Skip to content

OCPBUGS-81283: Document ServiceCIDR expansion not supported #110733

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
kquinn1204 wants to merge 2 commits into
base: main
Choose a base branch
from
+6 −1
Open

OCPBUGS-81283: Document ServiceCIDR expansion not supported #110733

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
487f9d5
OCPBUGS-81283: Document ServiceCIDR expansion not supported
kquinn1204 Apr 23, 2026
0f13c74
OCPBUGS-81283: Clarify ServiceCIDR API reference wording
kquinn1204 Apr 23, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion modules/nw-operator-cr.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -49,7 +49,7 @@ The CNO configuration inherits the following fields during cluster installation
ifdef::post-install-network-configuration,operator[]
[NOTE]
====
After cluster installation, you can only modify the `clusterNetwork` IP address range.
After cluster installation, you can only modify the `clusterNetwork` IP address range. The `serviceNetwork` range cannot be modified post-installation. Although the `ServiceCIDR` API is present in the cluster and documented in the {product-title} API reference, the Cluster Network Operator blocks creation or modification of `ServiceCIDR` objects by using a `ValidatingAdmissionPolicy`.
====
endif::[]

Expand Down
5 changes: 5 additions & 0 deletions networking/configuring_network_settings/configuring-cluster-network-range.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,6 +17,11 @@ The following limitations apply when modifying the cluster network IP address ra
- The host prefix cannot be modified
- Pods that are configured with an overridden default gateway must be recreated after the cluster network expands

[IMPORTANT]
====
Expanding the service network CIDR range after cluster installation is not supported. Although the `ServiceCIDR` API (`servicecidrs.networking.k8s.io`) is present in the cluster and documented in the {product-title} API reference, the Cluster Network Operator deploys a `ValidatingAdmissionPolicy` that blocks creation or modification of `ServiceCIDR` objects. You must configure the service network CIDR during installation by using the `install-config.yaml` file. To avoid service IP address exhaustion, ensure that your initial service network range is large enough to accommodate future growth.
====

include::modules/nw-cluster-network-range-edit.adoc[leveloffset=+1]

[role="_additional-resources"]
Expand Down