:_mod-docs-content-type: ASSEMBLY
[id="cloud-experts-consistent-egress-ip"]
= Tutorial: Assign a consistent egress IP for external traffic

include::_attributes/attributes-openshift-dedicated.adoc[]
include::_attributes/common-attributes.adoc[]
:context: cloud-experts-consistent-egress-ip

toc::[]

[role="_abstract"]
You can configure a set of predictable IP addresses for egress cluster traffic. Assigning a consistent IP address for outbound cluster traffic is useful when external resources, such as security groups, require an IP-based configuration to meet security standards.

[NOTE]
====
By default, {product-title} uses the OVN-Kubernetes container network interface (CNI) to assign random IP addresses from a pool. This can make configuring security lockdowns unpredictable or open.
====

ifdef::openshift-rosa[]
For more information on configuring an egress IP address, see _Additional resources_.
endif::openshift-rosa[]

include::modules/egress-ip-env-variables.adoc[leveloffset=+1]

include::modules/egress-ip-capacity.adoc[leveloffset=+1]

include::modules/egress-ip-creating-ip-rules.adoc[leveloffset=+1]

include::modules/egress-ip-assign-ip-namespace.adoc[leveloffset=+1]

include::modules/egress-ip-assigning-to-pod.adoc[leveloffset=+1]

include::modules/egress-ip-node-labels.adoc[leveloffset=+2]

include::modules/egress-ip-egress-ip-review.adoc[leveloffset=+2]

include::modules/egress-ip-deploy-sample-app.adoc[leveloffset=+2]

include::modules/egress-ip-namespace-egress.adoc[leveloffset=+2]

include::modules/egress-ip-pod-egress-test.adoc[leveloffset=+2]

include::modules/egress-ip-blocked-egress.adoc[leveloffset=+2]

include::modules/egress-ip-cluster-cleanup.adoc[leveloffset=+1]

ifdef::openshift-rosa[]
[role="_additional-resources"]
[id="additional-resources_{context}"]
== Additional resources
* xref:../networking/ovn_kubernetes_network_provider/configuring-egress-ips-ovn.adoc#configuring-egress-ips-ovn[Configuring an egress IP address]
endif::openshift-rosa[]
//Additional resources are Classic-only because the assembly configuring-egress-ips-ovn is commented out of the ROSA HCP topic map (as of June 2026).
