From b5ad9821afc746edd549e49fd2c2d8c8b0c5e63c Mon Sep 17 00:00:00 2001 From: Olga Tikhomirova Date: Thu, 18 Jun 2026 12:17:50 -0700 Subject: [PATCH] OSDOCS-16402: CQA fixes for ROSA HCP Tutorials (part 1) --- ...cloud-experts-aws-load-balancer-operator.adoc | 8 ++++---- .../cloud-experts-aws-secret-manager.adoc | 2 +- .../cloud-experts-consistent-egress-ip.adoc | 16 +++++++--------- .../cloud-experts-custom-dns-resolver.adoc | 8 ++++---- ...cloud-experts-deploy-api-data-protection.adoc | 5 +++-- .../cloud-experts-entra-id-idp.adoc | 2 +- ...-activation-and-account-linking-tutorial.adoc | 2 +- ...hcp-private-offer-acceptance-and-sharing.adoc | 2 +- .../cloud-experts-using-alb-and-waf.adoc | 6 +++--- .../cloud-experts-using-aws-ack.adoc | 4 ++-- .../cloud-experts-using-cloudfront-and-waf.adoc | 10 +++++----- modules/accepting-private-offer.adoc | 14 +++++++------- modules/aws-account-billing-selection.adoc | 2 +- modules/aws-rh-linking.adoc | 2 +- ...perts-aws-load-balancer-operator-cleanup.adoc | 2 +- ...s-aws-load-balancer-operator-environment.adoc | 2 +- ...ts-aws-load-balancer-operator-validating.adoc | 2 +- ...ts-aws-secret-manager-create-iam-polices.adoc | 2 +- ...-aws-secret-manager-creating-application.adoc | 2 +- ...rts-aws-secret-manager-deply-aws-secrets.adoc | 2 +- ...ns-resolver-configure-dns-server-classic.adoc | 4 ++-- ...om-dns-resolver-configure-dns-server-hcp.adoc | 2 +- ...ts-custom-dns-resolver-environment-setup.adoc | 2 +- ...perts-deploy-api-data-protection-cleanup.adoc | 2 +- ...i-data-protection-deploy-oadp-on-cluster.adoc | 4 ++-- ...pi-data-protection-environment-variables.adoc | 4 ++-- ...eploy-api-data-protection-perform-backup.adoc | 4 ++-- ...-api-data-protection-prepare-aws-account.adoc | 2 +- ...ntra-id-idp-additional-individual-groups.adoc | 2 +- ...-entra-id-idp-additional-individual-user.adoc | 2 +- ...erts-entra-id-idp-additional-user-groups.adoc | 6 +++--- ...cloud-experts-entra-id-idp-configure-app.adoc | 2 +- ...experts-entra-id-idp-configure-entra-idp.adoc | 6 +++--- ...erts-entra-id-idp-configure-group-claims.adoc | 2 +- ...s-entra-id-idp-configure-optional-claims.adoc | 2 +- .../cloud-experts-entra-id-idp-register-app.adoc | 2 +- ...erts-using-alb-and-waf-configure-aws-waf.adoc | 6 +++--- ...nd-waf-deploy-aws-load-balancer-operator.adoc | 2 +- ...erts-using-alb-and-waf-environment-setup.adoc | 2 +- .../cloud-experts-using-aws-ack-clean-up.adoc | 2 +- ...-experts-using-aws-ack-environment-setup.adoc | 2 +- .../cloud-experts-using-aws-ack-install-ack.adoc | 2 +- .../cloud-experts-using-aws-ack-prep-aws.adoc | 2 +- ...cloud-experts-using-aws-ack-valid-deploy.adoc | 2 +- ...ing-cloudfront-and-waf-configure-aws-waf.adoc | 2 +- ...d-waf-secondary_ingress_controller_setup.adoc | 2 +- ...s-using-cloudfront-and-waf-setup-environ.adoc | 2 +- modules/egress-ip-assign-ip-namespace.adoc | 2 +- modules/egress-ip-assigning-to-pod.adoc | 2 +- modules/egress-ip-blocked-egress.adoc | 4 ++-- modules/egress-ip-capacity.adoc | 2 +- modules/egress-ip-cluster-cleanup.adoc | 2 +- modules/egress-ip-creating-ip-rules.adoc | 2 +- modules/egress-ip-deploy-sample-app.adoc | 2 +- modules/egress-ip-egress-ip-review.adoc | 4 ++-- modules/egress-ip-env-variables.adoc | 2 +- modules/egress-ip-namespace-egress.adoc | 4 ++-- modules/egress-ip-node-labels.adoc | 2 +- modules/egress-ip-pod-egress-test.adoc | 4 ++-- modules/offer-troubleshooting.adoc | 4 ++-- modules/selecting-billing-account-cli.adoc | 8 ++++---- modules/selecting-billing-account-ui.adoc | 14 +++++++------- modules/sharing-private-offer.adoc | 2 +- modules/subscription-enablement.adoc | 2 +- 64 files changed, 115 insertions(+), 116 deletions(-) diff --git a/cloud_experts_tutorials/cloud-experts-aws-load-balancer-operator.adoc b/cloud_experts_tutorials/cloud-experts-aws-load-balancer-operator.adoc index ecb482c37be1..58489224194b 100644 --- a/cloud_experts_tutorials/cloud-experts-aws-load-balancer-operator.adoc +++ b/cloud_experts_tutorials/cloud-experts-aws-load-balancer-operator.adoc @@ -11,7 +11,7 @@ include::snippets/snip-mobb-support-statement.adoc[leveloffset=+1] [TIP] ==== -Load Balancers created by the AWS Load Balancer Operator cannot be used for xref:../networking/ingress_load_balancing/routes/nw-configuring-routes.adoc#route-configuration[OpenShift Routes], and should only be used for individual services or ingress resources that do not need the full layer 7 capabilities of an OpenShift Route. +Load Balancers created by the AWS Load Balancer Operator cannot be used for xref:../networking/ingress_load_balancing/routes/nw-configuring-routes.adoc#nw-configuring-routes[{OCP-short} Routes], and should only be used for individual services or ingress resources that do not need the full layer 7 capabilities of an {OCP-short} Route. ==== [role="_abstract"] @@ -37,7 +37,7 @@ The link:https://github.com/openshift/aws-load-balancer-operator[AWS Load Balanc [NOTE] ==== -AWS ALBs require a multi-AZ cluster, as well as three public subnets split across three AZs in the same VPC as the cluster. This makes ALBs unsuitable for many PrivateLink clusters. AWS NLBs do not have this restriction. +AWS ALBs require a multi-availability zone (AZ) cluster, as well as three public subnets split across three AZs in the same (Virtual Private Cloud) VPC as the cluster. This makes ALBs unsuitable for many PrivateLink clusters. AWS NLBs do not have this restriction. ==== ifndef::openshift-rosa-hcp[] @@ -46,9 +46,9 @@ endif::openshift-rosa-hcp[] ifdef::openshift-rosa-hcp[] * xref:../rosa_hcp/rosa-hcp-sts-creating-a-cluster-quickly.adoc#rosa-hcp-sts-creating-a-cluster-quickly[A multi-AZ {product-title} cluster] endif::openshift-rosa-hcp[] -* BYO VPC cluster +* Bring Your Own (BYO) VPC cluster * AWS CLI -* OC CLI +* {oc-first} include::modules/cloud-experts-aws-load-balancer-operator-environment.adoc[leveloffset=+2] include::modules/cloud-experts-aws-load-balancer-operator-aws-vpc-subnets.adoc[leveloffset=+2] diff --git a/cloud_experts_tutorials/cloud-experts-aws-secret-manager.adoc b/cloud_experts_tutorials/cloud-experts-aws-secret-manager.adoc index 5911c3d7c9bf..a2c42b29850b 100644 --- a/cloud_experts_tutorials/cloud-experts-aws-secret-manager.adoc +++ b/cloud_experts_tutorials/cloud-experts-aws-secret-manager.adoc @@ -1,6 +1,6 @@ :_mod-docs-content-type: ASSEMBLY [id="cloud-experts-aws-secret-manager"] -= Tutorial: Using AWS Secrets Manager CSI on {product-title} with STS += Tutorial: Use AWS Secrets Manager CSI on {product-title} with STS include::_attributes/attributes-openshift-dedicated.adoc[] :context: cloud-experts-aws-secret-manager diff --git a/cloud_experts_tutorials/cloud-experts-consistent-egress-ip.adoc b/cloud_experts_tutorials/cloud-experts-consistent-egress-ip.adoc index cba40cbf1418..f3d8c13d7f5a 100644 --- a/cloud_experts_tutorials/cloud-experts-consistent-egress-ip.adoc +++ b/cloud_experts_tutorials/cloud-experts-consistent-egress-ip.adoc @@ -1,6 +1,6 @@ :_mod-docs-content-type: ASSEMBLY [id="cloud-experts-consistent-egress-ip"] -= Tutorial: Assigning a consistent egress IP for external traffic += Tutorial: Assign a consistent egress IP for external traffic include::_attributes/attributes-openshift-dedicated.adoc[] include::_attributes/common-attributes.adoc[] @@ -13,19 +13,17 @@ This tutorial teaches you how to configure a set of predictable IP addresses for By default, {product-title} uses the OVN-Kubernetes container network interface (CNI) to assign random IP addresses from a pool. This can make configuring security lockdowns unpredictable or open. -ifndef::openshift-rosa-hcp[] +// Assembly configuring-egress-ips-ovn is commented out of the ROSA HCP topic map (as of June 2026). +ifdef::openshift-rosa[] See xref:../networking/ovn_kubernetes_network_provider/configuring-egress-ips-ovn.adoc#configuring-egress-ips-ovn[Configuring an egress IP address] for more information. -endif::openshift-rosa-hcp[] -ifdef::openshift-rosa-hcp[] -See link:https://docs.openshift.com/rosa/networking/ovn_kubernetes_network_provider/configuring-egress-ips-ovn.html[Configuring an egress IP address] for more information. -endif::openshift-rosa-hcp[] +endif::openshift-rosa[] == Prerequisites * A {product-title} cluster deployed with OVN-Kubernetes -* The xref:../cli_reference/openshift_cli/getting-started-cli.adoc#cli-getting-started[OpenShift CLI] (`oc`) -* The xref:../cli_reference/rosa_cli/rosa-get-started-cli.adoc#rosa-get-started-cli[ROSA CLI] (`rosa`) -* link:https://stedolan.github.io/jq/[`jq`] +* The xref:../cli_reference/openshift_cli/getting-started-cli.adoc#cli-getting-started[{oc-first}] +* The xref:../cli_reference/rosa_cli/rosa-get-started-cli.adoc#rosa-get-started-cli[{rosa-cli-first}] +* link:https://jqlang.org/[`jq`] include::modules/egress-ip-env-variables.adoc[leveloffset=+1] include::modules/egress-ip-capacity.adoc[leveloffset=+1] diff --git a/cloud_experts_tutorials/cloud-experts-custom-dns-resolver.adoc b/cloud_experts_tutorials/cloud-experts-custom-dns-resolver.adoc index ee40b00a99d2..66e5ee56a928 100644 --- a/cloud_experts_tutorials/cloud-experts-custom-dns-resolver.adoc +++ b/cloud_experts_tutorials/cloud-experts-custom-dns-resolver.adoc @@ -1,6 +1,6 @@ :_mod-docs-content-type: ASSEMBLY [id="cloud-experts-custom-dns-resolver"] -= Tutorial: Deploying {product-title} with a Custom DNS Resolver += Tutorial: Deploy {product-title} with a custom DNS resolver include::_attributes/attributes-openshift-dedicated.adoc[] :context: cloud-experts-custom-dns-resolver @@ -8,9 +8,9 @@ include::_attributes/attributes-openshift-dedicated.adoc[] toc::[] [role="_abstract"] -A link:https://docs.aws.amazon.com/vpc/latest/userguide/DHCPOptionSet.html[custom DHCP option set] enables you to customize your VPC with your own DNS server, domain name, and more. {product-title} clusters support using custom DHCP option sets. By default, {product-title} clusters require setting the "domain name servers" option to `AmazonProvidedDNS` to ensure successful cluster creation and operation. Customers who want to use custom DNS servers for DNS resolution must do additional configuration to ensure successful {product-title} cluster creation and operation. +A link:https://docs.aws.amazon.com/vpc/latest/userguide/DHCPOptionSet.html[custom Dynamic Host Configuration Protocol (DHCP) option set] enables you to customize your Virtual Private Cloud (VPC) with your own Domain Name System (DNS) server, domain name, and more. {product-title} clusters support using custom DHCP option sets. By default, {product-title} clusters require setting the "domain name servers" option to `AmazonProvidedDNS` to ensure successful cluster creation and operation. Customers who want to use custom DNS servers for DNS resolution must do additional configuration to ensure successful {product-title} cluster creation and operation. -In this tutorial, we will configure our DNS server to forward DNS lookups for specific DNS zones (further detailed below) to an link:https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resolver.html[Amazon Route 53 Inbound Resolver]. +In this tutorial, we will configure our DNS server to forward DNS lookups for specific DNS zones (further detailed below) to an link:https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resolver.html[Amazon Route 53 Inbound Resolver]. [NOTE] ==== @@ -19,7 +19,7 @@ This tutorial uses the open-source BIND DNS server (`named`) to demonstrate the == Prerequisites -* ROSA CLI (`rosa`) +* {rosa-cli-first} * AWS CLI (`aws`) ifdef::openshift-rosa[] * A manually created AWS VPC diff --git a/cloud_experts_tutorials/cloud-experts-deploy-api-data-protection.adoc b/cloud_experts_tutorials/cloud-experts-deploy-api-data-protection.adoc index 90debc453dab..69b716a6e387 100644 --- a/cloud_experts_tutorials/cloud-experts-deploy-api-data-protection.adoc +++ b/cloud_experts_tutorials/cloud-experts-deploy-api-data-protection.adoc @@ -1,8 +1,9 @@ :_mod-docs-content-type: ASSEMBLY [id="cloud-experts-deploy-api-data-protection"] -= Tutorial: Deploying OpenShift API for Data Protection on a {product-title} cluster += Tutorial: Deploy {oadp-full} on a {product-title} cluster include::_attributes/attributes-openshift-dedicated.adoc[] +include::_attributes/common-attributes.adoc :context: cloud-experts-deploy-api-data-protection toc::[] @@ -10,7 +11,7 @@ toc::[] include::snippets/snip-mobb-support-statement.adoc[leveloffset=+1] [role="_abstract"] -The following tutorial shows you how to deploy the OpenShift API for data protection on your {product-title} cluster. +The following tutorial shows you how to deploy the {oadp-full} on your {product-title} cluster. [id="cloud-experts-deploy-api-data-protection-prerequisites_{context}"] == Prerequisites diff --git a/cloud_experts_tutorials/cloud-experts-entra-id-idp.adoc b/cloud_experts_tutorials/cloud-experts-entra-id-idp.adoc index 57376e22efb7..636751dad744 100644 --- a/cloud_experts_tutorials/cloud-experts-entra-id-idp.adoc +++ b/cloud_experts_tutorials/cloud-experts-entra-id-idp.adoc @@ -1,6 +1,6 @@ :_mod-docs-content-type: ASSEMBLY [id="cloud-experts-entra-id-idp"] -= Tutorial: Configuring Microsoft Entra ID (formerly Azure Active Directory) as an identity provider += Tutorial: Configure Microsoft Entra ID (formerly Azure Active Directory) as an identity provider include::_attributes/attributes-openshift-dedicated.adoc[] :context: cloud-experts-entra-id-idp diff --git a/cloud_experts_tutorials/cloud-experts-rosa-hcp-activation-and-account-linking-tutorial.adoc b/cloud_experts_tutorials/cloud-experts-rosa-hcp-activation-and-account-linking-tutorial.adoc index f2a5d9ca4759..b23bc9d0a6e2 100644 --- a/cloud_experts_tutorials/cloud-experts-rosa-hcp-activation-and-account-linking-tutorial.adoc +++ b/cloud_experts_tutorials/cloud-experts-rosa-hcp-activation-and-account-linking-tutorial.adoc @@ -1,6 +1,6 @@ :_mod-docs-content-type: ASSEMBLY [id="cloud-experts-activation-account-linking"] -= Tutorial: {product-title} activation and account linking += Tutorial: Activate {product-title} and link your account include::_attributes/attributes-openshift-dedicated.adoc[] :context: cloud-experts-activation-account-linking diff --git a/cloud_experts_tutorials/cloud-experts-rosa-with-hcp-private-offer-acceptance-and-sharing.adoc b/cloud_experts_tutorials/cloud-experts-rosa-with-hcp-private-offer-acceptance-and-sharing.adoc index 4690e5d2976f..e145313803b5 100644 --- a/cloud_experts_tutorials/cloud-experts-rosa-with-hcp-private-offer-acceptance-and-sharing.adoc +++ b/cloud_experts_tutorials/cloud-experts-rosa-with-hcp-private-offer-acceptance-and-sharing.adoc @@ -1,6 +1,6 @@ :_mod-docs-content-type: ASSEMBLY [id="cloud-experts-rosa-with-hcp-private-offer-acceptance-and-sharing"] -= Tutorial: {product-title} private offer acceptance and sharing += Tutorial: Accept and share a {product-title} private offer include::_attributes/attributes-openshift-dedicated.adoc[] :context: cloud-experts-rosa-with-hcp-private-offer-acceptance-and-sharing diff --git a/cloud_experts_tutorials/cloud-experts-using-alb-and-waf.adoc b/cloud_experts_tutorials/cloud-experts-using-alb-and-waf.adoc index a80720cb7b3f..96f4bbf5552e 100644 --- a/cloud_experts_tutorials/cloud-experts-using-alb-and-waf.adoc +++ b/cloud_experts_tutorials/cloud-experts-using-alb-and-waf.adoc @@ -1,6 +1,6 @@ :_mod-docs-content-type: ASSEMBLY [id="cloud-experts-using-alb-and-waf"] -= Tutorial: Using AWS WAF and AWS ALBs to protect {product-title} workloads += Tutorial: Use AWS WAF and AWS ALBs to protect {product-title} workloads include::_attributes/attributes-openshift-dedicated.adoc[] :context: cloud-experts-using-alb-and-waf @@ -27,7 +27,7 @@ It is recommended that you use the more flexible xref:../cloud_experts_tutorials AWS ALBs require at least two _public_ subnets across AZs, link:https://docs.aws.amazon.com/elasticloadbalancing/latest/application/application-load-balancers.html#availability-zones[per the AWS documentation]. For this reason, only multiple AZ {product-title} clusters can be used with ALBs. ==== + -* You have access to the OpenShift CLI (`oc`). +* You have access to the {oc-first}. * You have access to the AWS CLI (`aws`). include::modules/cloud-experts-using-alb-and-waf-environment-setup.adoc[leveloffset=+2] @@ -40,4 +40,4 @@ include::modules/cloud-experts-using-alb-and-waf-configure-aws-waf.adoc[leveloff [id="additional-resources_{context}"] == Additional resources -* link:https://youtu.be/-HorEsl2ho4[Adding Extra Security with AWS WAF, CloudFront and ROSA | Amazon Web Services on YouTube] +* link:https://youtu.be/-HorEsl2ho4[Adding Extra Security with AWS WAF, CloudFront and {product-title} | Amazon Web Services on YouTube] diff --git a/cloud_experts_tutorials/cloud-experts-using-aws-ack.adoc b/cloud_experts_tutorials/cloud-experts-using-aws-ack.adoc index e19708a34344..9c7eef86bcbc 100644 --- a/cloud_experts_tutorials/cloud-experts-using-aws-ack.adoc +++ b/cloud_experts_tutorials/cloud-experts-using-aws-ack.adoc @@ -1,6 +1,6 @@ :_mod-docs-content-type: ASSEMBLY [id="cloud-experts-using-aws-ack"] -= Tutorial: Using AWS Controllers for Kubernetes on {product-title} += Tutorial: Use AWS Controllers for Kubernetes on {product-title} include::_attributes/attributes-openshift-dedicated.adoc[] :context: cloud-experts-using-aws-ack @@ -19,7 +19,7 @@ Use this tutorial to deploy the ACK S3 Operator. You can also adapt it for any o * A {product-title} cluster * A user account with `cluster-admin` privileges -* The OpenShift CLI (`oc`) +* The {oc-first} * The Amazon Web Services (AWS) CLI (`aws`) include::modules/cloud-experts-using-aws-ack-environment-setup.adoc[leveloffset=+1] diff --git a/cloud_experts_tutorials/cloud-experts-using-cloudfront-and-waf.adoc b/cloud_experts_tutorials/cloud-experts-using-cloudfront-and-waf.adoc index 9710960c25e0..abed2259dbb2 100644 --- a/cloud_experts_tutorials/cloud-experts-using-cloudfront-and-waf.adoc +++ b/cloud_experts_tutorials/cloud-experts-using-cloudfront-and-waf.adoc @@ -1,6 +1,6 @@ :_mod-docs-content-type: ASSEMBLY [id="cloud-experts-using-cloudfront-and-waf"] -= Tutorial: Using AWS WAF and Amazon CloudFront to protect {product-title} workloads += Tutorial: Use AWS WAF and Amazon CloudFront to protect {product-title} workloads include::_attributes/attributes-openshift-dedicated.adoc[] :context: cloud-experts-using-cloudfront-and-waf @@ -8,9 +8,9 @@ include::_attributes/attributes-openshift-dedicated.adoc[] toc::[] [role="_abstract"] -AWS WAF is a web application firewall that lets you monitor the HTTP and HTTPS requests that are forwarded to your protected web application resources. +You can use AWS Web Application Firewall (WAF) to monitor HTTP and HTTPS requests that are forwarded to your protected web application resources. -You can use an Amazon CloudFront to add a Web Application Firewall (WAF) to your {product-title} workloads. Using an external solution protects {product-title} resources from experiencing denial of service due to handling the WAF. +You can use an Amazon CloudFront to add a WAF to your {product-title} workloads. Using an external solution protects {product-title} resources from experiencing denial of service due to handling the WAF. [NOTE] ==== @@ -20,7 +20,7 @@ WAFv1, WAF classic, is no longer supported. Use WAFv2. == Prerequisites * A {product-title} cluster. -* You have access to the OpenShift CLI (`oc`). +* You have access to the {oc-first}. * You have access to the AWS CLI (`aws`). include::modules/cloud-experts-using-cloudfront-and-waf-setup-environ.adoc[leveloffset=+1] @@ -34,4 +34,4 @@ include::modules/cloud-experts-using-cloudfront-and-waf-test-waf.adoc[leveloffse [id="additional-resources_{context}"] == Additional resources -* link:https://youtu.be/-HorEsl2ho4[Adding Extra Security with AWS WAF, CloudFront and ROSA | Amazon Web Services on YouTube] +* link:https://youtu.be/-HorEsl2ho4[Adding Extra Security with AWS WAF, CloudFront and {product-title} | Amazon Web Services on YouTube] diff --git a/modules/accepting-private-offer.adoc b/modules/accepting-private-offer.adoc index b374a1c2a159..0173e31a6702 100644 --- a/modules/accepting-private-offer.adoc +++ b/modules/accepting-private-offer.adoc @@ -4,7 +4,7 @@ :_mod-docs-content-type: PROCEDURE [id="accepting-private-offer_{context}"] -= Accepting a private offer += Accept a private offer [role="_abstract"] You can accept private offers from other team members within your Red{nbsp}Hat organization account. @@ -27,7 +27,7 @@ image::rosa-regular-private-offer.png[] [caption="Private offer selection selection screen"] image::rosa-private-offer-selection-selection-screen.png[] -.. The drop down menu allows selecting between multiple offers, if available. The previously activated public offer is shown together with the newly provided agreement based offer that is labeled as "Upgrade" in Figure 3. +.. In the drop-down menu, select from multiple offers, if available. The previously activated public offer is shown together with the newly provided agreement based offer that is labeled as "Upgrade" in Figure 3. + [caption="Private offer selection dropdown"] + @@ -48,15 +48,15 @@ image::rosa-private-offer-details.png[] + [NOTE] ==== -Private offers have several available configurations. +Private offers have several available configurations. -* It is possible that the private offer you are accepting is set up with a fixed future start date. -* If you do not have another active {product-title} subscription at the time of accepting the private offer, a public offer or an older private offer entitlement, accept the private offer itself and continue with the account linking and cluster deployment steps after the specified service start date. +* It is possible that the private offer you are accepting is set up with a fixed future start date. +* If you do not have another active {product-title} subscription at the time of accepting the private offer, a public offer or an older private offer entitlement, accept the private offer itself and continue with the account linking and cluster deployment steps after the specified service start date. You must have an active {product-title} entitlement to complete these steps. Service start dates are always reported in the UTC time zone ==== -. Create or upgrade your contract. +. Create or upgrade your contract. + .. For private offers accepted by an AWS account that does not have {product-title} activated yet and is creating the first contract for this service, click the *Create contract button*. + @@ -78,7 +78,7 @@ image::rosa-private-offer-acceptance-confirmation-window.png[] [caption="Subscription confirmation"] image::rosa-subscription-contfirmation.png[] -. If the accepted private offer has a future start date specified, return to the private offer page after the service start date, and click the *Setup your account* button to proceed with the Red{nbsp}Hat and AWS account linking. +. If the accepted private offer has a future start date specified, return to the private offer page after the service start date, and click the *Setup your account* button to proceed with the Red{nbsp}Hat and AWS account linking. + [NOTE] ==== diff --git a/modules/aws-account-billing-selection.adoc b/modules/aws-account-billing-selection.adoc index e7a931afbbd9..014553c58032 100644 --- a/modules/aws-account-billing-selection.adoc +++ b/modules/aws-account-billing-selection.adoc @@ -11,7 +11,7 @@ When deploying {product-title} clusters, verify that end users select the AWS bi .Procedure -* When using the web interface for deploying {product-title}, the Associated AWS infrastructure account" is typically set to the AWS account ID used by the administrator of the cluster that is being created. +* When using the web interface for deploying {product-title}, the associated AWS infrastructure account is typically set to the AWS account ID used by the administrator of the cluster that is being created. ** This can be the same AWS account as the billing AWS account. ** AWS resources are deployed into this account and all the billing associated with those resources are processed accordingly. + diff --git a/modules/aws-rh-linking.adoc b/modules/aws-rh-linking.adoc index f684525257e5..84a172a342db 100644 --- a/modules/aws-rh-linking.adoc +++ b/modules/aws-rh-linking.adoc @@ -4,7 +4,7 @@ :_mod-docs-content-type: PROCEDURE [id="aws-rh-linking_{context}"] -= AWS and Red{nbsp}Hat account and subscription linking += Link AWS and Red{nbsp}Hat accounts and subscriptions [role="_abstract"] You must link your AWS and Red{nbsp}Hat accounts and subscriptions. diff --git a/modules/cloud-experts-aws-load-balancer-operator-cleanup.adoc b/modules/cloud-experts-aws-load-balancer-operator-cleanup.adoc index d95d6dfca2f8..af00896cd7b5 100644 --- a/modules/cloud-experts-aws-load-balancer-operator-cleanup.adoc +++ b/modules/cloud-experts-aws-load-balancer-operator-cleanup.adoc @@ -4,7 +4,7 @@ :_mod-docs-content-type: PROCEDURE [id="cloud-experts-aws-load-balancer-operator-cleanup_{context}"] -= Cleaning up += Clean up [role="_abstract"] Clean up your AWS resources after completing this lab tutorial. diff --git a/modules/cloud-experts-aws-load-balancer-operator-environment.adoc b/modules/cloud-experts-aws-load-balancer-operator-environment.adoc index 00189bb494ca..00da9444f934 100644 --- a/modules/cloud-experts-aws-load-balancer-operator-environment.adoc +++ b/modules/cloud-experts-aws-load-balancer-operator-environment.adoc @@ -4,7 +4,7 @@ :_mod-docs-content-type: PROCEDURE [id="cloud-experts-aws-load-balancer-operator-environment_{context}"] -= Setting up your environment += Set up your environment [role="_abstract"] You can use environment variables to ensure consistency across the commands within this lab. diff --git a/modules/cloud-experts-aws-load-balancer-operator-validating.adoc b/modules/cloud-experts-aws-load-balancer-operator-validating.adoc index c29537cba893..8719fcc6ffd2 100644 --- a/modules/cloud-experts-aws-load-balancer-operator-validating.adoc +++ b/modules/cloud-experts-aws-load-balancer-operator-validating.adoc @@ -4,7 +4,7 @@ :_mod-docs-content-type: PROCEDURE [id="cloud-experts-aws-load-balancer-operator-validating_{context}"] -= Validating the deployment += Validate the deployment [role="_abstract"] You can validate your load balancer Operators using the {oc-first} tool. diff --git a/modules/cloud-experts-aws-secret-manager-create-iam-polices.adoc b/modules/cloud-experts-aws-secret-manager-create-iam-polices.adoc index 35ee8277e3f3..ac9b7ab3bec4 100644 --- a/modules/cloud-experts-aws-secret-manager-create-iam-polices.adoc +++ b/modules/cloud-experts-aws-secret-manager-create-iam-polices.adoc @@ -4,7 +4,7 @@ :_mod-docs-content-type: PROCEDURE [id="cloud-experts-aws-secret-manager-create-iam-polices_{context}"] -= Creating a Secret and IAM Access Policies += Create a Secret and IAM Access Policies [role="_abstract"] Use the AWS CLI to create your AWS secret and IAM access policies. diff --git a/modules/cloud-experts-aws-secret-manager-creating-application.adoc b/modules/cloud-experts-aws-secret-manager-creating-application.adoc index e69960559121..ccbebc12a3a5 100644 --- a/modules/cloud-experts-aws-secret-manager-creating-application.adoc +++ b/modules/cloud-experts-aws-secret-manager-creating-application.adoc @@ -10,7 +10,7 @@ You can create your application using the secret that you created. .Procedure -. Create an OpenShift project by running the following command: +. Create an {OCP-short} project by running the following command: + [source,terminal] ---- diff --git a/modules/cloud-experts-aws-secret-manager-deply-aws-secrets.adoc b/modules/cloud-experts-aws-secret-manager-deply-aws-secrets.adoc index a9d37fa4e60e..cf4e0f48a689 100644 --- a/modules/cloud-experts-aws-secret-manager-deply-aws-secrets.adoc +++ b/modules/cloud-experts-aws-secret-manager-deply-aws-secrets.adoc @@ -4,7 +4,7 @@ :_mod-docs-content-type: PROCEDURE [id="cloud-experts-aws-secret-manager-deply-aws-secrets_{context}"] -= Deploying the AWS Secrets and Configuration Provider += Deploy the AWS Secrets and Configuration Provider [role="_abstract"] diff --git a/modules/cloud-experts-custom-dns-resolver-configure-dns-server-classic.adoc b/modules/cloud-experts-custom-dns-resolver-configure-dns-server-classic.adoc index 13417931a061..b273f2fb4e6f 100644 --- a/modules/cloud-experts-custom-dns-resolver-configure-dns-server-classic.adoc +++ b/modules/cloud-experts-custom-dns-resolver-configure-dns-server-classic.adoc @@ -7,11 +7,11 @@ = Configure your DNS server [role="_abstract"] -{product-title} clusters require you to configure DNS server to forward the necessary private hosted zones to your Amazon Route 53 Inbound Resolver: +{product-title} clusters require you to configure your DNS server to forward the necessary private hosted zones to your Amazon Route 53 Inbound Resolver: * `..p1.openshiftapps.com` -This Amazon Route 53 private hosted zones is created during cluster creation. The `domain-prefix` is a customer-specified value, but the `unique-ID` is randomly generated during cluster creation and cannot be preselected. As such, you must wait for the cluster creation process to begin before configuring forwarding for the `p1.openshiftapps.com` private hosted zone. +This Amazon Route 53 private hosted zone is created during cluster creation. The `domain-prefix` is a customer-specified value, but the `unique-ID` is randomly generated during cluster creation and cannot be preselected. As such, you must wait for the cluster creation process to begin before configuring forwarding for the `p1.openshiftapps.com` private hosted zone. .Procedure . Create your cluster. diff --git a/modules/cloud-experts-custom-dns-resolver-configure-dns-server-hcp.adoc b/modules/cloud-experts-custom-dns-resolver-configure-dns-server-hcp.adoc index 344cbb5be4be..b311e67f6c63 100644 --- a/modules/cloud-experts-custom-dns-resolver-configure-dns-server-hcp.adoc +++ b/modules/cloud-experts-custom-dns-resolver-configure-dns-server-hcp.adoc @@ -7,7 +7,7 @@ = Configure your DNS server [role="_abstract"] -{product-title} clusters require you to configure DNS server to forward the necessary private hosted zones to your Amazon Route 53 Inbound Resolver: +{product-title} clusters require you to configure your DNS server to forward the necessary private hosted zones to your Amazon Route 53 Inbound Resolver: * `.hypershift.local` * `rosa...p3.openshiftapps.com` diff --git a/modules/cloud-experts-custom-dns-resolver-environment-setup.adoc b/modules/cloud-experts-custom-dns-resolver-environment-setup.adoc index 62683a6ca342..61d98cc9ea53 100644 --- a/modules/cloud-experts-custom-dns-resolver-environment-setup.adoc +++ b/modules/cloud-experts-custom-dns-resolver-environment-setup.adoc @@ -4,7 +4,7 @@ :_mod-docs-content-type: PROCEDURE [id="cloud-experts-custom-dns-resolver-environment-setup_{context}"] -= Setting up your environment += Set up your environment [role="_abstract"] You can use environment variables to ensure consistency across the commands within this lab. diff --git a/modules/cloud-experts-deploy-api-data-protection-cleanup.adoc b/modules/cloud-experts-deploy-api-data-protection-cleanup.adoc index 5203a4934872..6279f61f51e0 100644 --- a/modules/cloud-experts-deploy-api-data-protection-cleanup.adoc +++ b/modules/cloud-experts-deploy-api-data-protection-cleanup.adoc @@ -4,7 +4,7 @@ :_mod-docs-content-type: PROCEDURE [id="cloud-experts-deploy-api-data-protection-cleanup_{context}"] -= Cleaning up += Clean up [role="_abstract"] Clean up your AWS resources after completing this lab tutorial. diff --git a/modules/cloud-experts-deploy-api-data-protection-deploy-oadp-on-cluster.adoc b/modules/cloud-experts-deploy-api-data-protection-deploy-oadp-on-cluster.adoc index 1d5d3c693d95..a841afd2ba2e 100644 --- a/modules/cloud-experts-deploy-api-data-protection-deploy-oadp-on-cluster.adoc +++ b/modules/cloud-experts-deploy-api-data-protection-deploy-oadp-on-cluster.adoc @@ -7,7 +7,7 @@ = Deploy OADP on the cluster [role="_abstract"] -You need to use the {oc-first} tool to deploy OADP to your cluster. +You need to use the {oc-first} tool to deploy {oadp-first} to your cluster. .Procedure . Create a namespace for OADP: @@ -136,7 +136,7 @@ gp3 ebs.csi.aws.com Delete WaitForFirstConsumer gp3-csi (default) ebs.csi.aws.com Delete WaitForFirstConsumer true 4d21h ---- + -Using either gp3-csi, gp2-csi, gp3 or gp2 will work. If the application(s) that are being backed up are all using PV's with CSI, include the CSI plugin in the OADP DPA configuration. +Using either gp3-csi, gp2-csi, gp3 or gp2 will work. If the application(s) that are being backed up are all using Persistent Volumes (PVs) with the Container Storage Interface (CSI), include the CSI plugin in the OADP Data Protection Application (DPA) configuration. . CSI only: Deploy a Data Protection Application: + diff --git a/modules/cloud-experts-deploy-api-data-protection-environment-variables.adoc b/modules/cloud-experts-deploy-api-data-protection-environment-variables.adoc index 194db39db636..7c10eefb99be 100644 --- a/modules/cloud-experts-deploy-api-data-protection-environment-variables.adoc +++ b/modules/cloud-experts-deploy-api-data-protection-environment-variables.adoc @@ -4,7 +4,7 @@ :_mod-docs-content-type: PROCEDURE [id="cloud-experts-deploy-api-data-protection-environment-variables_{context}"] -= Setting up your environment += Set up your environment [role="_abstract"] You can use environment variables to ensure consistency across the commands within this lab. @@ -15,7 +15,7 @@ You can use environment variables to ensure consistency across the commands with [NOTE] ==== Change the cluster name to match your {product-title} cluster and ensure you are logged into the cluster as an Administrator. -Ensure all fields are outputted correctly before moving on. +Ensure all fields are output correctly before moving on. ==== + [source,terminal] diff --git a/modules/cloud-experts-deploy-api-data-protection-perform-backup.adoc b/modules/cloud-experts-deploy-api-data-protection-perform-backup.adoc index adc7f24f3c10..dd8fd8a2c318 100644 --- a/modules/cloud-experts-deploy-api-data-protection-perform-backup.adoc +++ b/modules/cloud-experts-deploy-api-data-protection-perform-backup.adoc @@ -7,11 +7,11 @@ = Perform a backup [role="_abstract"] -You can perform a back up by using the {oc-first} tool. +You can perform a backup by using the {oc-first} tool. [NOTE] ==== -The following sample hello-world application has no attached persistent volumes. Either DPA configuration will work. +The following sample hello-world application has no attached persistent volumes. Either Data Protection Application (DPA) configuration will work. ==== .Procedure diff --git a/modules/cloud-experts-deploy-api-data-protection-prepare-aws-account.adoc b/modules/cloud-experts-deploy-api-data-protection-prepare-aws-account.adoc index cc1a2d912570..59b5eb363e45 100644 --- a/modules/cloud-experts-deploy-api-data-protection-prepare-aws-account.adoc +++ b/modules/cloud-experts-deploy-api-data-protection-prepare-aws-account.adoc @@ -7,7 +7,7 @@ = Prepare AWS Account [role="_abstract"] -Before deploying OpenShift API for data protection, you must set up your AWS account. +Before deploying {oadp-full}, you must set up your AWS account. .Procedure . Create an IAM Policy to allow for S3 Access: diff --git a/modules/cloud-experts-entra-id-idp-additional-individual-groups.adoc b/modules/cloud-experts-entra-id-idp-additional-individual-groups.adoc index 81de0b93cc99..48df00e28117 100644 --- a/modules/cloud-experts-entra-id-idp-additional-individual-groups.adoc +++ b/modules/cloud-experts-entra-id-idp-additional-individual-groups.adoc @@ -4,7 +4,7 @@ :_mod-docs-content-type: PROCEDURE [id="cloud-experts-entra-id-idp--additional-individual-groups_{context}"] -= Granting additional permissions to individual groups += Grant additional permissions to individual groups [role="_abstract"] If you opted to enable group claims, the cluster OAuth provider automatically creates or updates the user's group memberships by using the group ID. The cluster OAuth provider does not automatically create `RoleBindings` and `ClusterRoleBindings` for the groups that are created; you are responsible for creating those bindings by using your own processes. diff --git a/modules/cloud-experts-entra-id-idp-additional-individual-user.adoc b/modules/cloud-experts-entra-id-idp-additional-individual-user.adoc index 78a444c48754..5660185e84ee 100644 --- a/modules/cloud-experts-entra-id-idp-additional-individual-user.adoc +++ b/modules/cloud-experts-entra-id-idp-additional-individual-user.adoc @@ -4,7 +4,7 @@ :_mod-docs-content-type: PROCEDURE [id="cloud-experts-entra-id-idp-additional-individual-user_{context}"] -= Granting additional permissions to individual users += Grant additional permissions to individual users [role="_abstract"] {product-title} includes a significant number of preconfigured roles, including the `cluster-admin` role that grants full access and control over the cluster. diff --git a/modules/cloud-experts-entra-id-idp-additional-user-groups.adoc b/modules/cloud-experts-entra-id-idp-additional-user-groups.adoc index 79f2ecfa1e1a..d22da99b7b75 100644 --- a/modules/cloud-experts-entra-id-idp-additional-user-groups.adoc +++ b/modules/cloud-experts-entra-id-idp-additional-user-groups.adoc @@ -2,11 +2,11 @@ // // * cloud_experts_tutorials/cloud-experts-entra-id-idp.adoc -:_mod-docs-content-type: REFERENCE +:_mod-docs-content-type: CONCEPT [id="cloud-experts-entra-id-idp-additional-user-groups_{context}"] -= Granting additional permissions to individual users and groups += Grant additional permissions to individual users and groups [role="_abstract"] -When your first log in, you might notice that you have very limited permissions. By default, {product-title} only grants you the ability to create new projects, or namespaces, in the cluster. Other projects are restricted from view. +When you first log in, you might notice that you have very limited permissions. By default, {product-title} only grants you the ability to create new projects, or namespaces, in the cluster. Other projects are restricted from view. You must grant these additional abilities to individual users and groups. \ No newline at end of file diff --git a/modules/cloud-experts-entra-id-idp-configure-app.adoc b/modules/cloud-experts-entra-id-idp-configure-app.adoc index ce657bb20330..da24e10e297b 100644 --- a/modules/cloud-experts-entra-id-idp-configure-app.adoc +++ b/modules/cloud-experts-entra-id-idp-configure-app.adoc @@ -4,7 +4,7 @@ :_mod-docs-content-type: CONCEPT [id="cloud-experts-entra-id-idp-configure-app_{context}"] -= Configuring the application registration in Entra ID to include optional and group claims += Configure the application registration in Entra ID to include optional and group claims [role="_abstract"] To ensure that {product-title} has enough information to create the user's account, you must configure Entra ID to give two optional claims: `email` and `preferred_username`. For more information about optional claims in Entra ID, see link:https://learn.microsoft.com/en-us/azure/active-directory/develop/optional-claims[the Microsoft documentation]. diff --git a/modules/cloud-experts-entra-id-idp-configure-entra-idp.adoc b/modules/cloud-experts-entra-id-idp-configure-entra-idp.adoc index e068a3c95f32..d6af93b05a61 100644 --- a/modules/cloud-experts-entra-id-idp-configure-entra-idp.adoc +++ b/modules/cloud-experts-entra-id-idp-configure-entra-idp.adoc @@ -4,10 +4,10 @@ :_mod-docs-content-type: PROCEDURE [id="cloud-experts-entra-id-idp-configure-entra-idp_{context}"] -= Configuring the {product-title} cluster to use Entra ID as the identity provider += Configure the {product-title} cluster to use Entra ID as the identity provider [role="_abstract"] -You must configure {product-title} to use Entra ID as its identity provider. Although {product-title} offers the ability to configure identity providers by using {cluster-manager}, use the ROSA CLI to configure the cluster's OAuth provider to use Entra ID as its identity provider. Before configuring the identity provider, set the necessary variables for the identity provider configuration. +You must configure {product-title} to use Entra ID as its identity provider. Although {product-title} offers the ability to configure identity providers by using {cluster-manager}, use the {rosa-cli-first} to configure the cluster's OAuth provider to use Entra ID as its identity provider. Before configuring the identity provider, set the necessary variables for the identity provider configuration. .Procedure . Create the variables by running the following command: @@ -22,7 +22,7 @@ $ TENANT_ID=zzzzzzzz-zzzz-zzzz-zzzz-zzzzzzzzzzzz ---- + -- -where: +where: `example-cluster`:: Replace this with the name of your cluster. `AAD`:: Replace this value with the name you used in the OAuth callback URL that you generated earlier in this process. diff --git a/modules/cloud-experts-entra-id-idp-configure-group-claims.adoc b/modules/cloud-experts-entra-id-idp-configure-group-claims.adoc index 5b51c243cda5..64394583c002 100644 --- a/modules/cloud-experts-entra-id-idp-configure-group-claims.adoc +++ b/modules/cloud-experts-entra-id-idp-configure-group-claims.adoc @@ -4,7 +4,7 @@ :_mod-docs-content-type: PROCEDURE [id="cloud-experts-entra-id-idp-configure-group-claims_{context}"] -= Configuring group claims (optional) += Configure group claims (optional) [role="_abstract"] Configure Entra ID to offer a groups claim. diff --git a/modules/cloud-experts-entra-id-idp-configure-optional-claims.adoc b/modules/cloud-experts-entra-id-idp-configure-optional-claims.adoc index a90f1c4690ff..2e6153203e1e 100644 --- a/modules/cloud-experts-entra-id-idp-configure-optional-claims.adoc +++ b/modules/cloud-experts-entra-id-idp-configure-optional-claims.adoc @@ -4,7 +4,7 @@ :_mod-docs-content-type: PROCEDURE [id="cloud-experts-entra-id-idp-configure-optional-claims_{context}"] -= Configuring optional claims += Configure optional claims [role="_abstract"] You can configure the optional claims in Entra ID. diff --git a/modules/cloud-experts-entra-id-idp-register-app.adoc b/modules/cloud-experts-entra-id-idp-register-app.adoc index c0c1d493299d..cc74b7fb0df1 100644 --- a/modules/cloud-experts-entra-id-idp-register-app.adoc +++ b/modules/cloud-experts-entra-id-idp-register-app.adoc @@ -4,7 +4,7 @@ :_mod-docs-content-type: PROCEDURE [id="cloud-experts-entra-id-idp-register-app_{context}"] -= Registering a new application in Entra ID for authentication += Register a new application in Entra ID for authentication [role="_abstract"] To register your application in Entra ID, first create the OAuth callback URL, then register your application. diff --git a/modules/cloud-experts-using-alb-and-waf-configure-aws-waf.adoc b/modules/cloud-experts-using-alb-and-waf-configure-aws-waf.adoc index 799ee7884116..7f38071d31a2 100644 --- a/modules/cloud-experts-using-alb-and-waf-configure-aws-waf.adoc +++ b/modules/cloud-experts-using-alb-and-waf-configure-aws-waf.adoc @@ -7,10 +7,10 @@ = Configure the AWS WAF [role="_abstract"] -The link:https://aws.amazon.com/waf/[AWS WAF] service is a web application firewall that lets you monitor, protect, and control the HTTP and HTTPS requests that are forwarded to your protected web application resources, like {product-title}. +You can use the link:https://aws.amazon.com/waf/[AWS Web Application Firewall (WAF)] service to monitor, protect, and control the HTTP and HTTPS requests that are forwarded to your protected web application resources, like {product-title}. .Procedure -. Create a AWS WAF rules file to apply to our web ACL: +. Create an AWS WAF rules file to apply to our web access control list (ACL): + [source,terminal] ---- @@ -73,7 +73,7 @@ $ WAF_ARN=$(aws wafv2 create-web-acl \ --output text) ---- + -. Annotate the Ingress resource with the AWS WAF Web ACL ARN: +. Annotate the Ingress resource with the AWS WAF Web ACL (Amazon Resource Name) ARN: + [source,terminal] ---- diff --git a/modules/cloud-experts-using-alb-and-waf-deploy-aws-load-balancer-operator.adoc b/modules/cloud-experts-using-alb-and-waf-deploy-aws-load-balancer-operator.adoc index 0fd31b561104..92788a096710 100644 --- a/modules/cloud-experts-using-alb-and-waf-deploy-aws-load-balancer-operator.adoc +++ b/modules/cloud-experts-using-alb-and-waf-deploy-aws-load-balancer-operator.adoc @@ -7,7 +7,7 @@ = Deploy the AWS Load Balancer Operator [role="_abstract"] -The link:https://github.com/openshift/aws-load-balancer-operator[AWS Load Balancer Operator] is used to used to install, manage and configure an instance of `aws-load-balancer-controller` in a {product-title} cluster. To deploy ALBs in {product-title}, we need to first deploy the AWS Load Balancer Operator. +The link:https://github.com/openshift/aws-load-balancer-operator[AWS Load Balancer Operator] is used to install, manage, and configure an instance of `aws-load-balancer-controller` in a {product-title} cluster. To deploy ALBs in {product-title}, we need to first deploy the AWS Load Balancer Operator. .Procedure . Create a new project to deploy the AWS Load Balancer Operator into by running the following command: diff --git a/modules/cloud-experts-using-alb-and-waf-environment-setup.adoc b/modules/cloud-experts-using-alb-and-waf-environment-setup.adoc index 89073b8ec570..56885a3bf694 100644 --- a/modules/cloud-experts-using-alb-and-waf-environment-setup.adoc +++ b/modules/cloud-experts-using-alb-and-waf-environment-setup.adoc @@ -4,7 +4,7 @@ :_mod-docs-content-type: PROCEDURE [id="cloud-experts-using-alb-and-waf-environment-setup_{context}"] -= Setting up your environment += Set up your environment [role="_abstract"] You can use environment variables to ensure consistency across the commands within this lab. diff --git a/modules/cloud-experts-using-aws-ack-clean-up.adoc b/modules/cloud-experts-using-aws-ack-clean-up.adoc index a1e24cfd7a5d..19f65df888b6 100644 --- a/modules/cloud-experts-using-aws-ack-clean-up.adoc +++ b/modules/cloud-experts-using-aws-ack-clean-up.adoc @@ -4,7 +4,7 @@ :_mod-docs-content-type: PROCEDURE [id="cloud-experts-using-aws-ack-clean-up_{context}"] -= Cleaning up += Clean up [role="_abstract"] Clean up your AWS resources after completing this lab tutorial. diff --git a/modules/cloud-experts-using-aws-ack-environment-setup.adoc b/modules/cloud-experts-using-aws-ack-environment-setup.adoc index 973aa2c43314..7acb72141b34 100644 --- a/modules/cloud-experts-using-aws-ack-environment-setup.adoc +++ b/modules/cloud-experts-using-aws-ack-environment-setup.adoc @@ -4,7 +4,7 @@ :_mod-docs-content-type: PROCEDURE [id="cloud-experts-using-aws-ack-environment-setup_{context}"] -= Setting up your environment += Set up your environment [role="_abstract"] You can use environment variables to ensure consistency across the commands within this lab. diff --git a/modules/cloud-experts-using-aws-ack-install-ack.adoc b/modules/cloud-experts-using-aws-ack-install-ack.adoc index e785ddaf6f94..ea4474549ee9 100644 --- a/modules/cloud-experts-using-aws-ack-install-ack.adoc +++ b/modules/cloud-experts-using-aws-ack-install-ack.adoc @@ -4,7 +4,7 @@ :_mod-docs-content-type: PROCEDURE [id="cloud-experts-using-aws-ack-install-ack_{context}"] -= Installing the ACK S3 Controller += Install the ACK S3 Controller [role="_abstract"] Use the {oc-first} to create a project for your ACK S3 Controller. diff --git a/modules/cloud-experts-using-aws-ack-prep-aws.adoc b/modules/cloud-experts-using-aws-ack-prep-aws.adoc index 2e7b1cb65f32..14ae782d8b86 100644 --- a/modules/cloud-experts-using-aws-ack-prep-aws.adoc +++ b/modules/cloud-experts-using-aws-ack-prep-aws.adoc @@ -4,7 +4,7 @@ :_mod-docs-content-type: PROCEDURE [id="cloud-experts-using-aws-ack-prep-aws_{context}"] -= Preparing your AWS Account += Prepare your AWS Account [role="_abstract"] Before using your AWS controllers, you must prepare your AWS account. diff --git a/modules/cloud-experts-using-aws-ack-valid-deploy.adoc b/modules/cloud-experts-using-aws-ack-valid-deploy.adoc index bd1608041d04..00bf5ffcc33a 100644 --- a/modules/cloud-experts-using-aws-ack-valid-deploy.adoc +++ b/modules/cloud-experts-using-aws-ack-valid-deploy.adoc @@ -4,7 +4,7 @@ :_mod-docs-content-type: PROCEDURE [id="cloud-experts-using-aws-ack-valid-deploy_{context}"] -= Validating the deployment += Validate the deployment [role="_abstract"] After installing your controller, you can verify the installation by using the {oc-first} tool. diff --git a/modules/cloud-experts-using-cloudfront-and-waf-configure-aws-waf.adoc b/modules/cloud-experts-using-cloudfront-and-waf-configure-aws-waf.adoc index 82cc4b6145d3..55e50efcbdf6 100644 --- a/modules/cloud-experts-using-cloudfront-and-waf-configure-aws-waf.adoc +++ b/modules/cloud-experts-using-cloudfront-and-waf-configure-aws-waf.adoc @@ -10,7 +10,7 @@ The link:https://aws.amazon.com/waf/[AWS WAF] service is a web application firewall that lets you monitor, protect, and control the HTTP and HTTPS requests that are forwarded to your protected web application resources, like {product-title}. .Procedure -. Create a AWS WAF rules file to apply to our web ACL: +. Create an AWS WAF rules file to apply to our web access control list (ACL): + [source,terminal] ---- diff --git a/modules/cloud-experts-using-cloudfront-and-waf-secondary_ingress_controller_setup.adoc b/modules/cloud-experts-using-cloudfront-and-waf-secondary_ingress_controller_setup.adoc index 869796c14cc9..b0b2e1a7b433 100644 --- a/modules/cloud-experts-using-cloudfront-and-waf-secondary_ingress_controller_setup.adoc +++ b/modules/cloud-experts-using-cloudfront-and-waf-secondary_ingress_controller_setup.adoc @@ -4,7 +4,7 @@ :_mod-docs-content-type: PROCEDURE [id="cloud-experts-using-cloudfront-and-waf-secondary_ingress_controller_setup_{context}"] -= Setting up the secondary ingress controller += Set up the secondary ingress controller [role="_abstract"] It is necessary to configure a secondary ingress controller to segment your external WAF-protected traffic from your standard (and default) cluster ingress controller. diff --git a/modules/cloud-experts-using-cloudfront-and-waf-setup-environ.adoc b/modules/cloud-experts-using-cloudfront-and-waf-setup-environ.adoc index 03e3b69f182c..7af40353b7db 100644 --- a/modules/cloud-experts-using-cloudfront-and-waf-setup-environ.adoc +++ b/modules/cloud-experts-using-cloudfront-and-waf-setup-environ.adoc @@ -4,7 +4,7 @@ :_mod-docs-content-type: PROCEDURE [id="cloud-experts-using-cloudfront-and-waf-setup-environ_{context}"] -= Setting up your environment += Set up your environment [role="_abstract"] You can use environment variables to ensure consistency across the commands within this lab. diff --git a/modules/egress-ip-assign-ip-namespace.adoc b/modules/egress-ip-assign-ip-namespace.adoc index 0c2da1594b13..443f8eacef08 100644 --- a/modules/egress-ip-assign-ip-namespace.adoc +++ b/modules/egress-ip-assign-ip-namespace.adoc @@ -4,7 +4,7 @@ :_mod-docs-content-type: PROCEDURE [id="cloud-experts-consistent-egress-ip-assign-ip-namespace_{context}"] -= Assigning an egress IP to a namespace += Assign an egress IP to a namespace [role="_abstract"] You can assign an egress IP to a namespace on your cluster by using the {oc-first} tool. diff --git a/modules/egress-ip-assigning-to-pod.adoc b/modules/egress-ip-assigning-to-pod.adoc index eaadc9127b05..53b816a106c1 100644 --- a/modules/egress-ip-assigning-to-pod.adoc +++ b/modules/egress-ip-assigning-to-pod.adoc @@ -6,7 +6,7 @@ // * cloud_experts_tutorials/cloud-experts-consistent-egress-ip.adoc :_mod-docs-content-type: PROCEDURE [id="cloud-experts-consistent-egress-ip-assigning-to-pod_{context}"] -= Assigning an egress IP to a pod += Assign an egress IP to a pod [role="_abstract"] Create an egress rule to assign an egress IP to a specified pod. diff --git a/modules/egress-ip-blocked-egress.adoc b/modules/egress-ip-blocked-egress.adoc index 0a56691a2543..5cc4e0da65b1 100644 --- a/modules/egress-ip-blocked-egress.adoc +++ b/modules/egress-ip-blocked-egress.adoc @@ -4,10 +4,10 @@ :_mod-docs-content-type: PROCEDURE [id="cloud-experts-consistent-egress-ip-blocked-egress_{context}"] -= Optional: Testing blocked egress += Optional: Test blocked egress [role="_abstract"] -You can test if the egress is blocked by using {oc-first} tool. +You can test if the egress is blocked by using the {oc-first} tool. .Procedure . Test that the traffic is successfully blocked when the egress rules do not apply by running the following command: diff --git a/modules/egress-ip-capacity.adoc b/modules/egress-ip-capacity.adoc index 470114e9fa46..8fa99103c531 100644 --- a/modules/egress-ip-capacity.adoc +++ b/modules/egress-ip-capacity.adoc @@ -4,7 +4,7 @@ :_mod-docs-content-type: PROCEDURE [id="cloud-experts-consistent-egress-ip-capacity_{context}"] -= Ensuring capacity += Ensure capacity [role="_abstract"] The number of IP addresses assigned to each node is limited for each public cloud provider. diff --git a/modules/egress-ip-cluster-cleanup.adoc b/modules/egress-ip-cluster-cleanup.adoc index 3657b21b1b12..d3734f145ced 100644 --- a/modules/egress-ip-cluster-cleanup.adoc +++ b/modules/egress-ip-cluster-cleanup.adoc @@ -4,7 +4,7 @@ :_mod-docs-content-type: PROCEDURE [id="cloud-experts-consistent-egress-ip-cluster-cleanup_{context}"] -= Cleaning up your cluster += Clean up your cluster [role="_abstract"] Before moving to a different tutorial, you can clean up your cluster environment with a few commands. diff --git a/modules/egress-ip-creating-ip-rules.adoc b/modules/egress-ip-creating-ip-rules.adoc index 146d54aeae4c..b1f5f7808dfe 100644 --- a/modules/egress-ip-creating-ip-rules.adoc +++ b/modules/egress-ip-creating-ip-rules.adoc @@ -4,7 +4,7 @@ :_mod-docs-content-type: PROCEDURE [id="cloud-experts-consistent-egress-ip-creating-ip-rules_{context}"] -= Creating the egress IP rules += Create the egress IP rules [role="_abstract"] Before creating the egress IP rules, identify which egress IPs you will use. diff --git a/modules/egress-ip-deploy-sample-app.adoc b/modules/egress-ip-deploy-sample-app.adoc index f1b1c45e4d6f..94ac1f3ff2a8 100644 --- a/modules/egress-ip-deploy-sample-app.adoc +++ b/modules/egress-ip-deploy-sample-app.adoc @@ -4,7 +4,7 @@ :_mod-docs-content-type: PROCEDURE [id="cloud-experts-consistent-egress-ip-deploy-sample-app_{context}"] -= Deploying a sample application += Deploy a sample application [role="_abstract"] To test the egress IP rule, create a service that is restricted to the egress IP addresses which we have specified. This simulates an external service that is expecting a small subset of IP addresses. diff --git a/modules/egress-ip-egress-ip-review.adoc b/modules/egress-ip-egress-ip-review.adoc index 08b0981c37dd..4aa1b8df55b9 100644 --- a/modules/egress-ip-egress-ip-review.adoc +++ b/modules/egress-ip-egress-ip-review.adoc @@ -4,10 +4,10 @@ :_mod-docs-content-type: PROCEDURE [id="cloud-experts-consistent-egress-ip-egress-ip-review_{context}"] -= Reviewing the egress IPs += Review the egress IPs [role="_abstract"] -You can list all of the egress IPs by using {oc-first} tool. +You can list all of the egress IPs by using the {oc-first} tool. .Procedure * Review the egress IP assignments by running the following command: diff --git a/modules/egress-ip-env-variables.adoc b/modules/egress-ip-env-variables.adoc index 6cf09e384e42..cd317f57870c 100644 --- a/modules/egress-ip-env-variables.adoc +++ b/modules/egress-ip-env-variables.adoc @@ -4,7 +4,7 @@ :_mod-docs-content-type: PROCEDURE [id="cloud-experts-consistent-egress-ip-env-variables_{context}"] -= Setting your environment variables += Set your environment variables [role="_abstract"] You may set environment variables to make it easier to reuse values. diff --git a/modules/egress-ip-namespace-egress.adoc b/modules/egress-ip-namespace-egress.adoc index ee6e516c15bf..32cdbf763c9b 100644 --- a/modules/egress-ip-namespace-egress.adoc +++ b/modules/egress-ip-namespace-egress.adoc @@ -4,7 +4,7 @@ :_mod-docs-content-type: PROCEDURE [id="cloud-experts-consistent-egress-ip-namespace-egress_{context}"] -= Testing the namespace egress += Test the namespace egress [role="_abstract"] You can test the namespace egress by using the {oc-first} tool. @@ -34,7 +34,7 @@ $ curl -s http://$LOAD_BALANCER_HOSTNAME + [NOTE] ==== -The `client_address` is the internal IP address of the load balancer not your egress IP. You can verify that you have configured the client address correctly by connecting with your service limited to `.spec.loadBalancerSourceRanges`. +The `client_address` is the internal IP address of the load balancer, not your egress IP. You can verify that you have configured the client address correctly by connecting with your service limited to `.spec.loadBalancerSourceRanges`. ==== + *For example*: diff --git a/modules/egress-ip-node-labels.adoc b/modules/egress-ip-node-labels.adoc index 8e9bbcd320c7..3d42fbed3ef5 100644 --- a/modules/egress-ip-node-labels.adoc +++ b/modules/egress-ip-node-labels.adoc @@ -4,7 +4,7 @@ :_mod-docs-content-type: PROCEDURE [id="cloud-experts-consistent-egress-ip-node-labels_{context}"] -= Labeling the nodes += Label the nodes [role="_abstract"] You can label your nodes by using the {oc-first} tool. diff --git a/modules/egress-ip-pod-egress-test.adoc b/modules/egress-ip-pod-egress-test.adoc index b262c5173211..3ec5a1ad9477 100644 --- a/modules/egress-ip-pod-egress-test.adoc +++ b/modules/egress-ip-pod-egress-test.adoc @@ -4,7 +4,7 @@ :_mod-docs-content-type: PROCEDURE [id="cloud-experts-consistent-egress-ip-pod-egress-test_{context}"] -= Testing the pod egress += Test the pod egress [role="_abstract"] You can test your pod's egress by using the {oc-first} tool. @@ -34,7 +34,7 @@ $ curl -s http://$LOAD_BALANCER_HOSTNAME + [NOTE] ==== -The `client_address` is the internal IP address of the load balancer not your egress IP. You can verify that you have configured the client address correctly by connecting with your service limited to `.spec.loadBalancerSourceRanges`. +The `client_address` is the internal IP address of the load balancer, not your egress IP. You can verify that you have configured the client address correctly by connecting with your service limited to `.spec.loadBalancerSourceRanges`. ==== + *For example*: diff --git a/modules/offer-troubleshooting.adoc b/modules/offer-troubleshooting.adoc index 43c5b46e2b91..b8829c491ca0 100644 --- a/modules/offer-troubleshooting.adoc +++ b/modules/offer-troubleshooting.adoc @@ -11,7 +11,7 @@ The most frequent issues associated with private offer acceptance and Red{nbsp}H == Accessing a private offer using a different AWS account -* If you try accessing the private offer when logged in under AWS account ID that is not defined in the offer, and see the message shown in Figure 11, then verify that you are logged in as the desired AWS billing account. +* If you try accessing the private offer when logged in under an AWS account ID that is not defined in the offer, and see the message shown in Figure 11, then verify that you are logged in as the desired AWS billing account. + [caption="HTTP 404 error when using the private offer URL"] + @@ -21,7 +21,7 @@ image::rosa-http-404-error-when-using-the-private-offer-url.png[] == The private offer cannot be accepted because of active subscription -* If you try accessing a private offer that was created for the first time {product-title} activation, while you already have {product-title} activated using another public or private offer, and see the following notice, then contact the seller who provided you with the offer. +* If you try accessing a private offer that was created for the first-time {product-title} activation, while you already have {product-title} activated using another public or private offer, and see the following notice, then contact the seller who provided you with the offer. + The seller can provide you with a new offer that will seamlessly replace your current agreement, without a need to cancel your previous subscription. + diff --git a/modules/selecting-billing-account-cli.adoc b/modules/selecting-billing-account-cli.adoc index 830601789d83..2fce256be1b9 100644 --- a/modules/selecting-billing-account-cli.adoc +++ b/modules/selecting-billing-account-cli.adoc @@ -4,18 +4,18 @@ :_mod-docs-content-type: PROCEDURE [id="selecting-billing-account-cli_{context}"] -= Selecting the AWS billing account for {product-title} during cluster deployment using the CLI += Select the AWS billing account for {product-title} during cluster deployment using the CLI [role="_abstract"] -When deploying your cluster using {rosa-cli}, you must select the correct AWS billing account. +When deploying your cluster using {rosa-cli-first}, you must select the correct AWS billing account. [IMPORTANT] ==== -Make sure that you have the most recent ROSA command-line interface (CLI) and AWS CLI installed and have completed the {product-title} prerequisites covered in the previous section. See link:https://github.com/openshift/openshift-docs/pull/104179[Help with ROSA CLI setup] and link:https://aws.amazon.com/cli/[Instructions to install the AWS CLI] for more information. +Make sure that you have the most recent {rosa-cli} and AWS CLI installed and have completed the {product-title} prerequisites covered in the previous section. See link:https://docs.redhat.com/en/documentation/red_hat_openshift_service_on_aws/4/html-single/cli_tools/index#rosa-get-started-cli[Getting started with the {rosa-cli}] and link:https://aws.amazon.com/cli/[Instructions to install the AWS CLI] for more information. ==== .Procedure -. Initiate the cluster deployment using the `rosa create cluster` command. You can click the *copy* button on the link:https://console.redhat.com/openshift/create/rosa/getstarted[Set up Red{nbsp}Hat OpenShift Service on AWS (ROSA) console page] and paste the command in your terminal. This launches the cluster creation process in interactive mode: +. Initiate the cluster deployment using the `rosa create cluster` command. You can click the *copy* button on the link:https://console.redhat.com/openshift/create/rosa/getstarted[Set up {product-title} console page] and paste the command in your terminal. This launches the cluster creation process in interactive mode: + [caption="Deploy the cluster and set up access"] image::rosa-cli-15.png[] diff --git a/modules/selecting-billing-account-ui.adoc b/modules/selecting-billing-account-ui.adoc index f0e82fded3da..324b622896a8 100644 --- a/modules/selecting-billing-account-ui.adoc +++ b/modules/selecting-billing-account-ui.adoc @@ -4,36 +4,36 @@ :_mod-docs-content-type: PROCEDURE [id="selecting-billing-account-ui_{context}"] -= Selecting the AWS billing account for {product-title} during cluster deployment using the web console += Select the AWS billing account for {product-title} during cluster deployment using the web console [role="_abstract"] When deploying your cluster using {cluster-manager}, you must select the correct AWS billing account. .Procedure -. A cluster can be created using the web console by selecting the second option in the bottom section of the introductory *Set up {product-title}* page: +. To start creating a cluster, select the second option in the bottom section of the introductory *Set up {product-title}* page: + [caption="Deploy with web interface"] image::rosa-deploy-ui-19.png[] + [NOTE] ==== -Complete the prerequisites before starting the web console deployment process. +Complete the prerequisites before starting the web console deployment process. -The `rosa` CLI is required for certain tasks, such as creating the account roles. If you are deploying {product-title} for the first time, follow this the CLI steps until running the `rosa whoami` command, before starting the web console deployment steps. +The `rosa` CLI is required for certain tasks, such as creating the account roles. If you are deploying {product-title} for the first time, follow the CLI steps until running the `rosa whoami` command, before starting the web console deployment steps. ==== -. The first step when creating a {product-title} cluster using the web console is the control plane selection. Make sure the *Hosted* option is selected before clicking the *Next* button: +. Select the *Hosted* control plane option, then click *Next*: + [caption="Select hosted option"] + image::rosa-deploy-ui-hcp-20.png[] -. The next step *Accounts and roles* allows you specifying the infrastructure AWS account, into which the {product-title} cluster is deployed and where the resources are consumed and managed: +. In the next step *Accounts and roles*, specify the infrastructure AWS account, into which the {product-title} cluster is deployed and where the resources are consumed and managed: + [caption="AWS infrastructure account"] image::rosa-ui-account-21.png[] + -* Click the *How to associate a new AWS account*, if you don not see the account into which you want to deploy the {product-title} cluster for detailed information on how to create or link account roles for this association. +* Click the *How to associate a new AWS account*, if you don't see the account into which you want to deploy the {product-title} cluster for detailed information on how to create or link account roles for this association. * The `rosa` CLI is used for this. * If you are using multiple AWS accounts and have their profiles configured for the AWS CLI, you can use the `--profile` selector to specify the AWS profile when working with the `rosa` CLI commands. diff --git a/modules/sharing-private-offer.adoc b/modules/sharing-private-offer.adoc index 987e2e9c6d1a..588902c2107c 100644 --- a/modules/sharing-private-offer.adoc +++ b/modules/sharing-private-offer.adoc @@ -4,7 +4,7 @@ :_mod-docs-content-type: PROCEDURE [id="sharing-private-offer_{context}"] -= Sharing a private offer += Share a private offer [role="_abstract"] You can share a private offer with other team members that are within your Red{nbsp}Hat organization account. diff --git a/modules/subscription-enablement.adoc b/modules/subscription-enablement.adoc index d75fe18177d5..7244982ece10 100644 --- a/modules/subscription-enablement.adoc +++ b/modules/subscription-enablement.adoc @@ -35,7 +35,7 @@ image::rosa-prereq-enable-3.png[] + image::rosa-service-quota-4.png[] + -** Click the *Increase service quotas* button or use the *Learn more* link to get more information about the about how to manage service quotas. In the case of insufficient quotas, note that quotas are region-specific. You can use the region switcher in the upper right corner of the web console to re-run the quota check for any region you are interested in and then submit service quota increase requests as needed. +** Click the *Increase service quotas* button or use the *Learn more* link to get more information about how to manage service quotas. In the case of insufficient quotas, note that quotas are region-specific. You can use the region switcher in the upper right corner of the web console to re-run the quota check for any region you are interested in and then submit service quota increase requests as needed. . If all the prerequisites are met, the page will look like this: +