[RHOCP 4] Restricting Insight Communication to US-Based Console Red Hat Endpoints

Solution Verified - Updated -

Issue

  • Administrators managing OpenShift clusters in regulated environments may need to restrict communication to specific regional endpoints for compliance purposes. In this scenario, ensuring that OpenShift connects only to the US-based mirror of console.redhat.com (i.e., us.console.redhat.com) is crucial. This configuration is necessary to meet data residency requirements and ensure that all data is routed through endpoints located within the US.
  • console.redhat.com is resolving to an IP address that is not within the US IP range.
  • insights needs to get/upload reports using only US-based IP ranges.
  • URL: console.redhat.com is blocked in the network because it resolves to an IP address that is not within the US IP range.

    I0826 16:13:58.558369       1 controller.go:225] Failed to download Insights report
    I0826 16:13:58.558394       1 controller.go:444] The operator is healthy
    Unexpected error retrieving the report: Get "https://console.redhat.com/api/insights-results-aggregator/v2/cluster/748cb102-xxxx-xxxx-a5f9-xxxx/reports": dial tcp 2.x8.xx.xx3:443: i/o timeout
    

Environment

  • Red Hat OpenShift Container Platform
    • 4.x

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content