worker | |
platform: | |
aws: | |
type: m5.2xlarge # Can be bigger. Nodes can be added later or of different sizes | |
# zones: # typically derived from the subnets listed later in the file | |
# - us-gov-west-1a | |
replicas: 3 | |
metadata: | |
name: ocp4 | |
networking: | |
clusterNetwork: # SDNs inside OCP. Should not need to change this | |
- cidr: 10.128.0.0/14 | |
hostPrefix: 23 | |
machineNetwork: | |
- cidr: 10.54.71.128/26 # This is the VPC CIDR Block | |
networkType: OVNKubernetes | |
serviceNetwork: # SDNs inside OCP. Should not need to change this | |
- 172.30.0.0/16 | |
platform: | |
aws: | |
amiID: | |
region: us-gov-west-1 | |
propagateUserTags: true | |
hostedZone: # Looks like Z043827..... | |
subnets: | |
- subnet-0965 # private subnet. Add a new line for each subnet needed. | |
publish: Internal | |
fips: false | |
sshKey: 'ssh-ed25519 AAAA....' #public part of an ssh key used to access the OCP nodes if needed | |
pullSecret: '' # json file from console.redhat.com | |
# If the cluster should trust other certificate authorities, add the root and/or intermediate CAs below | |
#additionalTrustBundle: | |
# ------- BEGIN CERTIFICATE ------- | |
# ------- END CERTIFICATE ------- |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment