diff --git a/NewPSC.png b/NewPSC.png new file mode 100644 index 0000000000..323a80c707 Binary files /dev/null and b/NewPSC.png differ diff --git a/images/NewPSC.png b/images/NewPSC.png new file mode 100644 index 0000000000..323a80c707 Binary files /dev/null and b/images/NewPSC.png differ diff --git a/images/psc2.png b/images/psc2.png new file mode 100644 index 0000000000..f13dd56503 --- /dev/null +++ b/images/psc2.png @@ -0,0 +1,200 @@ + + + + + + + + + + + Customer-1 PSC subnet + + + + Customer-3 PSC subnet + + Customer-2 PSC subnet + + Customer-1 PSC subnet + + Customer-2 PSC subnet + + Customer-3 PSC subnet + + + diff --git a/images/psc_arch_2.png b/images/psc_arch_2.png new file mode 100644 index 0000000000..6f86c982d5 Binary files /dev/null and b/images/psc_arch_2.png differ diff --git a/images/psc_arch_gg2.png b/images/psc_arch_gg2.png new file mode 100644 index 0000000000..c63c3fc4d1 --- /dev/null +++ b/images/psc_arch_gg2.png @@ -0,0 +1,52 @@ + + + + + + + + + + diff --git a/modules/osd-gcp-architecture.adoc b/modules/osd-gcp-architecture.adoc index bc2c80bfbc..61ab4087e0 100644 --- a/modules/osd-gcp-architecture.adoc +++ b/modules/osd-gcp-architecture.adoc @@ -6,7 +6,7 @@ [id="osd-gcp-architecture_{context}"] = Private {product-title} on {GCP} architecture on public and private networks -You can customize the access patterns for your API service endpoint and Red Hat SRE management by choosing one of the following network configuration types: +You can customize the access patterns for your API server endpoint and Red Hat SRE management by choosing one of the following network configuration types: * Private cluster with Private Service Connect (PSC). * Private cluster without PSC diff --git a/modules/private-service-connect-overview.adoc b/modules/private-service-connect-overview.adoc index 79748b5408..37b701f81a 100644 --- a/modules/private-service-connect-overview.adoc +++ b/modules/private-service-connect-overview.adoc @@ -20,15 +20,15 @@ The PSC architecture includes producer services and consumer services. Using PSC The following image depicts how Red HAT SREs and other internal resources access and support clusters created using PSC. -* A unique PSC Service Attachment is created for each OSD cluster in the customer GCP project. The PSC Service Attachment points to the cluster API server load balancer created in the customer GCP project. +* A unique PSC service attachment is created for each OSD cluster in the customer GCP project. The PSC service attachment points to the cluster API server load balancer created in the customer GCP project. -* Similar to Service Attachments, a unique PSC Service Endpoint is created in the Red Hat Management GCP project for each OSD cluster. +* Similar to service attachments, a unique PSC endpoint is created in the Red Hat Management GCP project for each OSD cluster. -* A dedicated subnet for GCP Private Service Connect is created in the cluster’s network within the customer GCP project. This is a special subnet type where the producer services are published via PSC Service Attachments. This subnet is used to Source NAT (SNAT) incoming requests to the cluster API server. Additionally, the PSC subnet must be within the Machine CIDR range and cannot be used in more than one Service Attachment. +* A dedicated subnet for GCP Private Service Connect is created in the cluster’s network within the customer GCP project. This is a special subnet type where the producer services are published via PSC service attachments. This subnet is used to Source NAT (SNAT) incoming requests to the cluster API server. Additionally, the PSC subnet must be within the Machine CIDR range and cannot be used in more than one service attachment. -* Red Hat internal resources and SREs access private OSD clusters using the connectivity between a PSC Endpoint and Service Attachment. Even though the traffic transits multiple VPC networks, it remains entirely within Google Cloud. +* Red Hat internal resources and SREs access private OSD clusters using the connectivity between a PSC endpoint and service attachment. Even though the traffic transits multiple VPC networks, it remains entirely within Google Cloud. -* Access to PSC Service Attachments is possible only via the Red Hat Management project. +* Access to PSC service attachments is possible only via the Red Hat Management project. .PSC architecture overview -image::psc-arch-overview.png[PSC architecture overview] \ No newline at end of file +image::psc_arch_2.png[PSC architecture overview]