This page lists services that are exposed on one or more of the external networks (CMN, CAN, and CHN). Each of these services requires an IP address in the relevant subnets, in order to be reachable on that network. This IP address is allocated by the MetalLB component.
Services under Istio Ingress Gateway and OAuth2 Proxy Ingress share an ingress, so they all use the IP address allocated to the Ingress.
Each service is given a DNS name that is served by the PowerDNS service to make
them resolvable from the site network. This makes it possible to access each of
these services by name rather than finding the allocated IP address. The DNS name
and network are prepended to the system-name.site-domain specified during
csi config init. For example, if the system is named TestSystem, and the
site is example.com, then the HPE Cray EX domain would be testsystem.example.com.
See External DNS for more information.
| Service | DNS name | Address pool | Requires CMN/CAN/CHN IP? | External ports | Notes |
|---|---|---|---|---|---|
| Istio Ingress Gateway - CMN | Â | customer-management |
Yes | 80/443, 8081, 8888 | Â |
| Istio Ingress Gateway - CAN | Â | customer-access |
Yes | 80/443, 8081, 8888 | Â |
| Istio Ingress Gateway - CHN | Â | customer-high-speed |
Yes | 80/443, 8081, 8888 | Â |
| HPE Cray EX REST API | api |
 | Uses the IP address of Istio Ingress Gateway (CMN/CAN/CHN) | ||
| Authentication | auth |
 | Uses the IP address of Istio Ingress Gateway (CMN/CAN/CHN) | ||
| S3 | s3 |
customer-management |
Yes | 8080 | Â |
| PowerDNS | Â | customer-management |
Yes | 53 | Â |
| OAuth2 Proxy Ingress - CMN | Â | customer-management |
Yes | 443 | Â |
| OAuth2 Proxy Ingress - CAN | Â | customer-access |
Yes | 443 | Â |
| OAuth2 Proxy Ingress - CHN | Â | customer-high-speed |
Yes | 443 | Â |
| System Management Health Vmselect | vmselect |
 | Uses the IP address of OAuth2 Proxy Ingress (CMN) | ||
| System Management Health Alert Manager | alertmanager |
 | Uses the IP address of OAuth2 Proxy Ingress (CMN) | ||
| System Management Health Grafana | grafana |
 | Uses the IP address of OAuth2 Proxy Ingress (CMN) | ||
| Istio Kiali | kiali-istio |
 | Uses the IP address of OAuth2 Proxy Ingress (CMN) | ||
| VCS | vcs |
 | Uses the IP address of OAuth2 Proxy Ingress (CMN) | ||
| SMA Kibana | sma-kibana |
 | Uses the IP address of OAuth2 Proxy Ingress (CMN) | ||
| SMA Grafana | sma-grafana |
 | Uses the IP address of OAuth2 Proxy Ingress (CMN) | ||
| OPA GPM | opa-gpm |
 | Uses the IP address of OAuth2 Proxy Ingress (CMN) | ||
| CSMS | csms |
 | Uses the IP address of OAuth2 Proxy Ingress (CMN) | ||
| Nexus | nexus |
 | Uses the IP address of Istio Ingress Gateway (CMN) | ||
| Rsyslog Aggregator | rsyslog |
customer-management |
Yes | 514/8514 | Â |
| IMS | <uid>.ims |
customer-management |
Yes (multiple) | 22 | There may be several of these, each with a unique ID |