Skip to content

Instantly share code, notes, and snippets.

@dmc5179
Created June 24, 2025 00:12
Show Gist options
  • Save dmc5179/473a484f524eed83e69885ecead4ced2 to your computer and use it in GitHub Desktop.
Save dmc5179/473a484f524eed83e69885ecead4ced2 to your computer and use it in GitHub Desktop.
OpenShift example install-config.yaml for existing VPCs
apiVersion: v1
additionalTrustBundlePolicy: Always
baseDomain: mydomain.com
#credentialsMode: Mint
controlPlane:
hyperthreading: Enabled
name: master
platform:
aws:
# zones: # typically derived from the subnets listed later in the file
# - us-gov-west-1a
type: m6i.xlarge # Should be at least an m5.xlarge or m6.xlarge
replicas: 3
compute:
- hyperthreading: Enabled
name: worker
platform:
aws:
type: m5.2xlarge # Can be bigger. Nodes can be added later or of different sizes
# zones: # typically derived from the subnets listed later in the file
# - us-gov-west-1a
replicas: 3
metadata:
name: ocp4
networking:
clusterNetwork: # SDNs inside OCP. Should not need to change this
- cidr: 10.128.0.0/14
hostPrefix: 23
machineNetwork:
- cidr: 10.54.71.128/26 # This is the VPC CIDR Block
networkType: OVNKubernetes
serviceNetwork: # SDNs inside OCP. Should not need to change this
- 172.30.0.0/16
platform:
aws:
amiID:
region: us-gov-west-1
propagateUserTags: true
hostedZone: # Looks like Z043827.....
subnets:
- subnet-0965 # private subnet. Add a new line for each subnet needed.
publish: Internal
fips: false
sshKey: 'ssh-ed25519 AAAA....' #public part of an ssh key used to access the OCP nodes if needed
pullSecret: '' # json file from console.redhat.com
# If the cluster should trust other certificate authorities, add the root and/or intermediate CAs below
#additionalTrustBundle:
# ------- BEGIN CERTIFICATE -------
# ------- END CERTIFICATE -------
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment