{"id":"cluster-networking-spans-discovery-and-data-plane","text":"OpenShift cluster networking operates across two complementary layers: the DNS discovery layer (CoreDNS DaemonSet with deterministic 10th-address allocation and strict forwarding zone rules) and the multi-CNI data plane (OVN-Kubernetes primary + Multus secondary with NAD-based pod attachment) — both must be healthy for workloads to communicate.","truth_value":"IN","source":"","source_url":"","source_hash":"","justifications":[{"type":"SL","antecedents":["dns-service-discovery-architecture","multi-cni-network-architecture"],"outlist":[],"label":"depth-2 — discovery and data plane are independently architected but jointly required for connectivity"}],"dependents":["complete-networking-discovery-data-and-addressing"],"metadata":{},"explanation":{"steps":[{"node":"cluster-networking-spans-discovery-and-data-plane","truth_value":"IN","reason":"SL justification valid","antecedents":["dns-service-discovery-architecture","multi-cni-network-architecture"],"label":"depth-2 — discovery and data plane are independently architected but jointly required for connectivity"},{"node":"dns-service-discovery-architecture","truth_value":"IN","reason":"SL justification valid","antecedents":["dns-operator-deploys-coredns-daemonset","dns-cluster-ip-10th-address-service-cidr","dns-cluster-local-invalid-forwarding-zone","ocp-dns-naming-convention"],"label":"DNS architecture is fully deterministic from the service CIDR — the IP, naming, and forwarding constraints form a closed system"},{"node":"dns-operator-deploys-coredns-daemonset","truth_value":"IN","reason":"premise"},{"node":"dns-cluster-ip-10th-address-service-cidr","truth_value":"IN","reason":"premise"},{"node":"dns-cluster-local-invalid-forwarding-zone","truth_value":"IN","reason":"premise"},{"node":"ocp-dns-naming-convention","truth_value":"IN","reason":"premise"},{"node":"multi-cni-network-architecture","truth_value":"IN","reason":"SL justification valid","antecedents":["ocp-default-cni-shifted-to-ovn-kubernetes","ocp-multus-cni-multiple-interfaces","multus-cni-enables-multiple-network-attachments","pods-reference-nads-via-annotation"],"label":"Primary + meta-plugin + secondary plugin layering defines the network model"},{"node":"ocp-default-cni-shifted-to-ovn-kubernetes","truth_value":"IN","reason":"premise"},{"node":"ocp-multus-cni-multiple-interfaces","truth_value":"IN","reason":"premise"},{"node":"multus-cni-enables-multiple-network-attachments","truth_value":"IN","reason":"premise"},{"node":"pods-reference-nads-via-annotation","truth_value":"IN","reason":"premise"}]}}