GovCloud
Creating a ROSA cluster in AWS GovCloud
This guide outlines the procedure for creating a ROSA cluster in AWS GovCloud. There are some key differences between the ROSA offerings in AWS GovCloud and AWS Commercial. They’re outlined in detail in the AWS documentation here , but a few requirements in GovCloud that are worth highlighting:
- Only ROSA Classic is supported (not Hosted Control Plane)
- STS mode is required
- PrivateLink is required
- FIPS mode is required
Prerequisites
Create VPC and Subnets
In this guide, we’ll use Terraform to create a VPC to house our cluster, and we’ll opt for a Single-AZ configuration for simplicity. We’ll also create an EC2 jumphost to aid in accessing our cluster once it comes up. Before running it, you’ll need to ensure your AWS CLI is authenticated to a government region in AWS (us-gov-west-1 or us-gov-east-1).