第 3 章 Installing a Red Hat OpenShift Service on AWS cluster in AWS GovCloud

Procedure

1. Navigate to https://console.openshiftusgov.com/openshift/token.
2. Sign in with your Red Hat FedRAMP account credentials where you will see a screen with your token.
3. Copy your token for the next step.

4. In your terminal:

   1. Run rosa login and paste your copied token to log in to the service.

      $ rosa login --govcloud --token=<TOKEN>

      注意

      Depending on your AWS CLI configuration, you might need to add a government region to the end of the command string, such as --region us-gov-west-1.

   2. Run rosa whoami to confirm all information is correct ensuring that you are using the AWS Gov region and the Red Hat OpenShift Cluster Manager API is “https://api.openshiftusgov.com”..

      $ rosa whoami

      Example output

      AWS ARN:                                 arn:aws-us-gov:iam::00000000000:user/rosa-gov-user
      AWS Account ID:                       00000000000
      AWS Default Region:                 us-gov-east-1
      OCM API:                                   https://api.openshiftusgov.com
      OCM Account Email:                  rosa-gov-user@redhat.com
      OCM Account ID:                       3ZXXXXXXXXXXXXXXXXXXXXXXXXX
      OCM Account Name:                 Rosa Gov
      OCM Account Username:          rosa-gov-user
      OCM Organization External ID:  rosa-gov-user
      OCM Organization ID:                3ZXXXXXXXXXXXXXXXXXXXXXXXXX
      OCM Organization Name:          rosa-gov-user

5. You must create a VPC where Red Hat OpenShift Service on AWS will be deployed. For instructions on setting up a VPC, see Amazon VPC architecture for the AWS PrivateLink use case.