Skip to content

Commit 8ff1da6

Browse files
committed
OSDOCS-14094: Applied changes to Preparing your Environment
1 parent 1426ebe commit 8ff1da6

14 files changed

+162
-59
lines changed

modules/mos-network-prereqs-min-bandwidth.adoc

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,13 @@
77
[id="mos-network-prereqs-min-bandwidth_{context}"]
88
= Minimum bandwidth
99

10-
During cluster deployment, {product-title} requires a minimum bandwidth of 120{nbsp}Mbps between cluster infrastructure and the public internet or private network locations that provide deployment artifacts and resources. When network connectivity is slower than 120{nbsp}Mbps (for example, when connecting through a proxy) the cluster installation process times out and deployment fails.
10+
During cluster deployment,
11+
ifdef::openshift-rosa[]
12+
{rosa-classic-short}
13+
endif::openshift-rosa[]
14+
ifdef::openshift-rosa-hcp[]
15+
{rosa-short}
16+
endif::openshift-rosa-hcp[]
17+
requires a minimum bandwidth of 120{nbsp}Mbps between cluster infrastructure and the public internet or private network locations that provide deployment artifacts and resources. When network connectivity is slower than 120{nbsp}Mbps (for example, when connecting through a proxy) the cluster installation process times out and deployment fails.
1118

1219
After cluster deployment, network requirements are determined by your workload. However, a minimum bandwidth of 120{nbsp}Mbps helps to ensure timely cluster and operator upgrades.

modules/osd-aws-privatelink-firewall-prerequisites.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@
77
:_mod-docs-content-type: PROCEDURE
88
ifdef::openshift-rosa[]
99
[id="rosa-classic-firewall-prerequisites_{context}"]
10-
= Firewall prerequisites for ROSA (classic architecture) clusters using STS
10+
= Firewall prerequisites for {rosa-classic-short} clusters using STS
1111
endif::openshift-rosa[]
1212
ifdef::openshift-dedicated[]
1313
[id="osd-aws-privatelink-firewall-prerequisites_{context}"]

modules/rosa-aws-provisioned.adoc

Lines changed: 22 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,14 @@
66
[id="rosa-aws-policy-provisioned_{context}"]
77
= Provisioned AWS Infrastructure
88

9-
This is an overview of the provisioned {AWS} components on a deployed {product-title} (ROSA) cluster.
9+
This is an overview of the provisioned {AWS} components on a deployed
10+
ifdef::openshift-rosa[]
11+
{rosa-classic-short}
12+
endif::openshift-rosa[]
13+
ifdef::openshift-rosa-hcp[]
14+
{rosa-short}
15+
endif::openshift-rosa-hcp[]
16+
cluster.
1017

1118
[id="rosa-ec2-instances_{context}"]
1219
== EC2 instances
@@ -15,7 +22,12 @@ AWS EC2 instances are required to deploy
1522
ifndef::openshift-rosa-hcp[]
1623
the control plane and data plane functions for
1724
endif::openshift-rosa-hcp[]
18-
{product-title}.
25+
ifdef::openshift-rosa[]
26+
{rosa-classic-short}.
27+
endif::openshift-rosa[]
28+
ifdef::openshift-rosa-hcp[]
29+
{rosa-short}.
30+
endif::openshift-rosa-hcp[]
1931

2032
ifndef::openshift-rosa-hcp[]
2133
Instance types can vary for control plane and infrastructure nodes, depending on the worker node count.
@@ -201,4 +213,11 @@ can add additional custom security groups during cluster creation. Custom securi
201213

202214
* You must create the custom security groups in AWS before you create the cluster. For more information, see link:https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-security-groups.html[Amazon EC2 security groups for Linux instances].
203215
* You must associate the custom security groups with the VPC that the cluster will be installed into. Your custom security groups cannot be associated with another VPC.
204-
* You might need to request additional quota for your VPC if you are adding additional custom security groups. For information on AWS quota requirements for ROSA, see _Required AWS service quotas_ in _Prepare your environment_. For information on requesting an AWS quota increase, see link:https://docs.aws.amazon.com/servicequotas/latest/userguide/request-quota-increase.html[Requesting a quota increase].
216+
* You might need to request additional quota for your VPC if you are adding additional custom security groups. For information on AWS quota requirements for
217+
ifdef::openshift-rosa[]
218+
{rosa-classic-short},
219+
endif::openshift-rosa[]
220+
ifdef::openshift-rosa-hcp[]
221+
{rosa-short},
222+
endif::openshift-rosa-hcp[]
223+
see _Required AWS service quotas_ in _Prepare your environment_. For information on requesting an AWS quota increase, see link:https://docs.aws.amazon.com/servicequotas/latest/userguide/request-quota-increase.html[Requesting a quota increase].

modules/rosa-hcp-firewall-prerequisites.adoc

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,9 +6,9 @@
66
//TODO OSDOCS-11789: Why is this a procedure and not a reference?
77

88
[id="rosa-hcp-firewall-prerequisites_{context}"]
9-
= Firewall prerequisites for {hcp-title}
9+
= Firewall prerequisites for {rosa-short}
1010

11-
* If you are using a firewall to control egress traffic from {hcp-title-first}, your Virtual Private Cloud (VPC) must be able to complete requests from the cluster to the Amazon S3 service, for example, via an Amazon S3 gateway.
11+
* If you are using a firewall to control egress traffic from {rosa-short}, your Virtual Private Cloud (VPC) must be able to complete requests from the cluster to the Amazon S3 service, for example, via an Amazon S3 gateway.
1212

1313
* You must also configure your firewall to grant access to the following domain and port combinations.
1414
//TODO OSDOCS-11789: From your deploy machine? From your cluster?

modules/rosa-requirements-deploying-in-opt-in-regions.adoc

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,14 @@
55
[id="rosa-requirements-deploying-in-opt-in-regions_{context}"]
66
= Requirements for deploying a cluster in an opt-in region
77

8-
An AWS opt-in region is a region that is not enabled in your AWS account by default. If you want to deploy a {product-title} (ROSA) cluster that uses the AWS Security Token Service (STS) in an opt-in region, you must meet the following requirements:
8+
An AWS opt-in region is a region that is not enabled in your AWS account by default. If you want to deploy a
9+
ifdef::openshift-rosa[]
10+
{rosa-classic-short}
11+
endif::openshift-rosa[]
12+
ifdef::openshift-rosa-hcp[]
13+
{rosa-short}
14+
endif::openshift-rosa-hcp[]
15+
cluster that uses the AWS Security Token Service (STS) in an opt-in region, you must meet the following requirements:
916

1017
* The region must be enabled in your AWS account. For more information about enabling opt-in regions, see link:https://docs.aws.amazon.com/general/latest/gr/rande-manage.html[Managing AWS Regions] in the AWS documentation.
1118
* The security token version in your AWS account must be set to version 2. You cannot use version 1 security tokens for opt-in regions.

modules/rosa-setting-the-aws-security-token-version.adoc

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,14 @@
66
[id="rosa-setting-the-aws-security-token-version_{context}"]
77
= Setting the AWS security token version
88

9-
If you want to create a {product-title} (ROSA) cluster with the AWS Security Token Service (STS) in an AWS opt-in region, you must set the security token version to version 2 in your AWS account.
9+
If you want to create a
10+
ifdef::openshift-rosa[]
11+
{rosa-classic-short}
12+
endif::openshift-rosa[]
13+
ifdef::openshift-rosa-hcp[]
14+
{rosa-short}
15+
endif::openshift-rosa-hcp[]
16+
cluster with the AWS Security Token Service (STS) in an AWS opt-in region, you must set the security token version to version 2 in your AWS account.
1017

1118
.Prerequisites
1219

modules/rosa-sts-associating-your-aws-account.adoc

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -21,19 +21,19 @@ ifeval::["{context}" == "rosa-sts-creating-a-cluster-quickly"]
2121
endif::[]
2222

2323
Before using {cluster-manager-first} on the {hybrid-console-url} to create
24-
ifdef::rosa-hcp[]
25-
{hcp-title} clusters
26-
endif::rosa-hcp[]
27-
ifndef::rosa-hcp[]
28-
{product-title} (ROSA) clusters
29-
endif::rosa-hcp[]
30-
that use the AWS Security Token Service (STS), create an {cluster-manager} IAM role and link it to your Red{nbsp}Hat organization. Then, create a user IAM role and link it to your Red{nbsp}Hat user account in the same Red{nbsp}Hat organization.
24+
ifdef::openshift-rosa[]
25+
{rosa-classic-short}
26+
endif::openshift-rosa[]
27+
ifdef::openshift-rosa-hcp[]
28+
{rosa-short}
29+
endif::openshift-rosa-hcp[]
30+
clusters that use the AWS Security Token Service (STS), create an {cluster-manager} IAM role and link it to your Red{nbsp}Hat organization. Then, create a user IAM role and link it to your Red{nbsp}Hat user account in the same Red{nbsp}Hat organization.
3131

3232
ifdef::quick-install[]
3333
.Prerequisites
3434

3535
ifdef::rosa-hcp[]
36-
* You have completed the AWS prerequisites for {hcp-title}.
36+
* You have completed the AWS prerequisites for {rosa-short}.
3737
endif::rosa-hcp[]
3838
ifndef::rosa-hcp[]
3939
* You have completed the AWS prerequisites for ROSA with STS.
@@ -46,7 +46,7 @@ endif::rosa-hcp[]
4646
====
4747
To successfully install
4848
ifdef::rosa-hcp[]
49-
{hcp-title}
49+
{rosa-short}
5050
endif::rosa-hcp[]
5151
ifndef::rosa-hcp[]
5252
ROSA
@@ -65,7 +65,7 @@ endif::[]
6565
====
6666
To enable automatic deployment of the cluster-specific Operator roles and the OpenID Connect (OIDC) provider using the {cluster-manager} {hybrid-console-second}, you must apply the administrative privileges to the role by choosing the _Admin OCM role_ command in the *Accounts and roles* step of creating a
6767
ifdef::rosa-hcp[]
68-
{hcp-title}
68+
{rosa-short}
6969
endif::rosa-hcp[]
7070
ifndef::rosa-hcp[]
7171
ROSA
@@ -77,14 +77,14 @@ cluster. For more information about the basic and administrative privileges for
7777
====
7878
If you choose the _Basic OCM role_ command in the *Accounts and roles* step of creating a
7979
ifdef::rosa-hcp[]
80-
{hcp-title}
80+
{rosa-short}
8181
endif::rosa-hcp[]
8282
ifndef::rosa-hcp[]
8383
ROSA
8484
endif::rosa-hcp[]
8585
cluster in the {cluster-manager} {hybrid-console-second}, you must deploy a
8686
ifdef::rosa-hcp[]
87-
{hcp-title}
87+
{rosa-short}
8888
endif::rosa-hcp[]
8989
ifndef::rosa-hcp[]
9090
ROSA

modules/rosa-sts-aws-requirements-association-concept.adoc

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,13 @@
66
[id="rosa-associating-concept_{context}"]
77
= AWS account association
88

9-
When you provision {product-title} (ROSA) using {cluster-manager} (`console.redhat.com`), you must associate the `ocm-role` and `user-role` IAM roles with your AWS account using your Amazon Resource Name (ARN). This association process is also known as _account linking_.
9+
When you provision
10+
ifdef::openshift-rosa[]
11+
{rosa-classic-short}
12+
endif::openshift-rosa[]
13+
ifdef::openshift-rosa-hcp[]
14+
{rosa-short}
15+
endif::openshift-rosa-hcp[]
16+
using {cluster-manager} (`console.redhat.com`), you must associate the `ocm-role` and `user-role` IAM roles with your AWS account using your Amazon Resource Name (ARN). This association process is also known as _account linking_.
1017

1118
The `ocm-role` ARN is stored as a label in your Red{nbsp}Hat organization while the `user-role` ARN is stored as a label inside your Red{nbsp}Hat user account. Red{nbsp}Hat uses these ARN labels to confirm that the user is a valid account holder and that the correct permissions are available to perform provisioning tasks in the AWS account.

modules/rosa-sts-aws-requirements-creating-multi-association.adoc

Lines changed: 15 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,14 @@
77
[id="rosa-associating-multiple-account_{context}"]
88
= Associating multiple AWS accounts with your Red{nbsp}Hat organization
99

10-
You can associate multiple AWS accounts with your Red{nbsp}Hat organization. Associating multiple accounts lets you create {product-title} (ROSA) clusters on any of the associated AWS accounts from your Red{nbsp}Hat organization.
10+
You can associate multiple AWS accounts with your Red{nbsp}Hat organization. Associating multiple accounts lets you create
11+
ifdef::openshift-rosa[]
12+
{rosa-classic-short}
13+
endif::openshift-rosa[]
14+
ifdef::openshift-rosa-hcp[]
15+
{rosa-short}
16+
endif::openshift-rosa-hcp[]
17+
clusters on any of the associated AWS accounts from your Red{nbsp}Hat organization.
1118

1219
With this capability, you can create clusters on different AWS profiles according to characteristics that make sense for your business, for example, by using one AWS profile for each region to create region-bound environments.
1320

@@ -17,7 +24,13 @@ With this capability, you can create clusters on different AWS profiles accordin
1724
* You are using {cluster-manager-url} to create clusters.
1825
* You have the permissions required to install AWS account-wide roles.
1926
* You have installed and configured the latest AWS (`aws`) and ROSA (`rosa`) CLIs on your installation host.
20-
* You have created the `ocm-role` and `user-role` IAM roles for ROSA.
27+
* You have created the `ocm-role` and `user-role` IAM roles for
28+
ifdef::openshift-rosa[]
29+
{rosa-classic-short}.
30+
endif::openshift-rosa[]
31+
ifdef::openshift-rosa-hcp[]
32+
{rosa-short}.
33+
endif::openshift-rosa-hcp[]
2134
2235
.Procedure
2336

modules/rosa-sts-aws-requirements-security-req.adoc

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,4 +7,7 @@
77
= Security requirements
88
//TODO OSDOCS-11789: Red Hat as in RHSRE? Red Hat as in RH services in the cluster?
99
* Red{nbsp}Hat must have ingress access to EC2 hosts and the API server from allow-listed IP addresses.
10-
* Red{nbsp}Hat must have egress allowed to the domains documented in the "Firewall prerequisites" section. Clusters with {zero-egress} are exempt from this requirement.
10+
* Red{nbsp}Hat must have egress allowed to the domains documented in the "Firewall prerequisites" section.
11+
ifdef::openshift-rosa-hcp[]
12+
Clusters with {egress-zero} are exempt from this requirement.
13+
endif::openshift-rosa-hcp[]

0 commit comments

Comments
 (0)