Document network ingress/egress defaults per ranch

Miroslav Vadkertirequested to merge
tft-4725-document-network-defaults into main

What

Adds a Networking section to the Test Request page documenting the network defaults for provisioned and reserved machines, split by ranch, plus a nav entry.

  • Egress: unrestricted on both the Red Hat ranch and the public ranch.
  • Ingress — public ranch: restricted by default; additional rules can be added with --security-group-rule-ingress, and reservations automatically allow the requestor's public IP so it can reach the reserved machine.
  • Ingress — Red Hat ranch: unrestricted.
  • Note that on the public ranch the rules are AWS security-group rules enforced at the hypervisor level (not visible via iptables, the instance-metadata endpoint, or the CLI/API).

Why

A support request asked how to inspect the network rules on a reservation; the defaults weren't documented. See https://redhat.atlassian.net/browse/TFT-4725.

Files

  • modules/ROOT/pages/test-request.adoc — new [#networking] section.
  • modules/ROOT/nav.adoc — nav entry for the new section.

Assisted-by: Claude Code

Merge request reports