ECR Secret Operator
Amazon Elastic Container Registry Private Registry Authenticationexternal link (opens in new tab) provides a temporary authorization token valid only for 12…
Configure Node Pool Scale-to-Zero on ROSA HCP
ROSA HCP supports setting min_replicas=0 on node pools with autoscaling enabled. This allows the cluster autoscaler to scale worker nodes down to zero when no…
Using AWS Secrets Manager with External Secrets Operator on ROSA HCP
Bridging the Security Gap with External Secrets Operator In the modern cloud-native landscape, managing sensitive credentials across distributed environments is…
Automating ECR Pull Secrets on ROSA Using the External Secrets Operator and STS
Amazon Elastic Container Registry (ECR) issues short-lived authorization tokens that expire after 12 hours. On Red Hat OpenShift Service on AWS (ROSA),…
OpenShift Network Calculator
Calculate network sizing for your OpenShift cluster
Ingress to ROSA Virt VMs with Certificate-Based Site-to-Site (S2S) IPsec VPN and Libreswan
Introduction This solution uses a Site-to-Site (S2S) VPNexternal link (opens in new tab) as a mechanism in OpenShift Virtualization on ROSA to establish an IP…
Deploy ROSA + Nvidia GPU + RHOAI with Automation
Getting Red Hat OpenShift AI up and running with NVIDIA GPUs on a Red Hat OpenShift Service on AWS (ROSA) cluster can involve a series of detailed steps, from…
Using a Private IngressController with CloudFront on a ROSA Cluster
AWS CloudFront is a great choice for a Content Delivery Network in front of your ROSA cluster. In many situations, it may be useful to ensure that traffic to…
Accessing the ROSA HCP API Server from a Different AWS Account
Introduction You can create a ROSA HCP cluster in one AWS account and configure it to allow access from a different AWS account using the oc command. This guide…
Deploy ROSA with Red Hat Advanced Cluster Management for Kubernetes
In the dynamic world of cloud-native development, efficiently managing Kubernetes clusters across diverse environments is paramount. This blog post dives into a…
Building LLM Cost and Performance Dashboard with Red Hat OpenShift AI on ROSA and Amazon Bedrock
1. Introduction As the LLM’s usage increases in the enterprise, not many realize that every LLM API call has two hidden costs: time and money. So while…
Creating Agentic AI to deploy ARO cluster using Terraform with Red Hat OpenShift AI on ROSA and Amazon Bedrock
1. Introduction Agentic AI can be defined as systems that are capable of interpreting natural language instructions, in this case users’ prompts, making…
Integrating Service Mesh into a ROSA Cluster
This is a simple guide to integrate Red Hat OpenShift Service Mesh into your ROSA cluster. In this scenario, we will install Service Mesh using a custom domain…
Adding a Private Ingress Controller and a Public ALB to a ROSA Cluster
Starting with OpenShift 4.14, Red Hat OpenShift Service on AWS (ROSA) supports adding additional Ingress Controllers which can be used to configure a custom…
ROSA - Federating Metrics to AWS Prometheus
Federating Metrics from ROSA is a bit tricky as the cluster metrics require pulling from its /federated endpoint while the user workload metrics require using…
Using local-zones in ROSA Classic
This guide walks through setting up a local-zone in an existing ROSA Classic cluster. Use this approach when you have latency requirements that can be reduced…
Setting up Cross-Cluster PostgreSQL Replication with Skupper on ROSA and ARO
This guide demonstrates how to set up a highly available PostgreSQL database with cross-cluster replication between Red Hat OpenShift Service on AWS (ROSA) and…
Optimizing Costs with ROSA - Scheduled Cluster Scaling
One of the key benefits of Red Hat OpenShift Service on AWS (ROSA) is its ability to scale efficiently, ensuring you only pay for the resources you actually…
Configuring Microsoft Entra ID as an external authentication provider
You can set up Red Hat OpenShift Service on AWS (ROSA) with hosted control planes (HCP) to use an external OpenID Connect (OIDC) identity provider for…
Securely exposing an application on a private ROSA cluser with an AWS Network Load Balancer - Jump Host
Continuation of Securely exposing an application on a private ROSA cluser with an AWS Network Load Balancer These instructions go through setting up a jump host…
Securely exposing an application on a private ROSA cluser with an AWS Network Load Balancer
Continuation of Securely exposing an application on a private ROSA cluser with an AWS Network Load Balancer These instructions go through setting up an…
Securely exposing an application on a private ROSA cluser with an AWS Network Load Balancer
Overview Red Hat strongly recommends creating a private ROSA cluster with no inbound Internet connectivity, isolating both the cluster API and hosted…
Configuring Microsoft Entra ID to emit group names
In this guide, we will configure an existing Microsoft Entra ID (formerly Azure Active Directory) identity provider to emit the group name instead of the group…
Deploying and Running Ollama and Open WebUI in a ROSA Cluster with GPUs
Red Hat OpenShift Service on AWS (ROSA) provides a managed OpenShift environment that can leverage AWS GPU instances. This guide will walk you through deploying…
Maximo Application Suite on ROSA ( Red Hat OpenShift on AWS )
IBM Maximo Application Suite (MAS) is a set of applications for asset monitoring, management, predictive maintenance and reliability planning. When combined…
Creating Images using Stable Diffusion on Red Hat OpenShift AI on ROSA cluster with GPU enabled
1. Introduction Stable Diffusionexternal link (opens in new tab) is an AI model to generate images from text description. It uses a diffusion process to…
Configure Network Policies and Egress Firewalls for a ROSA Cluster
It’s common to want to restrict network access between namespaces, as well as restricting where traffic can go outside of the cluster. OpenShift achieves…
Migrating EC2 Instances to OpenShift Virtualization
Red Hat OpenShift Service on AWS (ROSA) provides a managed OpenShift environment that can run virtualized workloads using OpenShift Virtualization. This guide…
Creating a ROSA cluster in AWS GovCloud
This guide outlines the procedure for creating a ROSA cluster in AWS GovCloud. There are some key differences between the ROSA offerings in AWS GovCloud and AWS…
Running and Deploying LLMs using Red Hat OpenShift AI on ROSA cluster and Storing the Model in Amazon S3 Bucket
1. Introduction Large Language Models (LLMs)external link (opens in new tab) are a specific type of generative AI focused on processing and generating human…
Running and Deploying LLMs using Red Hat OpenShift AI on ROSA cluster and Storing the Model in Amazon S3 Bucket
1. Introduction Large Language Models (LLMs)external link (opens in new tab) are a specific type of generative AI focused on processing and generating human…
Deploying Openshift Virtualization on ROSA with NetApp FSx storage.
OpenShift Virtualization is a feature of OpenShift that allows you to run virtual machines alongside your containers. This is useful for running legacy…
Deploying and Managing Virtual Machines on ROSA with OpenShift GitOps
One of the great things about OpenShift Virtualization is that it brings new capabilities to run virtual machines alongside your containers AND using DevOps…
Deploying a ROSA HCP cluster with Terraform
This guide will walk you through deploying a ROSA HCP cluster using Terraform. This is a great way to get started with ROSA and to automate the deployment of…
Deploying a ROSA Classic cluster with Terraform
This guide will walk you through deploying a ROSA cluster using Terraform. This is a great way to get started with ROSA and to automate the deployment of your…
Deploying OpenShift Virtualization on ROSA (GUI)
OpenShift Virtualization is a feature of OpenShift that allows you to run virtual machines alongside your containers. This is useful for running legacy…
Deploying OpenShift Virtualization on ROSA (CLI)
OpenShift Virtualization is a feature of OpenShift that allows you to run virtual machines alongside your containers. This is useful for running legacy…
Install Portworx on Red Hat OpenShift Service on AWS (ROSA) with hosted control planes (HCP)
Portworx storage is a built-for-Kubernetes service that offers flexible and scalable persistent storage for applications in production. In this tutorial we will…
Migrating ROSA Ingress Controllers from a CLB to NLB
This guide will show you how to migrate the default Red Hat OpenShift Service on AWS (ROSA) IngressController from an AWS Classic Load Balancer to an AWS…
Configuring AWS CLB Access Logging
This guide will show you how to enable access logging on the default Classic Load Balancer ingress controller used in Red Hat OpenShift Service on AWS (ROSA)…
Setting custom domains for apps created via OpenShift Dev Spaces
Red Hat OpenShift Dev Spaces (formally CodeReady Workspaces) is an Operator available for OpenShift that allows users to create dynamic IDEs for developing and…
Cross-account Access using Custom OIDC Provider
Access AWS Cross Account resources using OIDC When employing ROSA, a common enterprise pattern involves establishing a cluster in a centralized AWS account…
Add an Ingress Controller to a ROSA Cluster and optionally with a custom domain.
Starting with OpenShift 4.14, ROSA supports adding additional Ingress Controllers which can use used to configure a custom domain on a ROSA cluster without…
ROSA Break Glass Troubleshooting
Background WARNING: this procedure should only be initiated by a member of the Black Belt team or someone incredibly familiar with ROSA as a whole. THIS IS NOT…
Setup a VPN Connection into a PrivateLink ROSA Cluster with OpenVPN
When you configure a Red Hat OpenShift on AWS (ROSA) cluster with a private link configuration, you will need connectivity to this private network in order to…
Connect to RDS database with STS from ROSA
The Amazon Web Services Relational Database Service (AWS RDS) can be consumed from Red Hat OpenShift Service on AWS (ROSA) and authenticate to DB with Security…
Deploying ROSA PrivateLink Cluster with Ansible
Background This guide shows an example of how to deploy a classic Red Hat OpenShift Services on AWS (ROSA) cluster with PrivateLinkexternal link (opens in new…
What to consider when using Azure AD as IDP?
Author: Ricardo Macedo Martinsexternal link (opens in new tab) May 24, 2023 In this guide, we will discuss key considerations when using Azure Active Directory…
Deploy ACM Submariner for connect overlay networks of ROSA clusters
Submariner is an open source tool that can be used with Red Hat Advanced Cluster Management for Kubernetes to provide direct networking between pods and…
Deploy ACM Submariner for connect overlay networks ARO - ROSA clusters
Submariner is an open source tool that can be used with Red Hat Advanced Cluster Management for Kubernetes to provide direct networking between pods and…
Enabling the AWS EFS CSI Driver Operator on ROSA
The Amazon Web Services Elastic File System (AWS EFS) is a Network File System (NFS) that can be provisioned on Red Hat OpenShift Service on AWS clusters. With…
Enabling cross account EFS mounting
The Amazon Web Services Elastic File System (AWS EFS) is a Network File System (NFS) that can be provisioned on Red Hat OpenShift Service on AWS clusters. With…
Azure DevOps with Managed OpenShift
Author: Kevin Collins Last edited: 03/14/2023 Adopted from Hosting an Azure Pipelines Build Agent in OpenShift and Kevin Chung Azure Pipelines OpenShift…
Assign Consistent Egress IP for External Traffic
It may be desirable to assign a consistent IP address for traffic that leaves the cluster when configuring items such as security groups or other sorts of…
ROSA with Nvidia GPU Workloads - Manual
This is a guide to install GPU on ROSA cluster manually, which is an alternative to our Helm chart guide . Prerequisites ROSA cluster (4.14+) You can install a…
ROSA with Nvidia GPU Workloads
ROSA guide to running Nvidia GPU workloads. Prerequisites ROSA Cluster (4.14+) rosa cli #logged-in oc cli #logged-in-cluster-admin jq If you need to install a…
External DNS for ROSA Custom Domain
Configuring the Custom Domain Operator requires a wildcard CNAME DNS record in your Route53 Hosted Zone. If you do not wish to use a wildcard record, you can…
VPC and Subnet IP Address Considerations with ROSA
VPC and Subnet IP Address Considerations with ROSA ROSA clusters can be built to be highly available using the fundamental capability that underlies most HA…
AWS Load Balancer Operator On ROSA
AWS Load Balancer Controllerexternal link (opens in new tab) is a controller to help manage Elastic Load Balancers for a Kubernetes cluster. It satisfies…
Dynamic Certificates for ROSA Custom Domain
There may be situations when you prefer not to use wild-card certificates. This ROSA guide talks about certificate management with cert-manager and letsencrypt,…
Deploying Red Hat Advanced Cluster Security in ARO/ROSA
This document is based in the RHACS workshopexternal link (opens in new tab) and in the RHACS official documentation . Prerequisites An ARO cluster or a ROSA…
Configure a load balancer service to use a static public IP
This guide demonstrates how to create and assign a static public IP address to an OpenShift service in Azure Red Hat OpenShift (ARO). By default, the public IP…
STS OIDC in ROSA : How it works!
If you prefer a more visual medium, you can watch this video on YouTubeexternal link (opens in new tab) . This short video talks about how the STSexternal link…
Security Reference Architecture for ROSA
The Security Reference Architecture for ROSA is a set of guidelines for deploying Red Hat OpenShift on AWS (ROSA) clusters to support high-security production…
Custom AlertManager in ROSA 4.9.x
This page is deprecated. In order to get the best experience for custom alerting in ROSA, please upgrade your cluster to to 4.12 and follow the newer…
Stop default router from serving custom domain routes
Note: This page is only valid for clusters using the Custom Domain Operator (CDO), which are ROSA clusters prior to version 4.14 OSD and ROSA supports custom…
Create STS Assume Role
About AWS STS and Assume Roleexternal link (opens in new tab) Notes: These are sample commands. Please fill in your own resource parameters E.g. ARN Prequisites…
Create IAM user and Policy
Notes: These are sample commands. Please fill in your own resource parameters E.g. ARN Create the policy Create a user and access key and attach the policy…
Deploying ROSA in STS mode
Tip The official documentation for installing a ROSA cluster in STS mode can be found here . Quick Introduction by Ryan Niksch (AWS) and Shaozen Ding (Red Hat)…
Adding a Public Ingress endpoint to a ROSA PrivateLink Cluster
This is an example guide for creating a public ingress endpoint for a ROSA Private-Link cluster. Be aware of the security implications of creating a public…
Configuring a ROSA cluster to pull images from AWS Elastic Container Registry (ECR)
Prerequisites AWS CLIexternal link (opens in new tab) Openshift CLI 4.11+ Podman Desktopexternal link (opens in new tab) ROSA Clusterexternal link (opens in new…
Creating a ROSA cluster in STS mode with custom KMS key
Tip Official Documentation ROSA STS with custom KMS key This guide will walk you through installing ROSA (Red Hat OpenShift Service on AWS) with a…
Deploying 3scale API Management to ROSA and OSD
This document will take you through deploying 3scale in any OSD or ROSA cluster. Review the official documentation here for more information or how to further…
Advanced Cluster Management Observability on ROSA
This document will take you through deploying ACM Observability on a ROSA cluster. see here for the original documentation. Prerequisites An existing ROSA…
Using Group Sync Operator with Azure Active Directory and ROSA
This guide focuses on how to synchronize Identity Provider (IDP) groups and users after configuring authentication in OpenShift Cluster Manager (OCM). For an…
Configuring IDP for ROSA, OSD and ARO
Red Hat OpenShift on AWS (ROSA) and OpenShift Dedicated (OSD) provide a simple way for the cluster administrator to configure one or more identity providers for…
Federating Metrics to a centralized Prometheus Cluster
This document has been removed as it was written for older ROSA clusters which did not allow for custom Alert Manager configs as a way to provide a second…
Custom Alerts in ROSA 4.11.x
Starting with OpenShift 4.11 it is possible to manage alerting rules for user-defined projects . Similarly, in ROSA clusters the OpenShift Administrator can…
Using the AWS Cloud Watch agent to publish metrics to CloudWatch in ROSA
This document shows how you can use the AWS CloudWatch Agent to scrape Prometheus endpoints and publish metrics to CloudWatch in a Red Hat OpenShift Service on…
Integrating with AWS resources using Pod Identity
Prerequisites ROSA CLI AWS CLI ROSA Cluster with STS
Extending ROSA STS to include authentication with AWS Services
In this example we will deploy the Amazon Ingress Controller that uses ALBs, and configure it to use STS authentication. Deployment Configure STS Make sure your…
Installing the Kubernetes Secret Store CSI on OpenShift
The Kubernetes Secret Store CSI is a storage driver that allows you to mount secrets from external secret management systems like HashiCorp Vault and AWS…
Installing the HashiCorp Vault Secret CSI Driver
The HashiCorp Vault Secret CSI Driver allows you to access secrets stored in HashiCorp Vault as Kubernetes Volumes. Prerequisites An OpenShift Cluster (ROSA,…
Creating a ROSA cluster with PrivateLink enabled (custom VPC) and STS
This is a combination of the private-link and sts setup documents to show the full picture Prerequisites AWS CLIexternal link (opens in new tab) Rosa…
Examples of using a WAF in front of ROSA / OSD on AWS / OCP on AWS
Problem Statement Operator requires WAF (Web Application Firewall) in front of their workloads running on OpenShift (ROSA) Operator does not want WAF running on…
Demonstrate GitOps on Managed OpenShift with ArgoCD
Author: Steve Mirmanexternal link (opens in new tab) Video Walkthrough If you prefer a more visual medium, you can watch Steve Mirmanexternal link (opens in new…
Creating a ROSA cluster with PrivateLink enabled
Prerequisites AWS CLIexternal link (opens in new tab) Rosa CLIexternal link (opens in new tab) v1.0.8 jqexternal link (opens in new tab) Create VPC and Subnets…
Federating System and User metrics to S3 in Red Hat OpenShift for AWS
This guide walks through setting up federating Prometheus metrics to S3 storage. ToDo - Add Authorization in front of Thanos APIs Prerequisites A ROSA cluster…
