Getting started with Red Hat OpenShift Service on AWS (ROSA)
Red Hat® OpenShift® Service on AWS (ROSA) is a fully-managed turnkey application platform that allows you to focus on what matters most, delivering value to your customers by building and deploying applications. Red Hat and AWS site reliability engineering (SRE) experts manage the underlying platform so you don’t have to worry about the complexity of infrastructure management.
See this video with the full transcript here.
ROSA provides seamless integration with a wide range of AWS compute, database, analytics, machine learning, networking, mobile, and other services to further accelerate the building and delivering of differentiating experiences to your customers.
The latest version of ROSA makes use of AWS Security Token Service (STS) to obtain credentials to manage infrastructure in your AWS account. AWS STS is a global web service that allows the creation of temporary credentials for identity and access management (IAM) users or federated users. ROSA uses this to assign IAM roles short-term, limited-privilege, security credentials. These credentials are associated with IAM roles that are specific to each component that makes AWS API calls. This better aligns with principles of least privilege and is much better aligned to secure practices in cloud service resource management. The ROSA CLI tool manages the STS credentials that are assigned for unique tasks and takes action upon AWS resources as part of OpenShift functionality.
In this learning path, you will set up your AWS account, deploy your first cluster on ROSA using AWS STS, and learn how to manage environments.
What do you need before starting?
What will you get?
- Experience setting up and deploying a ROSA cluster
- Experience performing common tasks like:
- User access and elevated permissions
- Managing worker nodes
- Scaling and autoscaling
- Deleting the cluster
- A prepared environment ready for application deployment
This learning path is for operations teams or system administrators
Developers may want to check out developers.redhat.com.