Abstract
| Goal |
Create a Red Hat OpenShift Service on AWS (ROSA) cluster that is accessible through the internet. |
| Objectives |
|
| Sections |
|
Describe the relationship between the customer team and the cloud vendor's SRE team to administer managed OpenShift clusters.
Red Hat OpenShift is an enterprise-ready Kubernetes platform that is built for an open hybrid cloud strategy. Companies that use Red Hat OpenShift have the same user experience regardless of where the cluster is deployed; in the cloud, on-premise, or at the edge.
To expand this flexibility and to help companies to spend more time building and deploying applications, and less time managing infrastructure, Red Hat provides Red Hat Cloud Services.
Red Hat Cloud Services are joint offerings with the leading cloud providers, such as Amazon Web Services (AWS), Microsoft Azure, IBM Cloud, and Google Cloud Platform (GCP). The offerings include hosted and managed OpenShift clusters, applications, and data services that run on OpenShift.
In these offerings, Red Hat Site Reliability Engineering (SRE) experts work together with engineers from each cloud provider to monitor, support, and maintain the underlying infrastructure.
The following diagram provides a high-level view of Red Hat Cloud Services.
Platform services are a subgroup of Red Hat Cloud Services that provide only Red Hat OpenShift clusters.
Examples of platform services are Microsoft Azure Red Hat OpenShift (ARO), Red Hat OpenShift Service on AWS (ROSA), Red Hat OpenShift on IBM Cloud, and Red Hat OpenShift Dedicated.
The preceding platform services are also referred to as managed clusters. Managed clusters are OpenShift clusters that a service provider manages, and are the opposite of self-managed clusters, which the user completely manages. Both managed and self-managed clusters run the same OpenShift code; managed clusters run a small set of operators that the SRE teams use to operate them.
Whereas ARO, ROSA, and Red Hat OpenShift on IBM Cloud are managed jointly between Red Hat and each cloud provider, Red Hat OpenShift Dedicated is fully managed by Red Hat, and is available on AWS and GCP.
An advantage of using platform services is that they are optimized by design to integrate with the cloud provider where they are deployed.
To take advantage of the benefits of your Red Hat account, you can use your Red Hat pull secret when creating a managed OpenShift cluster. If you add your Red Hat pull secret, then you can install operators that the Operator Hub provides.
In addition, in some cloud providers, if you insert the Red Hat pull secret during the cluster creation, then managed OpenShift clusters automatically appear in the Red Hat Hybrid Cloud Console. For other cloud providers, it is necessary to configure the cluster pull secret after the cluster is provisioned.
From the Red Hat Hybrid Cloud Console, users can see an overview of the status of their clusters, get insights on potential issues and suggested fixes, open support cases, or configure access control.
In contrast to self-managed OpenShift clusters, managed OpenShift clusters do not require the users to create all the infrastructure components, such as virtual machines, networks, load balancers, and so on. But users still need to perform a few operations before creating a managed OpenShift cluster.
Users interact with each cloud provider by using the web console or a command-line interface (CLI) that is specific to the cloud provider.
To operate a managed OpenShift cluster from the command line, you must download and configure the CLI from the cloud provider.
For example, you can use the az CLI to create the necessary cloud components such as resource groups or virtual networks, and then create an ARO cluster.
On AWS, you use the aws and rosa CLIs, and the ibmcloud CLI on IBM cloud.
The number of actions to complete before creating a managed OpenShift cluster depends on the cloud provider. For instance, to create an ARO cluster, you must verify the account permissions, verify the resource quotas, register the resource providers, create a resource group, create the virtual network, and finally create the cluster.
On AWS, you must verify the quota for a ROSA cluster, verify the service role for the AWS Elastic Load Balancer (ELB), and finally create the cluster.
Also, the components of a managed OpenShift cluster display differently in the cloud provider portal. For example, on Azure, the components of a cluster are grouped into a resource group. You can access the details of the virtual machines, disks, and other components that comprise the cluster by clicking the corresponding resource group.
On the contrary, on AWS, most objects, relative to a ROSA cluster, use the name of the cluster as a prefix.
In managed OpenShift clusters, cluster management and application management responsibilities are shared between the customer, Red Hat, and the cloud provider.
Generally, customers are responsible for their own data, applications, and developer services. Each cloud provider publishes a detailed shared responsibility matrix by area and task.
Visit https://access.redhat.com/documentation/en-us/red_hat_openshift_service_on_aws/4/html-single/introduction_to_rosa/index#rosa-policy-responsibility-matrix to learn more about the responsibility assignment matrix for ROSA.
Visit https://learn.microsoft.com/en-us/azure/openshift/responsibility-matrix to learn more about the responsibility assignment matrix for ARO.
To learn more about the responsibility assignment matrix for Red Hat OpenShift on IBM Cloud, visit https://cloud.ibm.com/docs/openshift?topic=openshift-responsibilities_iks
To learn more about the responsibility assignment matrix for Red Hat OpenShift Dedicated, visit https://access.redhat.com/documentation/en-us/openshift_dedicated/4/html-single/introduction_to_openshift_dedicated/index#policy-responsibility-matrix
The latest available OpenShift versions on each platform service are normally behind the latest Red Hat OpenShift version. This configuration guarantees that the managed OpenShift clusters use a widely tested version of OpenShift in production environments.
Customers are responsible for upgrading the OpenShift version of their managed clusters. The supportability of earlier OpenShift versions depends on the cloud provider. If the managed cluster is registered with Red Hat, then you can schedule upgrades by using the Red Hat OpenShift Cluster Manager. You learn more about how to register your clusters with Red Hat in the section called “ Connect a ROSA Cluster to Red Hat Services ”.
For example, fully supported ARO clusters use the latest released GA version or the previous minor version.
If the current version is 4.10.z, then supported clusters must use at least version 4.9.z.
In the previous example, 4 is the major version, 10 is the minor version, and .z represents the latest available patch for that minor version.
In other cases, such as for ROSA clusters, major versions are fully supported for one year when the next major version is released. Minor versions are fully supported for 14 months following their general availability.
For more information about supportability, visit the following links.
ROSA Update Lifecycle: https://access.redhat.com/documentation/en-us/red_hat_openshift_service_on_aws/4/html-single/introduction_to_rosa/index#rosa-life-cycle
Azure Red Hat OpenShift Version Support Policy: https://learn.microsoft.com/en-us/azure/openshift/support-lifecycle#red-hat-openshift-container-platform-version-support-policy
Red Hat OpenShift on IBM Cloud: https://cloud.ibm.com/docs/openshift?topic=openshift-openshift_versions#openshift_versions_available
Red Hat OpenShift Dedicated: https://access.redhat.com/documentation/en-us/openshift_dedicated/4/html-single/introduction_to_openshift_dedicated/index#osd-life-cycle