Required allowlist IP addresses for SRE cluster access | Security and compliance

Overview
Obtaining allowlisted IP addresses

Overview

For Red Hat SREs to troubleshoot any issues within OpenShift Dedicated clusters, they must have ingress access to the API server through allowlist IP addresses.

Obtaining allowlisted IP addresses

OpenShift Dedicated users can use an OpenShift Cluster Manager CLI command to obtain the most up-to-date allowlist IP addresses for the Red Hat machines that are necessary for SRE access to OpenShift Dedicated clusters.

These allowlist IP addresses are not permanent and are subject to change. You must continuously review the API output for the most current allowlist IP addresses.

Prerequisites

You installed the OpenShift Cluster Manager API command-line interface (ocm).
You are able to configure your firewall to include the allowlist IP addresses.

Procedure

To get the current allowlist IP addresses needed for SRE access to your OpenShift Dedicated cluster, run the following command:
```
$ ocm get /api/clusters_mgmt/v1/trusted_ip_addresses|jq -r '.items[].id'
```
Configure your firewall to grant access to the allowlist IP addresses.