Merge pull request #87234 from EricPonvelle/OSDOCS-10249_2-Egress-Lockdown-fixes

OSDOCS-10249.2: Updates to Egress lockdown

Author: EricPonvelle

_topic_maps/_topic_map_rosa.yml

@@ -263,6 +263,8 @@ Topics:
   File: rosa-hcp-creating-cluster-with-aws-kms-key
 - Name: Creating a private cluster on ROSA with HCP
   File: rosa-hcp-aws-private-creating-cluster
+- Name: Creating a ROSA with HCP cluster with egress lockdown
+  File: rosa-hcp-egress-lockdown-install
 - Name: Creating ROSA with HCP clusters with external authentication
   File: rosa-hcp-sts-creating-a-cluster-ext-auth
 - Name: Creating ROSA with HCP clusters without a CNI plugin

rosa_release_notes/rosa-release-notes.adoc

@@ -16,6 +16,15 @@ toc::[]
 [id="rosa-q1-2025_{context}"]
 === Q1 2025
 
+// These notes need to be duplicated until the ROSA with HCP split out is completed.
+ifdef::openshift-rosa[]
+[IMPORTANT]
+====
+Egress lockdown is a Technology Preview feature.
+====
+
+* **Egress lockdown is now available as a Technology Preview on {product-title} clusters.** You can create a fully operational cluster that does not require a public egress by configuring a virtual private cloud (VPC) and using the `--properties zero_egress:true` flag when creating your cluster. For more information, see xref:../rosa_hcp/rosa-hcp-egress-lockdown-install.adoc#rosa-hcp-egress-lockdown-install[Creating a {product-title} cluster with egress lockdown].
+endif::openshift-rosa[]
 ifdef::openshift-rosa-hcp[]
 [IMPORTANT]
 ====
@@ -190,6 +199,10 @@ endif::openshift-rosa[]
 [id="rosa-known-issues_{context}"]
 == Known issues
 
+// These notes need to be duplicated until the ROSA with HCP split out is completed.
+ifdef::openshift-rosa[]
+* While egress lockdown works across all supported versions of ROSA, Red Hat suggests you upgrade your cluster or build a cluster to the latest z-stream for your {ocp}. Due to an upstream issue with the internal image registry functionality in disconnected environments, you may experience issues with various {ocp} components within your cluster until you upgrade your version of HCP to the latest z-stream. If you are using older z-stream ROSA clusters with the egress lockdown feature, you must include a public route to the internet from your cluster. See link:https://issues.redhat.com/browse/OCPBUGS-44314[OCPBUGS-44314] for further details.
+endif::openshift-rosa[]
 ifdef::openshift-rosa-hcp[]
 * While egress lockdown works across all supported versions of ROSA, Red Hat suggests you upgrade your cluster or build a cluster to the latest z-stream for your {ocp}. Due to an upstream issue with the internal image registry functionality in disconnected environments, you may experience issues with various {ocp} components within your cluster until you upgrade your version of HCP to the latest z-stream. If you are using older z-stream ROSA clusters with the egress lockdown feature, you must include a public route to the internet from your cluster. See link:https://issues.redhat.com/browse/OCPBUGS-44314[OCPBUGS-44314] for further details.
 endif::openshift-rosa-hcp[]