Bookmark this page

Chapter 12.  Integrate Red Hat Satellite with Hybrid Cloud Platforms

Abstract

Goal

Plan Red Hat Satellite deployments on cloud platforms, including provisioning managed content hosts.

Objectives
  • Prepare for installing Red Hat Satellite Server and Capsules on selected cloud platforms.

  • Manage content host cloud instances on Amazon Web Services by using Red Hat Satellite.

  • Manage content host cloud instances on Google Compute Platform by using Red Hat Satellite.

  • Manage content host cloud instances on Microsoft Azure by using Red Hat Satellite.

Sections
  • Run a Red Hat Satellite Server on a Cloud Platform (and Quiz)

  • Manage Content Hosts on Amazon Web Services

  • Manage Content Hosts on Google Compute Platform

  • Manage Content Hosts on Microsoft Azure

Run a Red Hat Satellite Server on a Cloud Platform

Objectives

  • Prepare for installing Red Hat Satellite Server and Capsules on selected cloud platforms.

Deploy Satellite Server on the Cloud

This course uses Satellite Server as an on-premise software delivery and management platform. Satellite Server manages local content hosts, and Capsule Servers manage content hosts in additional geographic locations. This scenario assumes an on-premise infrastructure that supports different geographical locations for the organization.

You can use many Satellite Server architectures to manage hosts that run in cloud providers. In most cases, you might require an expanded architecture with a Satellite Server running in the same region as the hosts in the cloud. Red Hat recommends this architecture, because the use of an on-premise Satellite Server to directly manage content hosts that run on cloud platforms can incur high bandwidth costs. These costs are typically charged at the cloud vendor's external bandwidth rate.

With this architecture, you directly manage instances in the same region, as shown in the following diagram.

Figure 12.1: Satellite Server deployed in a single region

Another option is to deploy a Capsule Server in the cloud region, to be managed and synchronized by an on-premise Satellite Server. You can configure additional Capsule Servers to manage multiple cloud regions or even multiple cloud providers by using VPN or internet gateways. Similarly, you can install both the Satellite Server and one or more Capsule Servers in individual Virtual Private Cloud (VPC) regions with VPN gateways between them for synchronizing content. This option is shown in the following diagram.

Figure 12.2: Cloud-based Capsule Server securely connected to an on-premise Satellite Server

Plan an Image Provisioning Strategy for Cloud Providers

Before choosing a Satellite architecture, determine how you intend to obtain Red Hat product images and support. An important support difference exists between providing your own images through the "bring your own subscription" model known as Red Hat Cloud Access, and by using on-demand images that are obtained directly from supported cloud providers in a pay-as-you-go model.

On-demand Images

On-demand images are purchased from cloud service providers, such as Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform, or IBM Cloud. These images are for cloud instances, and you can use them only within the cloud environment.

Red Hat supplies updates to these images to the provider, who provides them to their customers via Red Hat Update Infrastructure. On-demand customers must not register these images with Red Hat Subscription Management or with Satellite Server.

Red Hat Cloud Access

To host images in the cloud by using your Red Hat subscriptions, purchase the necessary subscriptions directly from Red Hat and enable them for Red Hat Cloud Access. By enabling Red Hat Cloud Access for your eligible Red Hat product subscriptions, you can use those products on supported public cloud providers. In this model, the terms of your subscription with Red Hat remain the same as an on-premise use case.

The following list shows some of the available features with Cloud Access:

  • Upload subscribed Red Hat product images to a cloud provider.

  • Access your images through the applicable web console.

  • Maintain your support services with Red Hat directly.

  • Move subscriptions to certified public cloud providers.

  • Access all errata and updates to help to improve security and quality.

  • Maintain the consistency and help to improve the security of your applications.

Red Hat Cloud Access is specifically for virtualized environments. For bare metal services, Cloud Access is not required. For example, clients can bring their Red Hat subscriptions that use certified hardware on IBM Cloud Bare Metal Servers. For more information about Red Hat certified hardware, refer to the hardware certification catalog for Red Hat Enterprise Linux.

Red Hat provides gold images for Certified Cloud and Service partners (CCSP) through Red Hat Cloud Access. Red Hat gold images are cloud-ready Red Hat virtual machine images that are built and maintained by a trusted source. Gold images allow you to quickly deploy Red Hat instances in CCSP environments.

The options for maintaining the cloud instances deployed from gold images vary depending on your cloud provider. Typically, Red Hat preconfigures gold images to use the Red Hat Update Infrastructure (RHUI) to keep them updated. If the gold image is not preconfigured to use the RHUI or you disable it, you can manage the gold images by using Red Hat Subscription Management or Red Hat Satellite.

You can enroll in Red Hat Access by following these steps:

  • Log in to the Red Hat Customer Portal.

  • Navigate to the Cloud Access Dashboard.

  • Click Enable a new provider.

  • Select the cloud provider from the drop-down menu.

  • Enter the account information for the cloud provider.

  • Choose the subscription to deploy on the cloud provider.

  • In the Maximum Enabled Entitlement Quantity field, enter the anticipated maximum number of subscription entitlements for each subscription that you plan to deploy on the cloud provider.

  • Click Enable.

Use-case Scenarios on Cloud Providers

Because cloud providers are image-only services, most but not all Satellite use cases are available on cloud platforms. You can perform these Satellite activities on supported cloud providers:

  • Manage subscriptions and errata

  • Manage host content

  • Manage host configuration

  • Use Red Hat Insights with Satellite

  • Use IdM for realm integration and external authentication

  • Manage security compliance with OpenSCAP

  • Run remote job execution on hosts

Cloud providers typically do not offer client-manageable DHCP services, which means that PXE, iPXE, and kickstart provisioning methods are unusable or unavailable. The following list shows some Satellite Server features that are not typically available in cloud providers:

  • PXE provisioning

  • Discovery and discovery rules

  • ISO provisioning with iPXE

  • PXE-less discovery (iPXE)

Supported Cloud Providers for Running Red Hat Satellite

Red Hat supports running Satellite Server 6.5 or later Satellite or Capsule instances on the following supported cloud providers:

  • Alibaba Cloud

  • Amazon Web Services

  • Google Cloud Platform

  • IBM Cloud

  • Microsoft Azure

Customers who use Cloud Access do not require a Red Hat support exception when installing Red Hat Satellite in one of the previously listed cloud providers.

Red Hat does not assist with configuring cloud provider networking, availability zones, or other needed cloud provider resources to deploy Satellite Servers or Capsule Servers on cloud provider platforms. The support for these configurations is available through the cloud provider.

Revision: rh403-6.11-3ad886e