Skip to content

Commit 61f5354

Browse files
authored
Merge pull request #87819 from EricPonvelle/OSDOCS-13257-Egress-regions
OSDOCS-13257: Added a note about the supported AWS regions for egress lockdown functionality
2 parents b279ae8 + 0788a91 commit 61f5354

File tree

2 files changed

+33
-2
lines changed

2 files changed

+33
-2
lines changed

modules/rosa-hcp-vpc-terraform.adoc

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -64,6 +64,12 @@ $ terraform plan -out rosa-zero-egress.tfplan -var region=<aws_region> \ <1>
6464
+
6565
--
6666
<1> Enter your AWS region.
67+
+
68+
[IMPORTANT]
69+
====
70+
You can only use egress lockdown on clusters that use the `us-west-1, us-west-2, us-east-1, us-east-2, ap-northeast-1, ap-northeast-2, ap-northeast-3, ap-south-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-north-1, eu-west-1, eu-west-2, eu-west-3`, and `sa-east-1` AWS regions.
71+
====
72+
6773
<2> Enter the availability zones for the VPC. For example, for a VPC that uses `ap-southeast-1`, you would use the following as availability zones: `["ap-southeast-1a", "ap-southeast-1b", "ap-southeast-1c"]`.
6874
<3> Enter the CIDR block for your VPC.
6975
<4> Enter each of the subnets that are created for the VPC.

rosa_hcp/rosa-hcp-egress-lockdown-install.adoc

Lines changed: 27 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,32 @@ include::_attributes/attributes-openshift-dedicated.adoc[]
66
toc::[]
77

88

9-
Creating a {product-title} cluster with egress lockdown provides a way to enhance your cluster's stability and security by allowing your cluster to use the image registry in the local region if the cluster cannot access the Internet. Your cluster will try to pull the images from Quay, but when they aren't reached, it will instead pull the images from the image registry in the local region. All public and private clusters with egress lockdown get their Red Hat container images from a registery that is located in the local region of the cluster instead of gathering these images from various endpoints and registeries on the Internet. You can create a fully operational cluster that does not require a public egress by configuring a virtual private cloud (VPC) and using the `--properties zero_egress:true` flag when creating your cluster.
9+
Creating a {product-title} cluster with egress lockdown provides a way to enhance your cluster's stability and security by allowing your cluster to use the image registry in the local region if the cluster cannot access the Internet. Your cluster will try to pull the images from Quay, but when they aren't reached, it will instead pull the images from the image registry in the local region.
10+
11+
[IMPORTANT]
12+
====
13+
You can only use egress lockdown on clusters that use the following AWS regions:
14+
15+
* `us-west-1`
16+
* `us-west-2`
17+
* `us-east-1`
18+
* `us-east-2`
19+
* `ap-northeast-1`
20+
* `ap-northeast-2`
21+
* `ap-northeast-3`
22+
* `ap-south-1`
23+
* `ap-southeast-1`
24+
* `ap-southeast-2`
25+
* `ca-central-1`
26+
* `eu-central-1`
27+
* `eu-north-1`
28+
* `eu-west-1`
29+
* `eu-west-2`
30+
* `eu-west-3`
31+
* `sa-east-1`
32+
====
33+
34+
All public and private clusters with egress lockdown get their Red Hat container images from a registery that is located in the local region of the cluster instead of gathering these images from various endpoints and registeries on the Internet. You can create a fully operational cluster that does not require a public egress by configuring a virtual private cloud (VPC) and using the `--properties zero_egress:true` flag when creating your cluster.
1035

1136
:FeatureName: Egress lockdown
1237
include::snippets/technology-preview.adoc[]
@@ -36,7 +61,7 @@ You must have a Virtual Private Cloud (VPC) to create {hcp-title} clusters. You
3661

3762
[NOTE]
3863
====
39-
The Terraform instructions are for testing and demonstration purposes. Your own installation requires modifications to the VPC for your specific needs and constraints. You should also ensure that when you use the following Terraform script it is in the same region that you intend to install your cluster. In the following examples, use `us-east-2`.
64+
The Terraform instructions are for testing and demonstration purposes. Your own installation requires modifications to the VPC for your specific needs and constraints. You should also ensure that when you use the following Terraform script it is in the same region that you intend to install your cluster.
4065
====
4166

4267
include::modules/rosa-hcp-vpc-terraform.adoc[leveloffset=+2]

0 commit comments

Comments
 (0)