We are pleased to announce the provisioning of Red Hat OpenShift Dedicated clusters to Shared Virtual Private Cloud (VPC) on Google Cloud is now generally available. This article describes the benefits of adopting the Shared VPC deployment pattern and also walks you through setting up an OpenShift Dedicated cluster in a Shared VPC on Google Cloud.
Shared VPC (formerly known as Cross-Project Networking or xPN) allows organizations to connect resources from multiple projects to a common VPC network so that they can communicate securely and efficiently using internal IP addresses from that network. Shared VPC simplifies network management, allows consistent network policies and provides a centralized view of network resources.
Shared VPC introduces two concepts: A host project and a service project.
- Host project: The Google Cloud Platform project that hosts the shared VPC and other network resources.
- Service project: The Google Cloud Platform project that consumes the shared VPC network.
The Google Cloud Platform organization admin must first enable a Google Cloud Platform project as a host project and then attach one or more service projects to it. The participating host and service projects cannot belong to different organizations in the Google Cloud resource hierarchy. The OpenShift Dedicated cluster is deployed in a service project using Shared VPC resources from the host project.
Benefits and use cases of Shared VPC
Scaling and VPC peering:
- As per the default Google Cloud quota, users can add up to 25 VPC peering connections per VPC. Shared VPC lets Google Cloud Platform projects communicate over shared VPC networks and this default Google Cloud VPC peering quota limitation can be avoided.
- Users can create up to 100 host projects in a single Google Cloud Platform organization and assign up to 1000 service projects per host project.
Simplified network management:
- The Google Cloud Platform organization admin can delegate network resources to the individual service project admins while maintaining centralized and fine-grained control over those shared network resources.
Network segmentation:
- Shared VPC enables users to implement network segmentation for different environments (e.g., production and staging) with isolated access, promoting effective application lifecycle management.
- A dedicated service project can be created per department, team, or development/deployment environment.
Deploying OpenShift Dedicated into a shared VPC on Google Cloud
You can purchase OpenShift Dedicated through Red Hat Sales, Google Cloud Marketplace, Red Hat Marketplace, or authorized Red Hat partners. You can then use Red Hat OpenShift Cluster Manager to deploy OpenShift Dedicated into a Shared VPC on Google Cloud.
Complete the prerequisites for installing OpenShift Dedicated in Google Cloud Platform. Also, make sure the organization admin has enabled a Google Cloud Platform project as a host project in the Google Cloud and attached the Google Cloud Platform project where the OpenShift Dedicated must be installed as the service project to it. Refer to Google Cloud documentation on Provisioning Shared VPC.
Procedure:
- Log in to OpenShift Cluster Manager Hybrid Cloud Console and start the OpenShift Dedicated cluster creation wizard.
- Under the Billing model, configure the subscription type and infrastructure type.
- Select Run on the Google Cloud Platform.
- Review and complete the listed cluster provisioning prerequisites. Select the checkbox to acknowledge that you have read and meet all the prerequisites. Next, provide your Google Cloud Platform service account private key in JSON format.
- On the Cluster details page, provide a name for your cluster, select the version, set the Google Cloud Platform region, and specify the other cluster details. To install a cluster into a shared VPC, you must use OpenShift Dedicated version 4.13.15 or above.
- On the Default machine pool page, select a compute node instance type and count for your default machine pool.
- On the Network configuration page, specify the network access configuration for your cluster. By default, a new VPC will be created for your cluster. For installing OpenShift Dedicated into a Shared VPC, first, opt to Install to an existing VPC and then, on the next page, select Install into Google Cloud Platform shared VPC.
![VPC setting in the OpenShift Dedicated cluster creation wizard](/rhdc/managed-files/styles/wysiwyg_full_width/private/openshift-dedicated-google-cloud-img1.png.webp?itok=OKG-w25f)
![Shared VPC settings in the OpenShift Dedicated cluster creation wizard](/rhdc/managed-files/styles/wysiwyg_full_width/private/openshift-dedicated-google-cloud-img2.png.webp?itok=_8PJOWNX)
- On the VPC settings page, specify your Host Project ID and the shared VPC name and subnets. OpenShift Dedicated will be installed in this shared VPC network.
- Continue with the rest of the configuration in the OpenShift Dedicated cluster creation wizard. Review the summary of your selections and click Create cluster to start the cluster installation.
- At this point, the cluster enters the "Installation waiting" stage. The OpenShift Dedicated user must contact the owner of the host project to grant additional roles.
![OpenShift Dedicated cluster in "Installation Waiting" state](/rhdc/managed-files/styles/wysiwyg_full_width/private/openshift-dedicated-google-cloud-img3.png.webp?itok=AkcLIYRU)
- The owner of the host project must assign the following roles in Google Cloud to the service account dynamically generated by the OpenShift Dedicated wizard: Computer Network Administrator, Compute Security Administrator and DNS Administrator.
The owner of the host project has 30 days to grant the listed permissions before the cluster creation fails.
![Grant additional roles to the OpenShift Dedicated service account in Google Cloud IAM settings](/rhdc/managed-files/styles/wysiwyg_full_width/private/openshift-dedicated-google-cloud-img4.png.webp?itok=vaPJEkSm)
- Once the required roles are granted to the host project, the OpenShift Dedicated wizard resumes the installation. Cluster creation can take about 30 to 60 minutes to complete.
![OpenShift Dedicated cluster installation resumed](/rhdc/managed-files/styles/wysiwyg_full_width/private/openshift-dedicated-google-cloud-img5.png.webp?itok=GekH9ssc)
You can monitor the progress of the installation on the Overview page for your cluster. The cluster is ready when the Status in the Details section of the page is listed as Ready.
![OpenShift Dedicated cluster in Ready state](/rhdc/managed-files/styles/wysiwyg_full_width/private/openshift-dedicated-google-cloud-img6.png.webp?itok=94xEN-ci)
Ready to harness the power of Google Cloud's Shared VPC and OpenShift Dedicated?
Shared VPC is an effective way to extend the architectural simplicity of a single VPC network across multiple working groups. Take advantage of the flexible consumption model and easy procurement of OpenShift Dedicated from the Google Cloud Marketplace. You can also retire a portion of your Google Cloud committed spend when purchasing OpenShift Dedicated.
Red Hat OpenShift Dedicated is a fully managed application platform that helps you more quickly build, deploy and scale applications, rather than having to deal with the underlying infrastructure. Get started with OpenShift Dedicated on Google Cloud today.
Additional resources on this topic
- Shared VPC in Google Cloud
- Steps to provisioning Shared VPC in Google Cloud documentation
- Steps to Create a cluster on Google Cloud Platform in OpenShift Dedicated documentation
- Cloud deployment options in OpenShift Dedicated documentation
- OpenShift Dedicated on Google Cloud Marketplace listing
About the author
Shreyans Mulkutkar is a Senior Product Manager focused on Red Hat OpenShift Cloud Services. He is interested in cloud computing, distributed systems and the cloud-native ecosystem. Shreyans has a decade of experience in both product management and engineering disciplines. He is passionate about building innovative hybrid cloud enterprise software products and making complex technical offerings easy to understand for customers.
Browse by channel
Automation
The latest on IT automation for tech, teams, and environments
Artificial intelligence
Updates on the platforms that free customers to run AI workloads anywhere
Open hybrid cloud
Explore how we build a more flexible future with hybrid cloud
Security
The latest on how we reduce risks across environments and technologies
Edge computing
Updates on the platforms that simplify operations at the edge
Infrastructure
The latest on the world’s leading enterprise Linux platform
Applications
Inside our solutions to the toughest application challenges
Original shows
Entertaining stories from the makers and leaders in enterprise tech
Products
- Red Hat Enterprise Linux
- Red Hat OpenShift
- Red Hat Ansible Automation Platform
- Cloud services
- See all products
Tools
- Training and certification
- My account
- Customer support
- Developer resources
- Find a partner
- Red Hat Ecosystem Catalog
- Red Hat value calculator
- Documentation
Try, buy, & sell
Communicate
About Red Hat
We’re the world’s leading provider of enterprise open source solutions—including Linux, cloud, container, and Kubernetes. We deliver hardened solutions that make it easier for enterprises to work across platforms and environments, from the core datacenter to the network edge.
Select a language
Red Hat legal and privacy links
- About Red Hat
- Jobs
- Events
- Locations
- Contact Red Hat
- Red Hat Blog
- Diversity, equity, and inclusion
- Cool Stuff Store
- Red Hat Summit