Bookmark this page

Chapter 1.  Provision a Red Hat OpenShift Service on AWS (ROSA) Cluster

Abstract

Goal

Create a Red Hat OpenShift Service on AWS (ROSA) cluster accessible through the internet.

Objectives
  • Describe the relationship between the customer team and the cloud vendors SRE team regarding system administration of managed OpenShift clusters.

  • Prepare an AWS account and a management workstation to create a ROSA cluster.

  • Create an internet-accessible ROSA cluster by using the CLI.

  • Create OpenShift cluster administrator credentials to access a managed cluster by using the OpenShit CLI, OpenShift Web Console, and Kubernetes CLI.

Sections
  • Introduction to Managed OpenShift Clusters (and Quiz)

  • Prerequisites to Create a ROSA Cluster (and Guided Exercise)

  • Create a ROSA Cluster (and Guided Exercise)

  • Access a ROSA Cluster as Administrator (and Guided Exercise)

Introduction to Managed OpenShift Clusters

Objectives

  • Describe the relationship between the customers team and the cloud vendors SRE team regarding system administration of managed OpenShift clusters.

  • Explain how customers should perform routine management of their managed OpenShift clusters.

Red Hat Cloud Services

Red Hat OpenShift is an enterprise-ready Kubernetes platform built for an open hybrid cloud strategy. Companies using Red Hat OpenShift have the same user experience regardless of where the cluster is deployed; in the cloud, on-premise, or at the edge.

To expand this flexibility and help companies to spend more time building and deploying applications, and less time managing infrastructure, Red Hat provides Red Hat Cloud Services.

Red Hat Cloud Services are joint offerings with the leading cloud providers such as Amazon Web Services (AWS), Microsoft Azure, IBM Cloud, and Google Cloud Platform (GCP). The offerings include hosted and managed OpenShift clusters, applications, and data services running on OpenShift.

In these offerings, Red Hat Site Reliability Engineering (SRE) experts work together with engineers from each cloud provider to monitor, support, and maintain the underlying infrastructure.

The following diagram provides a high level view of Red Hat Cloud Services.

Figure 1.1: Red Hat Cloud Services Overview

Platform Services

Platform services are a subgroup of Red Hat Cloud Services that provide only Red Hat OpenShift clusters.

Examples of platform services are Azure Red Hat OpenShift (ARO), Red Hat OpenShift Service on AWS (ROSA), Red Hat OpenShift on IBM Cloud, and Red Hat OpenShift Dedicated.

The preceding platform services are also referred to as managed clusters. Managed clusters are OpenShift clusters managed by a service provider, the opposite to self-managed clusters, which are completely managed by the user. Both managed and self-managed clusters run exactly the same OpenShift code, but managed clusters run a small set of operators used by the SRE teams to operate them.

Whereas ARO, ROSA, and Red Hat OpenShift on IBM Cloud are managed jointly between Red Hat and each cloud provider, Red Hat OpenShift Dedicated is fully managed by Red Hat, and available on AWS and GCP.

An advantage of using platform services is that they are optimized by design to integrate with the cloud provider where they are deployed.

To take advantage of the benefits provided by your Red Hat account, you can use your Red Hat pull secret when creating a managed OpenShift cluster. If you add your Red Hat pull secret, then you can install operators provided by the Operator Hub.

In addition, in some cloud providers, if you insert the Red Hat pull secret during the cluster creation, then managed OpenShift clusters automatically appear in the Red Hat Hybrid Cloud Console. In others, it is necessary to configure the cluster pull secret after the cluster is provisioned.

From the Red Hat Hybrid Cloud Console, users can see an overview of the status of their clusters, get insights on potential issues and suggested fixes, open support cases, or configure access control.

Differences between Platform Services and Self-managed OpenShift

In contrast to self-managed OpenShift clusters, managed OpenShift clusters do not require the users to create all the infrastructure components such as virtual machines, networks, load balancers, and so on. But there are still a few operations to perform before creating a managed OpenShift cluster.

Users interact with each cloud provider by using the web console or a command-line interface (CLI) specific to the cloud provider.

To operate a managed OpenShift cluster from the command-line, you must download and configure the CLI provided by the cloud provider. For example, you can use the az CLI to create the necessary cloud components such as resource groups or virtual networks, and then create an ARO cluster. On AWS, you use the aws and rosa CLIs, and the ibmcloud CLI on IBM cloud.

The number of actions to be completed before creating a managed OpenShift cluster depends on the cloud provider. For instance, to create an ARO cluster you must verify the account permissions, verify the resource quotas, register the resource providers, create a resource group, create the virtual network, and finally create the cluster.

On AWS, you must verify the quota for a ROSA cluster, verify the service role for the AWS Elastic Load Balancer (ELB), and finally create the cluster.

There are also differences in how the components of a managed OpenShift cluster display in the cloud provider portal. For example, on Azure, the components of a cluster are grouped into a resource group. You can access the details of the virtual machines, disks, and other components that compose the cluster by clicking on the corresponding resource group.

On the contrary, on AWS, most objects relative to a ROSA cluster use the name of the cluster as a prefix.

Platform Services Responsibility Assignment Matrix

In managed OpenShift clusters, there are cluster management and application management responsibilities shared between the customer, Red Hat, and the cloud provider.

Generally speaking, customers are responsible for their own data, applications, and developer services. Each cloud provider publishes a detailed shared responsibility matrix by area and task.

To learn more about the responsibility assignment matrix for ROSA, visit https://docs.openshift.com/rosa/rosa_architecture/rosa_policy_service_definition/rosa-policy-responsibility-matrix.html

To learn more about the responsibility assignment matrix for ARO, visit https://learn.microsoft.com/en-us/azure/openshift/responsibility-matrix

To learn more about the responsibility assignment matrix for Red Hat OpenShift on IBM Cloud, visit https://cloud.ibm.com/docs/openshift?topic=openshift-responsibilities_iks

To learn more about the responsibility assignment matrix for Red Hat OpenShift dedicated, visit https://docs.openshift.com/dedicated/osd_architecture/osd_policy/policy-responsibility-matrix.html

Getting Technical Support for Platform Services

The latest OpenShift versions available on each platform service are normally behind the latest Red Hat OpenShift version. This guarantees that the managed OpenShift clusters use a widely tested version of OpenShift in production environments.

Customers are responsible for upgrading the OpenShift version of their managed clusters. The supportability of earlier OpenShift versions depends on the cloud provider. If the managed cluster is registered with Red Hat, you can schedule upgrades by using the Red Hat OpenShift Cluster Manager. You will learn more about how to register your clusters with Red Hat in the section called “ Connect a ROSA Cluster to Red Hat Services.

For example, fully supported ARO clusters are those that use the latest GA version released, or the previous minor. This means that if the current version is 4.10.z, supported clusters must use at least version 4.9.z.

Note

In the previous example, 4 is the major version, 10 is the minor, and .z represents the latest patch available for that minor version.

In other cases, such as for ROSA clusters, major versions are fully supported for one year when the next major version is released. Minor versions are fully supported for 14 months following their general availability.

For more information about supportability, visit the following links.

Revision: do120-4.11-db7a8ed