You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: modules/rosa-hcp-byo-oidc.adoc
+22-1Lines changed: 22 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -32,7 +32,7 @@ endif::rosa-classic[]
32
32
+
33
33
[source,terminal]
34
34
----
35
-
$ rosa create oidc-config --mode=auto
35
+
$ rosa create oidc-config --mode=auto--yes
36
36
----
37
37
+
38
38
This command returns the following information.
@@ -53,6 +53,27 @@ I: Created OIDC provider with ARN 'arn:aws:iam::4540112244:oidc-provider/dvbwgdz
53
53
+
54
54
When creating your cluster, you must supply the OIDC config ID. The CLI output provides this value for `--mode auto`, otherwise you must determine these values based on `aws` CLI output for `--mode manual`.
55
55
56
+
* Optional: you can save the OIDC configuration ID as a variable to use later. Run the following command to save the variable:
57
+
+
58
+
[source,terminal]
59
+
----
60
+
$ export OIDC_ID=30f5dqmk
61
+
----
62
+
63
+
. View the value of the variable by running with the following command:
64
+
+
65
+
[source,terminal]
66
+
----
67
+
$ echo $OIDC_ID
68
+
----
69
+
+
70
+
.Sample output
71
+
+
72
+
[source,terminal]
73
+
----
74
+
$ 30f5dqmk
75
+
----
76
+
56
77
.Verification
57
78
58
79
. You can list the possible OIDC configurations available for your clusters that are associated with your user organization. Run the following command:
Copy file name to clipboardExpand all lines: modules/rosa-hcp-sts-creating-a-cluster-cli.adoc
+9-1Lines changed: 9 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -17,8 +17,9 @@ When using {product-title} (ROSA) CLI (`rosa`) to create a cluster, you can sele
17
17
+
18
18
[NOTE]
19
19
====
20
-
To successfully install ROSA clusters, use the latest version of the ROSA CLI (`rosa`).
20
+
To successfully install ROSA clusters, use the latest version of the ROSA CLI (`rosa`). Run `rosa version` to see your currently installed version of the ROSA CLI. If a newer version is available, the CLI provides a link to download this upgrade.
21
21
====
22
+
22
23
* You have logged in to your Red Hat account by using the ROSA CLI.
23
24
* You have created an OIDC configuration.
24
25
* You have verified that the AWS Elastic Load Balancing (ELB) service role exists in your AWS account.
** If you used variables like `OIDC_ID` and `SUBNET_IDS`, you can use those references when creating your cluster. For example, run the following command:
57
+
+
58
+
[source,terminal]
59
+
----
60
+
$ rosa create cluster --hosted-cp --subnet-ids=$SUBNET_IDS --oidc-config-id=$OIDC_ID --cluster-name=<cluster_name>
61
+
----
62
+
55
63
. Check the status of your cluster by running the following command:
. After the template has downloaded, initiate the Terraform file by running the following command:
32
+
. Initiate the Terraform file by running the following command:
39
33
+
40
34
[source,terminal]
41
35
----
@@ -44,37 +38,39 @@ $ terraform init
44
38
+
45
39
A message confirming the initialization appears when this process completes.
46
40
47
-
. To build your VPC Terraform plan based off of the downloaded template, run the `plan` command. You must include your AWS region. Optionally, you can specify a cluster name.
41
+
. To build your VPC Terraform plan based on the existing Terraform template, run the `plan` command. You must include your AWS region. You can choose to specify a cluster name. A `rosa.tfplan` file is added to the `hypershift-tf` directory after the `terraform plan` completes. For more detailed options, see the link:https://github.com/openshift-cs/terraform-vpc-example/blob/main/README.md[Terraform VPC repository's README file].
48
42
+
49
43
[source,terminal]
50
44
----
51
-
$ terraform plan -out rosa.plan -var aws_region=<region> [-var cluster_name=<cluster_name>]
45
+
$ terraform plan -out rosa.tfplan -var region=<region> [-var cluster_name=<cluster_name>]
52
46
----
53
47
54
-
. You should have a `rosa.plan` file in the directory that you created in the first step. Apply this plan file to build your VPC by running the following command:
48
+
. Apply this plan file to build your VPC by running the following command:
55
49
+
56
50
[source,terminal]
57
51
----
58
-
$ terraform apply rosa.plan
52
+
$ terraform apply rosa.tfplan
59
53
----
60
54
61
55
. Optional: You can capture the values of the Terraform-provisioned private, public, and machinepool subnet IDs as environment variables to use when creating your {hcp-title} cluster by running the following commands:
Copy file name to clipboardExpand all lines: modules/rosa-operator-config.adoc
+10-3Lines changed: 10 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -20,13 +20,20 @@ When using a {hcp-title} cluster, you must create the Operator IAM roles that ar
20
20
+
21
21
[source,terminal]
22
22
----
23
-
$ rosa create operator-roles --prefix <prefix-name> <1>
23
+
$ rosa create operator-roles --hosted-cp --prefix <prefix-name> --oidc-config-id <oidc-config-id>
24
+
----
25
+
+
26
+
The following breakdown provides options for the Operator role creation.
27
+
+
28
+
[source,terminal]
29
+
----
30
+
$ rosa create operator-roles --hosted-cp
31
+
--prefix <prefix-name> <1>
24
32
--oidc-config-id <oidc-config-id> <2>
25
-
--hosted-cp
26
33
----
27
34
+
28
35
--
29
-
<1> You must supply a prefix when creating these Operator roles. Failing to do so produces an error.
36
+
<1> You must supply a prefix when creating these Operator roles. Failing to do so produces an error. See the Additional resources of this section for information on the Operator prefix.
30
37
<2> This value is the OIDC configuration ID that you created for your {hcp-title} cluster.
Copy file name to clipboardExpand all lines: rosa_hcp/rosa-hcp-sts-creating-a-cluster-quickly.adoc
+14-1Lines changed: 14 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -79,11 +79,18 @@ You must have a Virtual Private Cloud (VPC) to create {hcp-title} cluster. You c
79
79
80
80
[NOTE]
81
81
====
82
-
The Terraform instructions are for testing and demonstration purposes. Your own installation requires some modifications to the VPC for your own use.
82
+
The Terraform instructions are for testing and demonstration purposes. Your own installation requires some modifications to the VPC for your own use. You should also ensure that when you use this Terraform script it is in the same region that you intend to install your cluster. In these examples, use `us-east-2`.
* See the link:https://github.com/openshift-cs/terraform-vpc-example[Terraform VPC] repository for a detailed list of all options available when customizing the VPC for your needs.
* See xref:../rosa_architecture/rosa-sts-about-iam-resources.adoc#rosa-sts-about-operator-role-prefixes_rosa-sts-about-iam-resources[About custom Operator IAM role prefixes] for information on the Operator prefixes.
0 commit comments