1
0
mirror of https://github.com/openshift/openshift-docs.git synced 2026-02-05 12:46:18 +01:00

Upgrading ROSA with HCP updates

This commit is contained in:
EricPonvelle
2024-09-19 14:50:41 -04:00
parent cea29bd4c4
commit 3f0766dafe
10 changed files with 387 additions and 77 deletions

View File

@@ -26,8 +26,36 @@ Name: Introduction to ROSA
Dir: rosa_architecture
Distros: openshift-rosa-hcp
Topics:
- Name: Welcome
File: index
- Name: Legal notice
File: legal-notice
- Name: ROSA with HCP overview
File: about-hcp
- Name: AWS STS and ROSA with HCP explained
File: cloud-experts-rosa-hcp-sts-explained
- Name: Policies and service definition
Dir: rosa_policy_service_definition
Distros: openshift-rosa-hcp
Topics:
- Name: ROSA with HCP service definition
File: rosa-hcp-service-definition
- Name: ROSA with HCP instance types
File: rosa-hcp-instance-types
- Name: ROSA with HCP update life cycle
File: rosa-hcp-life-cycle
- Name: SRE and service account access
File: rosa-sre-access
# Created a new assembly in ROSA/OSD. In OCP, the assembly is in a book that is not in ROSA/OSD
# - Name: About admission plugins
# File: rosa-admission-plug-ins
# Distros: openshift-rosa-hcp
# - Name: About IAM resources for ROSA with STS
# File: rosa-sts-about-iam-resources
# - Name: OpenID Connect Overview
# File: rosa-oidc-overview
# - Name: Training for ROSA
# File: rosa-training
---
Name: Learning about ROSA
Dir: rosa_learning

View File

@@ -8,6 +8,8 @@ include::_attributes/attributes-openshift-dedicated.adoc[]
//IMPORTANT!!!
//This page includes information from "Understanding ROSA" (rosa-architecture-rosa-understanding) and "What is ROSA" (cloud-experts-getting-started-what-is-rosa). I have intentionally deleted those two modules from the HCP topic map in an effort to condense our introductory materials.
toc::[]
ROSA is a fully-managed turnkey application platform that allows you to focus on what matters most, delivering value to your customers by building and deploying applications. Red{nbsp}Hat and AWS SRE experts manage the underlying platform so you do not have to worry about infrastructure management. ROSA provides seamless integration with a wide range of AWS compute, database, analytics, machine learning, networking, mobile, and other services to further accelerate the building and delivering of differentiating experiences to your customers.
@@ -24,18 +26,36 @@ ROSA uses AWS Security Token Service (STS) to obtain credentials to manage infra
== Key features of {hcp-title}
* *Cluster node scaling:* {hcp-title} requires a minimum of only two nodes, making it ideal for smaller projects while still being able to scale to support larger projects and enterprises. Easily add or remove compute nodes to match resource demand. Autoscaling allows you to automatically adjust the size of the cluster based on the current workload. See xref:../rosa_cluster_admin/rosa_nodes/rosa-nodes-about-autoscaling-nodes.adoc#rosa-nodes-about-autoscaling-nodes[About autoscaling nodes on a cluster] for more details.
* *Cluster node scaling:* {hcp-title} requires a minimum of only two nodes, making it ideal for smaller projects while still being able to scale to support larger projects and enterprises. Easily add or remove compute nodes to match resource demand. Autoscaling allows you to automatically adjust the size of the cluster based on the current workload. See
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/rosa_cluster_admin/rosa_nodes/rosa-nodes-about-autoscaling-nodes.html#rosa-nodes-about-autoscaling-nodes[About autoscaling nodes on a cluster] for more details.
endif::openshift-rosa-hcp[]
ifdef::openshift-rosa[]
xref:../rosa_cluster_admin/rosa_nodes/rosa-nodes-about-autoscaling-nodes.adoc#rosa-nodes-about-autoscaling-nodes[About autoscaling nodes on a cluster] for more details.
endif::openshift-rosa[]
* *Fully managed underlying control plane infrastructure:* Control plane components, such as the API server and etcd database, are hosted in a Red{nbsp}Hat-owned AWS account.
* *Rapid provisioning time:* Provisioning time is approximately 10 minutes.
* *Continued cluster operation during upgrades:* Customers can upgrade the control plane and machine pools separately, which means they do not have to shut down the entire cluster during upgrades.
* *Native AWS service:* Access and use Red{nbsp}Hat OpenShift on-demand with a self-service onboarding experience through the AWS management console.
* *Flexible, consumption-based pricing:* Scale to your business needs and pay as you go with flexible pricing and an on-demand hourly or annual billing model.
* *Single bill for Red{nbsp}Hat OpenShift and AWS usage:* Customers will receive a single bill from AWS for both Red{nbsp}Hat OpenShift and AWS consumption.
* *Fully integrated support experience:* Installation, management, maintenance, and upgrades are performed by Red{nbsp}Hat site reliability engineers (SREs) with joint Red{nbsp}Hat and Amazon support and a 99.95% service-level agreement (SLA). See the xref:../support/getting-support.adoc#getting-support[ROSA support documentation] for more details.
* *Fully integrated support experience:* Installation, management, maintenance, and upgrades are performed by Red{nbsp}Hat site reliability engineers (SREs) with joint Red{nbsp}Hat and Amazon support and a 99.95% service-level agreement (SLA). See the
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/support/getting-support.html#getting-support[ROSA support documentation] for more details.
endif::openshift-rosa-hcp[]
ifdef::openshift-rosa[]
xref:../support/getting-support.adoc#getting-support[ROSA support documentation] for more details.
endif::openshift-rosa[]
* *AWS service integration:* AWS has a robust portfolio of cloud services, such as compute, storage, networking, database, analytics, and machine learning. All of these services are directly accessible through ROSA. This makes it easier to build, operate, and scale globally and on-demand through a familiar management interface.
* *Maximum availability:* Deploy clusters across multiple availability zones in supported regions to maximize availability and maintain high availability for your most demanding mission-critical applications and data.
* *Optimized clusters:* Choose from memory-optimized, compute-optimized, or general purpose EC2 instance types with clusters sized to meet your needs.
* *Global availability:* Refer to the xref:../rosa_architecture/rosa_policy_service_definition/rosa-service-definition.adoc#rosa-sdpolicy-regions-az_rosa-service-definition[product regional availability page] to see where ROSA is available globally.
* *Global availability:* Refer to the
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/rosa_architecture/rosa_policy_service_definition/rosa-service-definition.html#rosa-sdpolicy-regions-az_rosa-service-definition[product regional availability page] to see where ROSA is available globally.
endif::openshift-rosa-hcp[]
ifdef::openshift-rosa[]
xref:../rosa_architecture/rosa_policy_service_definition/rosa-service-definition.adoc#rosa-sdpolicy-regions-az_rosa-service-definition[product regional availability page] to see where ROSA is available globally.
endif::openshift-rosa[]
include::modules/rosa-sdpolicy-am-billing.adoc[leveloffset=+1]
@@ -45,60 +65,178 @@ Use the following sections to find content to help you learn about and use {hcp-
[id="architect"]
=== Architect
[options="header",cols="3*"]
|===
| Learn about {hcp-title} |Plan {hcp-title} deployment |Additional resources
| xref:../architecture/index.adoc#architecture-overview[Architecture overview]
| xref:../rosa_backing_up_and_restoring_applications/backing-up-applications.adoc#rosa-backing-up-applications[Back up and restore]
| xref:../rosa_architecture/rosa_policy_service_definition/rosa-hcp-life-cycle.adoc#rosa-hcp-life-cycle[{hcp-title} life cycle]
| xref:../architecture/rosa-architecture-models.adoc#rosa-architecture-models[{hcp-title} architecture]
| xref:../../rosa_architecture/rosa_policy_service_definition/rosa-policy-process-security.adoc#rosa-policy-process-security[Understanding process and security]
| xref:../rosa_architecture/rosa_policy_service_definition/rosa-hcp-service-definition.adoc#rosa-hcp-service-definition[{hcp-title} service definition]
| xref:../../rosa_architecture/rosa_policy_service_definition/rosa-life-cycle.adoc#rosa-life-cycle[Updates lifecycle]
| xref:../../rosa_planning/rosa-limits-scalability.adoc#rosa-limits-scalability[Limits and scalability]
| xref:../support/index.adoc#support-overview[Getting support]
|
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/architecture/index.html#architecture-overview[Architecture overview]
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../architecture/index.adoc#architecture-overview[Architecture overview]
endif::openshift-rosa-hcp[]
|
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/rosa_backing_up_and_restoring_applications/backing-up-applications.html#rosa-backing-up-applications[Back up and restore]
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../rosa_backing_up_and_restoring_applications/backing-up-applications.adoc#rosa-backing-up-applications[Back up and restore]
endif::openshift-rosa-hcp[]
|
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/rosa_architecture/rosa_policy_service_definition/rosa-hcp-life-cycle.html#rosa-hcp-life-cycle[{hcp-title} life cycle]
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../rosa_architecture/rosa_policy_service_definition/rosa-hcp-life-cycle.adoc#rosa-hcp-life-cycle[{hcp-title} life cycle]
endif::openshift-rosa-hcp[]
|
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/architecture/rosa-architecture-models.html#rosa-architecture-models[{hcp-title} architecture]
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../architecture/rosa-architecture-models.adoc#rosa-architecture-models[{hcp-title} architecture]
endif::openshift-rosa-hcp[]
|
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/rosa_architecture/rosa_policy_service_definition/rosa-policy-process-security.html#rosa-policy-process-security[Understanding process and security]
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../../rosa_architecture/rosa_policy_service_definition/rosa-policy-process-security.adoc#rosa-policy-process-security[Understanding process and security]
endif::openshift-rosa-hcp[]
|
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/rosa_architecture/rosa_policy_service_definition/rosa-hcp-service-definition.html#rosa-hcp-service-definition[{hcp-title} service definition]
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../rosa_architecture/rosa_policy_service_definition/rosa-hcp-service-definition.adoc#rosa-hcp-service-definition[{hcp-title} service definition]
endif::openshift-rosa-hcp[]
|
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/rosa_architecture/rosa_policy_service_definition/rosa-life-cycle.html#rosa-life-cycle[Updates lifecycle]
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../../rosa_architecture/rosa_policy_service_definition/rosa-life-cycle.adoc#rosa-life-cycle[Updates lifecycle]
endif::openshift-rosa-hcp[]
|
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/rosa_planning/rosa-limits-scalability.html#rosa-limits-scalability[Limits and scalability]
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../../rosa_planning/rosa-limits-scalability.adoc#rosa-limits-scalability[Limits and scalability]
endif::openshift-rosa-hcp[]
|
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/support/index.html#support-overview[Getting support]
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../support/index.adoc#support-overview[Getting support]
endif::openshift-rosa-hcp[]
|
|
| link:https://red.ht/rosa-roadmap[ROSA roadmap]
|===
[id="cluster-administrator"]
=== Cluster Administrator
[options="header",cols="4*"]
|===
|Learn about {hcp-title} |Deploy {hcp-title} |Manage {hcp-title} |Additional resources
|
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/architecture/rosa-architecture-models.html#rosa-architecture-models[{hcp-title} architecture]
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../architecture/rosa-architecture-models.adoc#rosa-architecture-models[{hcp-title} architecture]
endif::openshift-rosa-hcp[]
|
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/rosa_hcp/rosa-hcp-sts-creating-a-cluster-quickly.html#rosa-hcp-sts-creating-a-cluster-quickly[Installing {hcp-title}]
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../rosa_hcp/rosa-hcp-sts-creating-a-cluster-quickly.adoc#rosa-hcp-sts-creating-a-cluster-quickly[Installing {hcp-title}]
endif::openshift-rosa-hcp[]
|
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/observability/logging/cluster-logging.html#cluster-logging[Logging]
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../observability/logging/cluster-logging.adoc#cluster-logging[Logging]
endif::openshift-rosa-hcp[]
|
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/support/index.html#support-overview[Getting Support]
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../support/index.adoc#support-overview[Getting Support]
endif::openshift-rosa-hcp[]
| xref:../architecture/rosa-architecture-models.adoc#rosa-architecture-models[{hcp-title} architecture]
| xref:../rosa_hcp/rosa-hcp-sts-creating-a-cluster-quickly.adoc#rosa-hcp-sts-creating-a-cluster-quickly[Installing {hcp-title}]
| xref:../observability/logging/cluster-logging.adoc#cluster-logging[Logging]
| xref:../support/index.adoc#support-overview[Getting Support]
| link:https://learn.openshift.com/?extIdCarryOver=true&sc_cid=701f2000001Css5AAC[OpenShift Interactive Learning Portal]
| xref:../storage/index.adoc#storage-overview[Storage]
| xref:../observability/monitoring/monitoring-overview.adoc#monitoring-overview_virt-monitoring-overview[Monitoring overview]
| xref:../rosa_architecture/rosa_policy_service_definition/rosa-hcp-life-cycle.adoc#rosa-hcp-life-cycle[{hcp-title} life cycle]
| xref:../../rosa_architecture/rosa_policy_service_definition/rosa-policy-responsibility-matrix.adoc#rosa-policy-responsibility-matrix[ROSA responsibility matrix]
| xref:../rosa_backing_up_and_restoring_applications/backing-up-applications.adoc#rosa-backing-up-applications[Back up and restore]
| xref:../rosa_architecture/rosa-sts-about-iam-resources.adoc#rosa-sts-about-iam-resources[About IAM resources]
|
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/storage/index.html#storage-overview[Storage]
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../storage/index.adoc#storage-overview[Storage]
endif::openshift-rosa-hcp[]
|
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/observability/monitoring/monitoring-overview.html#monitoring-overview_virt-monitoring-overview[Monitoring overview]
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../observability/monitoring/monitoring-overview.adoc#monitoring-overview_virt-monitoring-overview[Monitoring overview]
endif::openshift-rosa-hcp[]
|
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/rosa_architecture/rosa_policy_service_definition/rosa-hcp-life-cycle.html#rosa-hcp-life-cycle[{hcp-title} life cycle]
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../rosa_architecture/rosa_policy_service_definition/rosa-hcp-life-cycle.adoc#rosa-hcp-life-cycle[{hcp-title} life cycle]
endif::openshift-rosa-hcp[]
|
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/rosa_architecture/rosa_policy_service_definition/rosa-policy-responsibility-matrix.html#rosa-policy-responsibility-matrix[ROSA responsibility matrix]
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../../rosa_architecture/rosa_policy_service_definition/rosa-policy-responsibility-matrix.adoc#rosa-policy-responsibility-matrix[ROSA responsibility matrix]
endif::openshift-rosa-hcp[]
|
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/rosa_backing_up_and_restoring_applications/backing-up-applications.html#rosa-backing-up-applications[Back up and restore]
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../rosa_backing_up_and_restoring_applications/backing-up-applications.adoc#rosa-backing-up-applications[Back up and restore]
endif::openshift-rosa-hcp[]
|
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/rosa_architecture/rosa-sts-about-iam-resources.html#rosa-sts-about-iam-resources[About IAM resources]
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../rosa_architecture/rosa-sts-about-iam-resources.adoc#rosa-sts-about-iam-resources[About IAM resources]
endif::openshift-rosa-hcp[]
| link:https://red.ht/rosa-roadmap[ROSA roadmap]
| xref:../../rosa_architecture/rosa_policy_service_definition/rosa-policy-understand-availability.adoc#rosa-policy-understand-availability[About availability]
| xref:../upgrading/rosa-hcp-upgrading.adoc#rosa-hcp-upgrading[Upgrading]
|
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/rosa_architecture/rosa_policy_service_definition/rosa-policy-understand-availability.html#rosa-policy-understand-availability[About availability]
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../../rosa_architecture/rosa_policy_service_definition/rosa-policy-understand-availability.adoc#rosa-policy-understand-availability[About availability]
endif::openshift-rosa-hcp[]
|
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/upgrading/rosa-hcp-upgrading.html#rosa-hcp-upgrading[Upgrading]
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../upgrading/rosa-hcp-upgrading.adoc#rosa-hcp-upgrading[Upgrading]
endif::openshift-rosa-hcp[]
|
|
|===
[id="Developer"]
=== Developer
@@ -107,19 +245,48 @@ Use the following sections to find content to help you learn about and use {hcp-
|Learn about application development in {hcp-title} |Deploy applications |Additional resources
| link:https://developers.redhat.com/[Red{nbsp}Hat Developers site]
| xref:../applications/index.adoc#building-applications-overview[Building applications overview]
| xref:../support/index.adoc#support-overview[Getting support]
|
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/applications/index.html#building-applications-overview[Building applications overview]
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../applications/index.adoc#building-applications-overview[Building applications overview]
endif::openshift-rosa-hcp[]
|
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/support/index.html#support-overview[Getting support]
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../support/index.adoc#support-overview[Getting support]
endif::openshift-rosa-hcp[]
| link:https://developers.redhat.com/products/openshift-dev-spaces/overview[{openshift-dev-spaces-productname} (formerly Red{nbsp}Hat CodeReady Workspaces)]
| xref:../operators/index.adoc#operators-overview[Operators overview]
|
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/operators/index.html#operators-overview[Operators overview]
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../operators/index.adoc#operators-overview[Operators overview]
endif::openshift-rosa-hcp[]
| link:https://red.ht/rosa-roadmap[ROSA roadmap]
|
| xref:../openshift_images/index.adoc#overview-of-images[Images]
|
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/openshift_images/index.html#overview-of-images[Images]
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../openshift_images/index.adoc#overview-of-images[Images]
endif::openshift-rosa-hcp[]
|
|
| xref:../cli_reference/odo-important-update.adoc#odo-important_update[Developer-focused CLI]
|
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/cli_reference/odo-important-update.html#odo-important_update[Developer-focused CLI]
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../cli_reference/odo-important-update.adoc#odo-important_update[Developer-focused CLI]
endif::openshift-rosa-hcp[]
|
|===

View File

@@ -37,12 +37,24 @@ Security features for AWS STS include:
[id="components-specific-to-rosa-hcp-with-sts"]
== Components of {hcp-title}
* *AWS infrastructure* - The infrastructure required for the cluster including the Amazon EC2 instances, Amazon EBS storage, and networking components. See xref:../rosa_architecture/rosa_policy_service_definition/rosa-service-definition.adoc#rosa-sdpolicy-aws-compute-types_rosa-service-definition[AWS compute types] to see the supported instance types for compute nodes and xref:../rosa_planning/rosa-sts-aws-prereqs.adoc#rosa-ec2-instances_rosa-sts-aws-prereqs[provisioned AWS infrastructure] for more information on cloud resource configuration.
* *AWS infrastructure* - The infrastructure required for the cluster including the Amazon EC2 instances, Amazon EBS storage, and networking components. See
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/rosa_architecture/rosa_policy_service_definition/rosa-service-definition.html#rosa-sdpolicy-aws-compute-types_rosa-service-definition[AWS compute types] to see the supported instance types for compute nodes and link:https://docs.openshift.com/rosa/rosa_planning/rosa-sts-aws-prereqs.html#rosa-ec2-instances_rosa-sts-aws-prereqs[provisioned AWS infrastructure] for more information on cloud resource configuration.
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../rosa_architecture/rosa_policy_service_definition/rosa-service-definition.adoc#rosa-sdpolicy-aws-compute-types_rosa-service-definition[AWS compute types] to see the supported instance types for compute nodes and xref:../rosa_planning/rosa-sts-aws-prereqs.adoc#rosa-ec2-instances_rosa-sts-aws-prereqs[provisioned AWS infrastructure] for more information on cloud resource configuration.
endif::openshift-rosa-hcp[]
* *AWS STS* - A method for granting short-term, dynamic tokens to provide users the necessary permissions to temporarily interact with your AWS account resources.
* *OpenID Connect (OIDC)* - A mechanism for cluster Operators to authenticate with AWS, assume the cluster roles through a trust policy, and obtain temporary credentials from AWS IAM STS to make the required API calls.
* *Roles and policies* - The roles and policies used by {hcp-title} can be divided into account-wide roles and policies and Operator roles and policies.
+
The policies determine the allowed actions for each of the roles. See xref:../rosa_architecture/rosa-sts-about-iam-resources.adoc#rosa-sts-about-iam-resources[About IAM resources for ROSA clusters that use STS] for more details about the individual roles and policies and xref:../rosa_planning/rosa-sts-ocm-role.adoc#rosa-sts-ocm-role[ROSA IAM role resource] for more details about trust policies.
The policies determine the allowed actions for each of the roles. See
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/rosa_architecture/rosa-sts-about-iam-resources.html#rosa-sts-about-iam-resources[About IAM resources for ROSA clusters that use STS] for more details about the individual roles and policies and link:https://docs.openshift.com/rosa/rosa_planning/rosa-sts-ocm-role.html#rosa-sts-ocm-role[ROSA IAM role resource] for more details about trust policies.
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../rosa_architecture/rosa-sts-about-iam-resources.adoc#rosa-sts-about-iam-resources[About IAM resources for ROSA clusters that use STS] for more details about the individual roles and policies and xref:../rosa_planning/rosa-sts-ocm-role.adoc#rosa-sts-ocm-role[ROSA IAM role resource] for more details about trust policies.
endif::openshift-rosa-hcp[]
+
--
** The account-wide roles are:
@@ -96,7 +108,13 @@ Deploying a {hcp-title} cluster follows the following steps:
During the cluster creation process, the ROSA CLI creates the required JSON files for you and outputs the commands you need. If desired, the ROSA CLI can also run the commands for you.
The ROSA CLI can automatically create the roles for you, or you can manually create them by using the `--mode manual` or `--mode auto` flags. For further details about deployment, see xref:../rosa_install_access_delete_clusters/rosa-sts-creating-a-cluster-with-customizations.adoc#rosa-sts-creating-cluster-customizations_rosa-sts-creating-a-cluster-with-customizations[Creating a cluster with customizations].
The ROSA CLI can automatically create the roles for you, or you can manually create them by using the `--mode manual` or `--mode auto` flags. For further details about deployment, see
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/rosa_install_access_delete_clusters/rosa-sts-creating-a-cluster-with-customizations.html#rosa-sts-creating-cluster-customizations_rosa-sts-creating-a-cluster-with-customizations[Creating a cluster with customizations].
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../rosa_install_access_delete_clusters/rosa-sts-creating-a-cluster-with-customizations.adoc#rosa-sts-creating-cluster-using-customizations_rosa-sts-creating-a-cluster-with-customizations[Creating a cluster with customizations].
endif::openshift-rosa-hcp[]
//Change the above xref when we have HCP specific docs
[id="hcp-sts-process"]

View File

@@ -17,13 +17,14 @@ Welcome to the official {product-title} (ROSA) documentation, where you can lear
To learn about ROSA, interacting with ROSA by using {cluster-manager-first} and command-line interface (CLI) tools, consumption experience, and integration with Amazon Web Services (AWS) services, start with xref:../rosa_architecture/rosa-understanding.adoc#rosa-understanding[the Introduction to ROSA documentation].
image::291_OpenShift_on_AWS_Intro_1122_docs.png[{product-title}]
endif::openshift-rosa[]
ifdef::openshift-rosa[]
To navigate the ROSA documentation, use the left navigation bar.
endif::[]
endif::openshift-rosa[]
ifdef::openshift-rosa-hcp[]
Welcome to the official {product-title} (ROSA) documentation, where you can learn about ROSA and start exploring its features.
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa[]
ifndef::openshift-rosa,openshift-rosa-hcp[]
ifndef::openshift-rosa,openshift-rosa-hcp,openshift-dedicated,openshift-dpu,openshift-telco[]
To navigate the {product-title} {product-version} documentation, you can use one of the following methods:
@@ -157,7 +158,7 @@ xref:../installing/installing_ibm_cloud/preparing-to-install-on-ibm-cloud.adoc#p
- **xref:../machine_configuration/mco-coreos-layering.adoc#mco-coreos-layering[{op-system-first} image layering]**: As a post-installation task, you can add new images on top of the base {op-system} image. This layering does not modify the base {op-system} image. Instead, the layering creates a custom layered image that includes all {op-system} functions and adds additional functions to specific nodes in the cluster.
endif::[]
ifndef::openshift-rosa,openshift-dedicated,openshift-dpu,microshift[]
ifndef::openshift-rosa,openshift-rosa-hcp,openshift-dedicated,openshift-dpu,microshift[]
== Developer activities
Develop and deploy containerized applications with {product-title}. {product-title} is a platform for developing and deploying containerized applications. Read the following {product-title} documentation, so that you can better understand {product-title} functions:
@@ -197,7 +198,7 @@ xref:../operators/operator_sdk/helm/osdk-helm-support.adoc#osdk-helm-support[Hel
- **Software Supply Chain Security enhancements**: The PipelineRun *details* page in the *Developer* or *Administrator* perspective of the web console provides a visual representation of identified vulnerabilities, which are categorized by severity. Additionally, these enhancements provide an option to download or view Software Bill of Materials (SBOMs) for enhanced transparency and control within your supply chain. Learn about link:https://docs.openshift.com/pipelines/1.13/secure/setting-up-openshift-pipelines-to-view-software-supply-chain-security-elements.html[setting up OpenShift Pipelines in the web console to view Software Supply Chain Security elements].
endif::openshift-enterprise,openshift-webscale,openshift-origin[]
endif::openshift-rosa,openshift-dedicated,openshift-dpu,microshift[]
endif::openshift-rosa,openshift-rosa-hcp,openshift-dedicated,openshift-dpu,microshift[]
ifdef::openshift-dedicated[]
== Developer activities
@@ -319,7 +320,7 @@ While cluster maintenance and host configuration is performed by the Red Hat Sit
- *Manage nodes*: Learn to manage nodes, including configuring machine pools and autoscaling.
endif::openshift-dedicated[]
endif::openshift-enterprise,openshift-webscale,openshift-origin[]
endif::openshift-rosa[]
endif::openshift-rosa,openshift-rosa-hcp[]
ifdef::openshift-enterprise[]
== Hosted control plane activities

View File

@@ -11,7 +11,12 @@ include::modules/life-cycle-overview.adoc[leveloffset=+1]
[role="_additional-resources"]
.Additional resources
ifdef::openshift-rosa-hcp[]
* link:https://docs.openshift.com/rosa/rosa_architecture/rosa_policy_service_definition/rosa-service-definition.html#rosa-service-definition[{product-title} service definition]
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
* xref:../../rosa_architecture/rosa_policy_service_definition/rosa-service-definition.adoc#rosa-service-definition[{product-title} service definition]
endif::openshift-rosa-hcp[]
include::modules/life-cycle-definitions.adoc[leveloffset=+1]
include::modules/life-cycle-major-versions.adoc[leveloffset=+1]
@@ -20,7 +25,12 @@ include::modules/life-cycle-minor-versions.adoc[leveloffset=+1]
[role="_additional-resources"]
.Additional resources
ifdef::openshift-rosa-hcp[]
* link:https://docs.openshift.com/rosa/rosa_architecture/rosa_policy_service_definition/rosa-life-cycle.html#rosa-limited-support_rosa-life-cycle[{product-title} limited support status]
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
* xref:../../rosa_architecture/rosa_policy_service_definition/rosa-life-cycle.adoc#rosa-limited-support_rosa-life-cycle[{product-title} limited support status]
endif::openshift-rosa-hcp[]
include::modules/life-cycle-patch-versions.adoc[leveloffset=+1]
include::modules/life-cycle-limited-support.adoc[leveloffset=+1]

View File

@@ -19,17 +19,31 @@ include::modules/rosa-sdpolicy-am-cluster-self-service.adoc[leveloffset=+2]
[role="_additional-resources"]
.Additional resources
ifdef::openshift-rosa-hcp[]
* link:https://docs.openshift.com/rosa/rosa_architecture/rosa_policy_service_definition/rosa-hcp-service-definition.html#rosa-sdpolicy-red-hat-operator_rosa-service-definition[Red{nbsp}Hat Operator Support]
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
* xref:../../rosa_architecture/rosa_policy_service_definition/rosa-hcp-service-definition.adoc#rosa-sdpolicy-red-hat-operator_rosa-service-definition[Red{nbsp}Hat Operator Support]
endif::openshift-rosa-hcp[]
include::modules/rosa-sdpolicy-instance-types.adoc[leveloffset=+2]
[role="_additional-resources"]
.Additional resources
<<<<<<< HEAD
* xref:../rosa_policy_service_definition/rosa-hcp-instance-types.adoc#rosa-hcp-instance-types[{hcp-title} instance types]
* xref:../../rosa_planning/rosa-hcp-limits-scalability.adoc#rosa-hcp-limits-scalability[{hcp-title} limits and scalability]
=======
For a detailed listing of supported instance types, see
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/rosa_policy_service_definition/rosa-hcp-instance-types.html#rosa-hcp-instance-types[{hcp-title} instance types].
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../rosa_policy_service_definition/rosa-hcp-instance-types.adoc#rosa-hcp-instance-types[{hcp-title} instance types].
endif::openshift-rosa-hcp[]
>>>>>>> 42a0000f89 (Upgrading ROSA with HCP updates)
include::modules/rosa-sdpolicy-am-regions-az.adoc[leveloffset=+2]
@@ -49,7 +63,13 @@ include::modules/rosa-sdpolicy-networking.adoc[leveloffset=+1]
[role="_additional-resources"]
.Additional resources
* For more information about the network verification checks, see xref:../../networking/network-verification.adoc#network-verification[Network verification].
* For more information about the network verification checks, see
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/networking/network-verification.html#network-verification[Network verification].
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../../networking/network-verification.adoc#network-verification[Network verification].
endif::openshift-rosa-hcp[]
include::modules/rosa-sdpolicy-storage.adoc[leveloffset=+1]
include::modules/rosa-sdpolicy-platform.adoc[leveloffset=+1]
@@ -59,5 +79,18 @@ include::modules/rosa-sdpolicy-security.adoc[leveloffset=+1]
[id="additional-resources_rosa-hcp-service-definition"]
== Additional resources
* See xref:../rosa_policy_service_definition/rosa-policy-process-security.adoc#rosa-policy-process-security[Understanding process and security for ROSA] for the latest compliance information.
* See xref:../rosa_policy_service_definition/rosa-life-cycle.adoc#rosa-life-cycle[ROSA life cycle]
* See
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/rosa_policy_service_definition/rosa-policy-process-security.html#rosa-policy-process-security[Understanding process and security for ROSA] for the latest compliance information.
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../rosa_policy_service_definition/rosa-policy-process-security.adoc#rosa-policy-process-security[Understanding process and security for ROSA] for the latest compliance information.
endif::openshift-rosa-hcp[]
* See
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/rosa_policy_service_definition/rosa-life-cycle.adoc#rosa-life-cycle[ROSA life cycle]
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../rosa_policy_service_definition/rosa-life-cycle.adoc#rosa-life-cycle[ROSA life cycle]
endif::openshift-rosa-hcp[]

View File

@@ -19,18 +19,31 @@ include::modules/rosa-sdpolicy-am-cluster-self-service.adoc[leveloffset=+2]
[role="_additional-resources"]
.Additional resources
ifdef::openshift-rosa-hcp[]
* link:https://docs.openshift.com/rosa/rosa_architecture/rosa_policy_service_definition/rosa-service-definition.html#rosa-sdpolicy-red-hat-operator_rosa-service-definition[Red{nbsp}Hat Operator Support]
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
* xref:../../rosa_architecture/rosa_policy_service_definition/rosa-service-definition.adoc#rosa-sdpolicy-red-hat-operator_rosa-service-definition[Red{nbsp}Hat Operator Support]
endif::openshift-rosa-hcp[]
ifdef::openshift-rosa-hcp[]
* link:https://docs.openshift.com/rosa/rosa_cluster_admin/rosa-configuring-pid-limits.html#rosa-configuring-pid-limits[Configuring PID limits]
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
* xref:../../rosa_cluster_admin/rosa-configuring-pid-limits.adoc#rosa-configuring-pid-limits[Configuring PID limits]
endif::openshift-rosa-hcp[]
include::modules/rosa-sdpolicy-instance-types.adoc[leveloffset=+2]
[role="_additional-resources"]
.Additional resources
* xref:../rosa_policy_service_definition/rosa-instance-types.adoc#rosa-instance-types[{product-title} instance types]
* xref:../../rosa_planning/rosa-limits-scalability.adoc#rosa-limits-scalability[Limits and scalability]
For a detailed listing of supported instance types, see
ifdef::openshift-rosa-hcp[]
xref:../rosa_policy_service_definition/rosa-hcp-instance-types.adoc#rosa-instance-types[{product-title} instance types].endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../rosa_policy_service_definition/rosa-instance-types.adoc#rosa-instance-types[{product-title} instance types].
endif::openshift-rosa-hcp[]
include::modules/rosa-sdpolicy-am-regions-az.adoc[leveloffset=+2]
@@ -50,7 +63,13 @@ include::modules/rosa-sdpolicy-networking.adoc[leveloffset=+1]
[role="_additional-resources"]
.Additional resources
* For more information about the network verification checks, see xref:../../networking/network-verification.adoc#network-verification[Network verification].
* For more information about the network verification checks, see
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/networking/network-verification.html#network-verification[Network verification].
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../../networking/network-verification.adoc#network-verification[Network verification].
endif::openshift-rosa-hcp[]
include::modules/rosa-sdpolicy-storage.adoc[leveloffset=+1]
include::modules/rosa-sdpolicy-platform.adoc[leveloffset=+1]
@@ -60,5 +79,17 @@ include::modules/rosa-sdpolicy-security.adoc[leveloffset=+1]
[id="additional-resources_rosa-service-definition"]
== Additional resources
* See xref:../rosa_policy_service_definition/rosa-policy-process-security.adoc#rosa-policy-process-security[Understanding process and security for ROSA] for the latest compliance information.
* See xref:../rosa_policy_service_definition/rosa-life-cycle.adoc#rosa-life-cycle[ROSA life cycle]
* See
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/rosa_policy_service_definition/rosa-policy-process-security.html#rosa-policy-process-security[Understanding process and security for ROSA] for the latest compliance information.
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../rosa_policy_service_definition/rosa-policy-process-security.adoc#rosa-policy-process-security[Understanding process and security for ROSA] for the latest compliance information.
endif::openshift-rosa-hcp[]
* See
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/rosa_policy_service_definition/rosa-life-cycle.html#rosa-life-cycle[ROSA life cycle]
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../rosa_policy_service_definition/rosa-life-cycle.adoc#rosa-life-cycle[ROSA life cycle]
endif::openshift-rosa-hcp[]

View File

@@ -23,5 +23,18 @@ include::modules/how-service-accounts-assume-aws-iam-roles-in-sre-owned-projects
[role="_additional-resources"]
.Additional resources
* For more information about the AWS IAM roles used by the cluster Operators, see xref:../../rosa_architecture/rosa-sts-about-iam-resources.adoc#rosa-sts-operator-roles_rosa-sts-about-iam-resources[Cluster-specific Operator IAM role reference].
* For more information about the policies and permissions that the cluster Operators require, see xref:../../rosa_architecture/rosa-sts-about-iam-resources.adoc#rosa-sts-account-wide-roles-and-policies-creation-methods_rosa-sts-about-iam-resources[Methods of account-wide role creation].
* For more information about the AWS IAM roles used by the cluster Operators, see
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/rosa_architecture/rosa-sts-about-iam-resources.html#rosa-sts-operator-roles_rosa-sts-about-iam-resources[Cluster-specific Operator IAM role reference].
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../../rosa_architecture/rosa-sts-about-iam-resources.adoc#rosa-sts-operator-roles_rosa-sts-about-iam-resources[Cluster-specific Operator IAM role reference].
endif::openshift-rosa-hcp[]
* For more information about the policies and permissions that the cluster Operators require, see
ifdef::openshift-rosa-hcp[]
link:https://docs.openshift.com/rosa/rosa_architecture/rosa-sts-about-iam-resources.html#rosa-sts-account-wide-roles-and-policies-creation-methods_rosa-sts-about-iam-resources[Methods of account-wide role creation].
endif::openshift-rosa-hcp[]
ifndef::openshift-rosa-hcp[]
xref:../../rosa_architecture/rosa-sts-about-iam-resources.adoc#rosa-sts-account-wide-roles-and-policies-creation-methods_rosa-sts-about-iam-resources[Methods of account-wide role creation].
endif::openshift-rosa-hcp[]

View File

@@ -65,13 +65,30 @@
</div>
<div class="row">
<div class="col-sm-6 text-center">
<h2>OpenShift ROSA</h2>
<h2>OpenShift ROSA (classic architecture)</h2>
<div class="list-group">
<p>
<a
role="button"
class="btn btn-primary"
href="/openshift-rosa/latest/welcome/index.html"
>
<i class="fa fa-arrow-circle-o-right"></i> ROSA (classic)</a
>
</p>
<p class="list-group-item-text">
Managed OpenShift in the AWS cloud using the classic architecture.
</p>
</div>
</div>
<div class="col-sm-6 text-center">
<h2>OpenShift ROSA</h2>
<div class="list-group">
<p>
<a
role="button"
class="btn btn-primary"
href="/openshift-rosa-hcp/latest/rosa_achitecture/index.html"
>
<i class="fa fa-arrow-circle-o-right"></i> ROSA</a
>

View File

@@ -8,10 +8,15 @@ toc::[]
include::modules/rosa-hcp-upgrade-options.adoc[leveloffset=+1]
.Additional resources
* link:https://docs.openshift.com/rosa/cli_reference/rosa_cli/rosa-manage-objects-cli.html#rosa-edit-machinepool_rosa-managing-objects-cli[ROSA CLI reference: `rosa edit machinepool`]
//This cannot be a module if we want to use the xrefs
[id="rosa-lifecycle-policy_{context}"]
== Life cycle policies and planning
To plan an upgrade, review the xref:../rosa_architecture/rosa_policy_service_definition/rosa-hcp-life-cycle.adoc#rosa-hcp-life-cycle[{hcp-title} update life cycle].
The life cycle page includes release definitions, support and upgrade requirements, installation policy information and life cycle dates.
@@ -37,19 +42,6 @@ Upgrading the entire cluster involves upgrading both the hosted control plane an
* You have installed and configured the latest version of the ROSA CLI.
* No other upgrades are in progress or scheduled to take place at the same time as this upgrade.
ifdef::context[:prevcontext: {context}]
:context: rosa-hcp-upgrading-whole-cluster
include::modules/rosa-hcp-upgrading-cli-control-plane.adoc[leveloffset=+2]
ifdef::prevcontext[:context: {prevcontext}]
ifdef::context[:prevcontext: {context}]
:context: rosa-hcp-upgrading-whole-cluster
include::modules/rosa-hcp-upgrading-cli-machinepool.adoc[leveloffset=+2]
ifdef::prevcontext[:context: {prevcontext}]
ifndef::prevcontext[:!context:]
include::modules/rosa-hcp-upgrading-cli-tutorial.adoc[leveloffset=+1]