Disabling multicast for a project
In OpenShift Container Platform with OVN-Kubernetes, you can disable IP multicast on a per-project basis so pods no longer receive multicast traffic.
Disable multicast between pods
To disable multicast between pods in a project, you can remove the k8s.ovn.org/multicast-enabled annotation from the namespace by using the oc annotate command or a namespace manifest.
Prerequisites
- Install the OpenShift CLI (
oc). - You must log in to the cluster with a user that has the
cluster-adminrole.
Procedure
-
Disable multicast by running the following command:
$ oc annotate namespace <namespace> \k8s.ovn.org/multicast-enabled-For
<namespace>, specify the namespace for the project you want to disable multicast for.tipYou can alternatively apply the following YAML to delete the annotation:
apiVersion: v1kind: Namespacemetadata:name: <namespace>annotations:k8s.ovn.org/multicast-enabled: null