|
2 | 2 | //
|
3 | 3 | // * rosa_architecture/rosa_architecture_sub/rosa-architecture-models.adoc
|
4 | 4 |
|
5 |
| -= ROSA with HCP architecture |
6 |
| - |
7 |
| -In ROSA with HCP, the ROSA service hosts a highly-available, single-tenant OpenShift control plane. The hosted control plane is deployed across 3 availability zones with at least 2 API server instances and three etcd instances. It is only accessible from the customer's VPC subnets. Customers access the hosted control plane through AWS PrivateLink. Customers can add an optional internet-facing API server endpoint to their ROSA with HCP cluster. |
8 |
| - |
9 |
| -The worker nodes are deployed in the customer's AWS account and run on the customer's VPC subnets. Customers can add one or more private subnets to the cluster VPC to ensure high availability. Worker nodes are shared by OpenShift components and applications. OpenShift components such as the ingress controller, image registry, and monitoring are deployed on the worker nodes hosted on the customer's VPC. |
10 |
| - |
| 5 | +[id="rosa-classic-architecture_{context}"] |
11 | 6 | = ROSA Classic architecture
|
12 | 7 |
|
13 | 8 | In ROSA Classic, both the control plane and the worker nodes are deployed on the customer's VPC private subnets.
|
14 | 9 |
|
15 | 10 | Customers can customize access patterns for their API server endpoint and Red Hat SRE management in the following ways:
|
16 |
| -* Public, where API Server endpoint and Application Routes are all internet-facing. |
17 |
| -* Private, where API Server endpoint and Application Routes are private |
18 |
| -* Private with Private Link, where API Server endpoint and Application Routes are private, public subnets or NAT Gateways are not required in your VPC for egress, ROSA Service SRE Management uses AWS Private Link. |
| 11 | +* Public - API server endpoint and application routes are internet-facing. |
| 12 | +* Private - API server endpoint and application routes are private. |
| 13 | +* Private with Private Link - API server endpoint and application routes are private. Public subnets or NAT gateways are not required in your VPC for egress. ROSA SRE management uses AWS Private Link. |
19 | 14 |
|
20 | 15 | Note that although Public Subnets are needed in Private ROSA Classic clusters, no Control Plane or Worker nodes are deployed in public subnets.
|
21 | 16 |
|
22 | 17 | In ROSA Classic, you can create either a zonal cluster, where Control Plane and Worker Nodes are hosted on a single AZ or regional cluster, where Control Plane is hosted on 3 AZs with an option to run Worker nodes on 1 or 3 AZs.
|
23 | 18 |
|
24 | 19 | ROSA Classic clusters include Infrastructure Nodes in addition to Control Plane where OpenShift components such as Ingress Controller, Image Registry, and Monitoring are deployed. The Infrastructure Nodes and the OpenShift components deployed on them are managed by ROSA Service SRE.
|
25 | 20 |
|
26 |
| - |
27 |
| -[id="rosa-architecture_{context}"] |
28 |
| -= ROSA architecture on public and private networks |
| 21 | +[id="rosa-classic-architecture-networks_{context}"] |
| 22 | +== ROSA Classic architecture on public and private networks |
29 | 23 |
|
30 | 24 | You can install ROSA using either a public or private network. Configure a private cluster and private network connection during or after the cluster creation process.
|
31 | 25 | Red Hat manages the cluster with limited access through a public network. For more information, see xref:../../rosa_architecture/rosa_policy_service_definition/rosa-service-definition.adoc#rosa-service-definition[ROSA service definition].
|
32 | 26 |
|
33 | 27 | .ROSA Classic deployed on public and private networks
|
34 | 28 | image::156_OpenShift_ROSA_Arch_0621_private_public_classic.png[ROSA deployed on public and private networks]
|
35 | 29 |
|
36 |
| -If you are using {hcp-title-first}, you can create your clusters on public and private networks as well. The following images depict the architecture of both public and private networks. |
37 |
| - |
38 |
| -.ROSA with HCP deployed on a public network |
39 |
| -image::ROSA-HCP-and-ROSA-Classic-public.png[ROSA with HCP deployed on a public network] |
40 |
| - |
41 |
| -.ROSA with HCP deployed on a private network |
42 |
| -image::ROSA-HCP-and-ROSA-Classic-private.png[ROSA with HCP deployed on a private network] |
43 |
| - |
44 | 30 | Alternatively, you can install a ROSA Classic cluster using AWS PrivateLink, which is hosted on private subnets only.
|
0 commit comments