byovpc-checker
is a simple tool that runs some check against an installed
Openshift cluster to verify the setup of subnets
and VPCs is correct.
These checks are meant for existing VPCs.
- Verifies tags on subnets.
- Verifies public/private subnets per availability zone.
- Verifies LoadBalancers & subnet association.
- Allow running in pre-install mode by only running a subset of checks.
- Verify security groups:
- Check Ingress and compare to LoadBalancer ENI IPs
- Verify ACLs on subnets
The tool is split into 2 distinct phases:
- Data gathering
- Running checks
All data is gathered upfront, so checks can be pure code, following the imperative shell, functional core pattern.