Certificate Management and DNS

An external DNS must be available to route inbound traffic to the cluster through the load balancer.

The canonical load balancers required for OpenShift must be routable from within the OpenShift cluster and from any other location that you wish to access resources in the Management Console from (this is a standard requirement for on-premises load balancers in front of Kubernetes clusters).

There must also be a set of certificates setup for use by the OpenShift Route ingress controller (as defined in the baremetal install guide), which the Cloudera services will use.