Deploying Production AWS ROSA Clusters
This course offers in-depth training on deploying production-ready AWS Red Hat OpenShift Service on AWS (ROSA) clusters. Participants will learn how to create and configure clusters effectively. Additionally, the course covers application integration strategies to ensure a robust and scalable environment.
CS229
Deploying Production AWS ROSA Clusters: Creation, Configuration and Application Integration
Create and configure production-grade ROSA clusters as part of a larger AWS customer’s footprint and then integrate applications on ROSA with AWS services while keeping a good security posture.
Course Description
Ready to build rock-solid ROSA clusters that work beautifully with AWS? This course walks you through everything from setting up your cluster to connecting your apps with AWS services, plus the security tricks that’ll keep your credentials and roles exactly where they should be (under your control!).
What You’ll Learn to Do
- Deploy ROSA STS PrivateLink clusters and hook them up to your existing VPCs
- Set up autoscaling, machine pools, and get your logs flowing into Amazon CloudWatch
- Configure authentication using Amazon Cognito and keep your groups in sync
- Connect with container registries like ECR and Quay.io (super handy!)
- Build and manage storage classes with EBS and EFS
- Set up pod identity (STS/IRSA) so your apps can safely talk to AWS services (think Aurora, SQS, S3)
- Spin up AWS services using ACK
- Keep tabs on your apps with Amazon Managed Prometheus and CloudWatch
- Lock down public app access with custom domains and TLS certificates
Who Should Join
- Primary: ROSA Administrators, Platform Engineers, Cloud Administrators, System Administrators and other infrastructure-related IT roles who are responsible for providing and supporting infrastructure for applications deployed on AWS
- Secondary: Enterprise Architects, Site Reliability Engineers, DevOps Engineers, and other application-related IT roles who are responsible for designing infrastructure for applications deployed on AWS
Course Outline:
- PrivateLink Red Hat OpenShift on AWS (ROSA) Clusters
- Create a PrivateLink ROSA cluster with STS and enable developers or administrators to access the API and router endpoints of the cluster.
- Node and Pod Autoscaling
- First, you’ll configure a ROSA cluster and a workload to dynamically scale the number of cluster nodes and application pods according to load.
- Integrate ROSA Clusters with Amazon Web Services
- Then configure ROSA clusters to forward logs to Amazon CloudWatch for long-term storage, aggregation, and analysis, and to authenticate OpenShift users by using Amazon Cognito.
- Deploy Applications From External Registries
- Deploy applications on Red Hat OpenShift Service on AWS (ROSA) from private container image repositories in external centralized container image registries.
- Provide Amazon Storage Volumes for Applications
- Next configure Amazon Elastic Block Storage (EBS) or Amazon Elastic File System (EFS) volumes that meet the cost, performance, and sharing requirements of their applications.
- Configure Application Access to AWS Services
- Then configure applications for access to shared AWS services by using Kubernetes service accounts, and provision dedicated AWS services by using Kubernetes custom resources.
- OpenShift and AWS Application Observability
- Configure ROSA clusters to forward application logs to Amazon CloudWatch and application metrics to Amazon Managed Service for Prometheus.
- Custom Domains for ROSA Applications
- Expose applications to internet users with secure URLs by using human-readable DNS domains.
Impact on the Organization
Red Hat OpenShift Service on AWS (ROSA) is basically a fully managed OpenShift platform that runs on AWS. What’s that mean for you? Well, it helps your team build, deploy, and scale apps way faster than before. The best part? You can connect your OpenShift clusters with all the AWS services you’re already using, while keeping everything secure with solid access controls and network protection.
Impact on the Individual
Once you’ve wrapped up CS229, you’ll know exactly how to deploy private ROSA clusters that work perfectly with your AWS setup. You’ll discover how to bring applications on board safely, and here’s the key you’ll keep all the credential and role management where it belongs: with cluster admins and platform engineers. Your developers won’t have to worry about that stuff, so they can focus on what they do best.