Skip to content

byoh-instance-pre-requisites.md

Latest commit

 

History

History
19 lines (18 loc) · 1.91 KB

byoh-instance-pre-requisites.md

File metadata and controls

19 lines (18 loc) · 1.91 KB
Raw

BYOH Instance Pre-requisites

The following pre-requisites must be fulfilled in order to add a Windows BYOH node.

  • The instance must be on the same network as the Linux worker nodes in the cluster.
  • Port 22 must allow inbound TCP traffic and be running an SSH server.
  • Port 9182 must allow inbound TCP traffic in order for node and pod metrics collection to function.
  • Port 10250 must allow inbound TCP traffic in order for log collection to function.
  • An administrator user is present with the private key used in the secret set as an authorized SSH key.
  • The hostname of the instance must follow the RFC 1123 DNS label standard:
    • Contain only lowercase alphanumeric characters or '-'.
    • Start with an alphanumeric character.
    • End with an alphanumeric character.
  • Configure PTR record according the windows-instances key address type:
    • When the windows-instances ConfigMap key is an IP address, a PTR record must exist corresponding to that address, resolving to the instance hostname. This allows WMCO to validate CSR node names via reverse DNS lookup.
    • When the ConfigMap key is a DNS name (e.g., a headless Service FQDN like win-byoh-0.headless.default.svc.cluster.local), no PTR record is required. WMCO validates the node name by matching it directly against the DNS name.
  • Containerd should not be installed. If it is installed already, it is recommended to uninstall as WMCO installs and manages containerd.
  • If the instance uses a static IP, and the instance is not running Windows Server 2022, deviceless NICs must be disabled
    • This can be done by running the following in PowerShell: New-ItemProperty HKLM:\SYSTEM\CurrentControlSet\Services\hns\State -Name DeviceLessNicDisabled -PropertyType DWORD -Value 1