mirror of
https://github.com/openshift/openshift-docs.git
synced 2026-02-05 12:46:18 +01:00
26 lines
1.8 KiB
Plaintext
26 lines
1.8 KiB
Plaintext
// Module included in the following assemblies:
|
|
//
|
|
// * rosa_architecture/rosa_architecture_sub/rosa-architecture-models.adoc
|
|
|
|
:_mod-docs-content-type: CONCEPT
|
|
[id="rosa-hcp-architecture_{context}"]
|
|
= {product-title} with HCP architecture
|
|
|
|
{product-title} hosts a highly-available, single-tenant OpenShift control plane. The hosted control plane is deployed across 3 availability zones with 2 API server instances and 3 etcd instances.
|
|
|
|
You can create a {product-title} cluster with or without an internet-facing API server, with the latter considered a “private” cluster and the former considered a “public” cluster. Private API servers are only accessible from your VPC subnets. You access the hosted control plane through an AWS PrivateLink endpoint regardless of API privacy.
|
|
|
|
The worker nodes are deployed in your AWS account and run on your VPC private subnets. You can add additional private subnets from one or more availability zones to ensure high availability. Worker nodes are shared by OpenShift components and applications. OpenShift components such as the ingress controller, image registry, and monitoring are deployed on the worker nodes hosted on your VPC.
|
|
|
|
.{product-title} architecture
|
|
image::544_OpenShift_ROSA-HCP_architecture-model.png[{product-title} architecture]
|
|
|
|
[id="rosa-hcp-network-architecture_{context}"]
|
|
== {product-title} architecture on public and private networks
|
|
With {product-title}, you can create your clusters on public or private networks. The following images depict the architecture of both public and private networks.
|
|
|
|
.{product-title} deployed on a public network
|
|
image::544_OpenShift_ROSA-HCP-and-ROSA-Classic-public.png[{product-title} deployed on a public network]
|
|
|
|
.{product-title} deployed on a private network
|
|
image::544_OpenShift_ROSA-HCP-and-ROSA-Classic-private.png[{product-title} deployed on a private network] |