We are pleased to announce the provisioning of Red Hat OpenShift Dedicated clusters to Shared Virtual Private Cloud (VPC) on Google Cloud is now generally available. This article describes the benefits of adopting the Shared VPC deployment pattern and also walks you through setting up an OpenShift Dedicated cluster in a Shared VPC on Google Cloud.
Shared VPC (formerly known as Cross-Project Networking or xPN) allows organizations to connect resources from multiple projects to a common VPC network so that they can communicate securely and efficiently using internal IP addresses from that network. Shared VPC simplifies network management, allows consistent network policies and provides a centralized view of network resources.
Shared VPC introduces two concepts: A host project and a service project.
- Host project: The Google Cloud Platform project that hosts the shared VPC and other network resources.
- Service project: The Google Cloud Platform project that consumes the shared VPC network.
The Google Cloud Platform organization admin must first enable a Google Cloud Platform project as a host project and then attach one or more service projects to it. The participating host and service projects cannot belong to different organizations in the Google Cloud resource hierarchy. The OpenShift Dedicated cluster is deployed in a service project using Shared VPC resources from the host project.
Benefits and use cases of Shared VPC
Scaling and VPC peering:
- As per the default Google Cloud quota, users can add up to 25 VPC peering connections per VPC. Shared VPC lets Google Cloud Platform projects communicate over shared VPC networks and this default Google Cloud VPC peering quota limitation can be avoided.
- Users can create up to 100 host projects in a single Google Cloud Platform organization and assign up to 1000 service projects per host project.
Simplified network management:
- The Google Cloud Platform organization admin can delegate network resources to the individual service project admins while maintaining centralized and fine-grained control over those shared network resources.
Network segmentation:
- Shared VPC enables users to implement network segmentation for different environments (e.g., production and staging) with isolated access, promoting effective application lifecycle management.
- A dedicated service project can be created per department, team, or development/deployment environment.
Deploying OpenShift Dedicated into a shared VPC on Google Cloud
You can purchase OpenShift Dedicated through Red Hat Sales, Google Cloud Marketplace, Red Hat Marketplace, or authorized Red Hat partners. You can then use Red Hat OpenShift Cluster Manager to deploy OpenShift Dedicated into a Shared VPC on Google Cloud.
Complete the prerequisites for installing OpenShift Dedicated in Google Cloud Platform. Also, make sure the organization admin has enabled a Google Cloud Platform project as a host project in the Google Cloud and attached the Google Cloud Platform project where the OpenShift Dedicated must be installed as the service project to it. Refer to Google Cloud documentation on Provisioning Shared VPC.
Procedure:
- Log in to OpenShift Cluster Manager Hybrid Cloud Console and start the OpenShift Dedicated cluster creation wizard.
- Under the Billing model, configure the subscription type and infrastructure type.
- Select Run on the Google Cloud Platform.
- Review and complete the listed cluster provisioning prerequisites. Select the checkbox to acknowledge that you have read and meet all the prerequisites. Next, provide your Google Cloud Platform service account private key in JSON format.
- On the Cluster details page, provide a name for your cluster, select the version, set the Google Cloud Platform region, and specify the other cluster details. To install a cluster into a shared VPC, you must use OpenShift Dedicated version 4.13.15 or above.
- On the Default machine pool page, select a compute node instance type and count for your default machine pool.
- On the Network configuration page, specify the network access configuration for your cluster. By default, a new VPC will be created for your cluster. For installing OpenShift Dedicated into a Shared VPC, first, opt to Install to an existing VPC and then, on the next page, select Install into Google Cloud Platform shared VPC.
![VPC setting in the OpenShift Dedicated cluster creation wizard](/rhdc/managed-files/styles/wysiwyg_full_width/private/openshift-dedicated-google-cloud-img1.png.webp?itok=OKG-w25f)
![Shared VPC settings in the OpenShift Dedicated cluster creation wizard](/rhdc/managed-files/styles/wysiwyg_full_width/private/openshift-dedicated-google-cloud-img2.png.webp?itok=_8PJOWNX)
- On the VPC settings page, specify your Host Project ID and the shared VPC name and subnets. OpenShift Dedicated will be installed in this shared VPC network.
- Continue with the rest of the configuration in the OpenShift Dedicated cluster creation wizard. Review the summary of your selections and click Create cluster to start the cluster installation.
- At this point, the cluster enters the "Installation waiting" stage. The OpenShift Dedicated user must contact the owner of the host project to grant additional roles.
![OpenShift Dedicated cluster in "Installation Waiting" state](/rhdc/managed-files/styles/wysiwyg_full_width/private/openshift-dedicated-google-cloud-img3.png.webp?itok=AkcLIYRU)
- The owner of the host project must assign the following roles in Google Cloud to the service account dynamically generated by the OpenShift Dedicated wizard: Computer Network Administrator, Compute Security Administrator and DNS Administrator.
The owner of the host project has 30 days to grant the listed permissions before the cluster creation fails.
![Grant additional roles to the OpenShift Dedicated service account in Google Cloud IAM settings](/rhdc/managed-files/styles/wysiwyg_full_width/private/openshift-dedicated-google-cloud-img4.png.webp?itok=vaPJEkSm)
- Once the required roles are granted to the host project, the OpenShift Dedicated wizard resumes the installation. Cluster creation can take about 30 to 60 minutes to complete.
![OpenShift Dedicated cluster installation resumed](/rhdc/managed-files/styles/wysiwyg_full_width/private/openshift-dedicated-google-cloud-img5.png.webp?itok=GekH9ssc)
You can monitor the progress of the installation on the Overview page for your cluster. The cluster is ready when the Status in the Details section of the page is listed as Ready.
![OpenShift Dedicated cluster in Ready state](/rhdc/managed-files/styles/wysiwyg_full_width/private/openshift-dedicated-google-cloud-img6.png.webp?itok=94xEN-ci)
Ready to harness the power of Google Cloud's Shared VPC and OpenShift Dedicated?
Shared VPC is an effective way to extend the architectural simplicity of a single VPC network across multiple working groups. Take advantage of the flexible consumption model and easy procurement of OpenShift Dedicated from the Google Cloud Marketplace. You can also retire a portion of your Google Cloud committed spend when purchasing OpenShift Dedicated.
Red Hat OpenShift Dedicated is a fully managed application platform that helps you more quickly build, deploy and scale applications, rather than having to deal with the underlying infrastructure. Get started with OpenShift Dedicated on Google Cloud today.
Additional resources on this topic
- Shared VPC in Google Cloud
- Steps to provisioning Shared VPC in Google Cloud documentation
- Steps to Create a cluster on Google Cloud Platform in OpenShift Dedicated documentation
- Cloud deployment options in OpenShift Dedicated documentation
- OpenShift Dedicated on Google Cloud Marketplace listing
Sobre el autor
Shreyans Mulkutkar is a Senior Product Manager focused on Red Hat OpenShift Cloud Services. He is interested in cloud computing, distributed systems and the cloud-native ecosystem. Shreyans has a decade of experience in both product management and engineering disciplines. He is passionate about building innovative hybrid cloud enterprise software products and making complex technical offerings easy to understand for customers.
Navegar por canal
Automatización
Las últimas novedades en la automatización de la TI para los equipos, la tecnología y los entornos
Inteligencia artificial
Descubra las actualizaciones en las plataformas que permiten a los clientes ejecutar cargas de trabajo de inteligecia artificial en cualquier lugar
Nube híbrida abierta
Vea como construimos un futuro flexible con la nube híbrida
Seguridad
Vea las últimas novedades sobre cómo reducimos los riesgos en entornos y tecnologías
Edge computing
Conozca las actualizaciones en las plataformas que simplifican las operaciones en el edge
Infraestructura
Vea las últimas novedades sobre la plataforma Linux empresarial líder en el mundo
Aplicaciones
Conozca nuestras soluciones para abordar los desafíos más complejos de las aplicaciones
Programas originales
Vea historias divertidas de creadores y líderes en tecnología empresarial
Productos
- Red Hat Enterprise Linux
- Red Hat OpenShift
- Red Hat Ansible Automation Platform
- Servicios de nube
- Ver todos los productos
Herramientas
- Training y Certificación
- Mi cuenta
- Soporte al cliente
- Recursos para desarrolladores
- Busque un partner
- Red Hat Ecosystem Catalog
- Calculador de valor Red Hat
- Documentación
Realice pruebas, compras y ventas
Comunicarse
- Comuníquese con la oficina de ventas
- Comuníquese con el servicio al cliente
- Comuníquese con Red Hat Training
- Redes sociales
Acerca de Red Hat
Somos el proveedor líder a nivel mundial de soluciones empresariales de código abierto, incluyendo Linux, cloud, contenedores y Kubernetes. Ofrecemos soluciones reforzadas, las cuales permiten que las empresas trabajen en distintas plataformas y entornos con facilidad, desde el centro de datos principal hasta el extremo de la red.
Seleccionar idioma
Red Hat legal and privacy links
- Acerca de Red Hat
- Oportunidades de empleo
- Eventos
- Sedes
- Póngase en contacto con Red Hat
- Blog de Red Hat
- Diversidad, igualdad e inclusión
- Cool Stuff Store
- Red Hat Summit