OSDOCS-16264#adding AWS EUSC by brendan-daly-red-hat · Pull Request #110585 · openshift/openshift-docs

brendan-daly-red-hat · 2026-04-22T11:56:12Z

Versions:
4.22+

Issue:
https://redhat.atlassian.net/browse/OSDOCS-16264

Link to docs preview:

AWS EUSC region

QE review:

QE has approved this change.

Additional information:

ocpdocs-previewbot · 2026-04-22T12:16:04Z

🤖 Thu Apr 30 15:00:14 - Prow CI generated the docs preview:

https://110585--ocpdocs-pr.netlify.app/openshift-enterprise/latest/installing/installing_aws/installing-aws-account.html

bscott-rh

Nice work! I left two suggestions for combining into one section for simplicity.

bscott-rh · 2026-04-28T18:20:38Z

+:FeatureName: European Sovereign Cloud (EUSC) region
+include::snippets/technology-preview.adoc[leveloffset=+1]
+
+Installing an {product-title} cluster into the {aws-short} EUSC region helps maximize the sovereignty of your data and satisfy your organization's regulatory requirements. The {aws-short} EUSC is separate and independent from other {aws-short} regions. The infrastructure is located wholly within the European Union (EU). For more information, see "Establishing a European trust service provider for the {aws-short} European Sovereign Cloud".


I would move this to the previous section, between lines 58 and 59.

Applied this change.

bscott-rh · 2026-04-28T18:21:46Z

+The following list outlines the limitations that apply to installing an {product-title} cluster into the {aws-short} EUSC region:
+
+* Only one region, `eusc-de-east-1`, and two zones in that region are available.
+
+* The Amazon Machine Images (AMIs) for public {op-system-first} are not yet available in the EUSC region. As a workaround, until the AMI publication for {op-system} is extended to the EUSC region, you must edit your `install-config.yaml` file to specify a custom AMI in the `amiID` field.
+
+* The {aws-short} Security Token Service (STS) is not supported.
+
+* Support is not yet provided for installing a cluster into a shared Virtual Private Cloud (VPC).
+
+* Support is not yet provided for bringing your own encryption keys.


I'd move this into an [IMPORTANT] admonition in the previous section, perhaps after you list the Brandenburg region name.

Applied this change.

brendan-daly-red-hat · 2026-04-29T16:06:18Z

@tthvo, @patrickdillon, PTAL

bscott-rh · 2026-04-29T17:28:49Z

 * `us-west-1` (N. California)
 * `us-west-2` (Oregon)

+[id="installation-aws-eusc_region{context}"]


Suggested change

[id="installation-aws-eusc_region{context}"]

[id="installation-aws-eusc_region_{context}"]

Applied this change.

tthvo · 2026-04-29T21:39:47Z

 * xref:../../installing/installing_aws/ipi/installing-aws-default.adoc#installing-aws-default[Quickly install a cluster]
 * xref:../../installing/installing_aws/ipi/installing-aws-customizations.adoc#installing-aws-customizations[Install a cluster with cloud customizations on installer-provisioned infrastructure]
 * xref:../../installing/installing_aws/upi/installing-aws-user-infra.adoc#installing-aws-user-infra[Installing a cluster on user-provisioned infrastructure in AWS by using CloudFormation templates]
+* link:https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-instance-metadata-service.html[Establishing a European trust service provider for the {aws-short} European Sovereign Cloud ({aws-short} documentation)]


The link should be: https://aws.amazon.com/blogs/security/establishing-a-european-trust-service-provider-for-the-aws-european-sovereign-cloud/, right?

Removed this entry and added the correct link as a hyperlink in the module text.

tthvo · 2026-04-29T21:50:27Z

+:FeatureName: European Sovereign Cloud (EUSC) region
+include::snippets/technology-preview.adoc[leveloffset=+1]
+
+Installing an {product-title} cluster into the {aws-short} European Sovereign Cloud (EUSC) region helps maximize the sovereignty of your data and satisfy your organization's regulatory requirements. The {aws-short} EUSC is separate and independent from other {aws-short} regions. The infrastructure is located wholly within the European Union (EU). For more information, see "Establishing a European trust service provider for the {aws-short} European Sovereign Cloud".


The section "Establishing a European trust service provider for the {aws-short} European Sovereign Cloud" is supposed to be a hyperlink, right? It seems to be plain text to me (i.e. no link to aws annoucement)...

tthvo · 2026-04-29T22:01:47Z

+
+* The {aws-short} Security Token Service (STS) is not supported.
+
+* Support is not yet provided for installing a cluster into a shared Virtual Private Cloud (VPC).


Suggested change

* Support is not yet provided for installing a cluster into a shared Virtual Private Cloud (VPC).

* Installing a cluster into a shared Virtual Private Cloud (VPC) with a cross-account private hosted zone is not yet supported.

Installing into a shared or existing VPC is indeed supported. However, if the user chooses to utilize a private hosted zone from another account (see EP and openshift doc), this is not supported.

Sorry, if I was not clear before 😅

Applied this change.

tthvo · 2026-04-29T22:03:20Z

+
+* The Amazon Machine Images (AMIs) for public {op-system-first} are not yet available in the EUSC region. As a workaround, until the AMI publication for {op-system} is extended to the EUSC region, you must edit your `install-config.yaml` file to specify a custom AMI in the `amiID` field.
+
+* The {aws-short} Security Token Service (STS) is not supported.


Suggested change

* The {aws-short} Security Token Service (STS) is not supported.

* The {aws-short} Security Token Service (STS) is not yet supported.

For consistency with other below entries.

Applied this change.

tthvo · 2026-04-29T22:07:22Z

+
+* Support is not yet provided for installing a cluster into a shared Virtual Private Cloud (VPC).
+
+* Support is not yet provided for bringing your own encryption keys.


Suggested change

* Support is not yet provided for bringing your own encryption keys.

Technically, it is supported. I have tested this scenario myself, but waiting on storage team to confirm storage testing.

@tthvo as soon as I manage to get a cluster to start up I will test it and let you know, but it should work imo

@tthvo I did a quick test and it works

Sounds good, thanks @rhrmo!

Support is not yet provided for bringing your own encryption keys.

@brendan-daly-red-hat can we remove this line as it's confirmed to be supported?

Applied this change.

1

openshift-ci · 2026-04-30T15:01:18Z

@brendan-daly-red-hat: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

tthvo

/lgtm

brendan-daly-red-hat · 2026-05-05T10:09:17Z

/label merge-review-needed

ShaunaDiaz

/lgtm

ShaunaDiaz · 2026-05-05T13:54:53Z

+
+[IMPORTANT]
+====
+


Suggested change

ShaunaDiaz · 2026-05-05T13:55:29Z

+* Support is not yet provided for the {aws-short} Security Token Service (STS).
+
+* Support is not yet provided for installing a cluster into a shared Virtual Private Cloud (VPC) with a cross-account private hosted zone.
+


Suggested change

not a merge blocker, but i have no idea if dita will trip on extraneous line spaces in admonitions; something to consider

ShaunaDiaz · 2026-05-05T13:56:29Z

/cherrypick enterprise-4.22

openshift-cherrypick-robot · 2026-05-05T13:57:22Z

@ShaunaDiaz: new pull request created: #111231

Details

In response to this:

/cherrypick enterprise-4.22

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

openshift-ci Bot added the size/S Denotes a PR that changes 10-29 lines, ignoring generated files. label Apr 22, 2026

brendan-daly-red-hat changed the title ~~Osdocs 16264~~ OSDOCS-16264#adding EUSC TP Apr 22, 2026

ocpdocs-vale-bot reviewed Apr 22, 2026

View reviewed changes

Comment thread modules/installation-aws-eusc.adoc Outdated

ocpdocs-vale-bot reviewed Apr 22, 2026

View reviewed changes

Comment thread modules/installation-aws-about-eusc.adoc Outdated

ocpdocs-vale-bot reviewed Apr 22, 2026

View reviewed changes

Comment thread modules/installation-aws-about-eusc.adoc Outdated

brendan-daly-red-hat changed the title ~~OSDOCS-16264#adding EUSC TP~~ OSDOCS-16264#adding AWS EUSC Apr 23, 2026

brendan-daly-red-hat force-pushed the OSDOCS-16264 branch from dc64b48 to f55fb3e Compare April 23, 2026 07:39

brendan-daly-red-hat force-pushed the OSDOCS-16264 branch 10 times, most recently from 0f6c94e to 1d9b3c9 Compare April 28, 2026 15:30

bscott-rh reviewed Apr 28, 2026

View reviewed changes

brendan-daly-red-hat force-pushed the OSDOCS-16264 branch 2 times, most recently from 67e6aa5 to f7311ff Compare April 29, 2026 10:00

bscott-rh reviewed Apr 29, 2026

View reviewed changes

tthvo reviewed Apr 29, 2026

View reviewed changes

brendan-daly-red-hat force-pushed the OSDOCS-16264 branch 4 times, most recently from 46d196d to 2c6d2ca Compare April 30, 2026 14:42

OSDOCS-16264:adding EUSC feature

f3cd50f

1

brendan-daly-red-hat force-pushed the OSDOCS-16264 branch from 2c6d2ca to f3cd50f Compare April 30, 2026 14:54

tthvo reviewed Apr 30, 2026

View reviewed changes

openshift-ci Bot assigned tthvo Apr 30, 2026

openshift-ci Bot added the lgtm Indicates that a PR is ready to be merged. label Apr 30, 2026

brendan-daly-red-hat mentioned this pull request May 5, 2026

OSDOCS-16264_RN: adding AWS EUSC RN #111216

Open

1 task

openshift-ci Bot added the merge-review-needed Signifies that the merge review team needs to review this PR label May 5, 2026

ShaunaDiaz reviewed May 5, 2026

View reviewed changes

ShaunaDiaz added branch/enterprise-4.22 and removed merge-review-needed Signifies that the merge review team needs to review this PR labels May 5, 2026

ShaunaDiaz added this to the Planned for 4.22 GA milestone May 5, 2026

ShaunaDiaz merged commit eb93e53 into openshift:main May 5, 2026
2 checks passed

openshift-cherrypick-robot mentioned this pull request May 5, 2026

[enterprise-4.22] OSDOCS-16264#adding AWS EUSC #111231

Merged

openshift-ci Bot assigned ShaunaDiaz May 5, 2026

brendan-daly-red-hat mentioned this pull request May 5, 2026

OSDOCS-16264_ad:fixing admon spaces #111233

Open

	[id="installation-aws-eusc_region{context}"]
	[id="installation-aws-eusc_region_{context}"]


		* The {aws-short} Security Token Service (STS) is not supported.

		* Support is not yet provided for installing a cluster into a shared Virtual Private Cloud (VPC).

	* Support is not yet provided for installing a cluster into a shared Virtual Private Cloud (VPC).
	* Installing a cluster into a shared Virtual Private Cloud (VPC) with a cross-account private hosted zone is not yet supported.


		* The Amazon Machine Images (AMIs) for public {op-system-first} are not yet available in the EUSC region. As a workaround, until the AMI publication for {op-system} is extended to the EUSC region, you must edit your `install-config.yaml` file to specify a custom AMI in the `amiID` field.

		* The {aws-short} Security Token Service (STS) is not supported.


		* Support is not yet provided for installing a cluster into a shared Virtual Private Cloud (VPC).

		* Support is not yet provided for bringing your own encryption keys.

		* Support is not yet provided for the {aws-short} Security Token Service (STS).

		* Support is not yet provided for installing a cluster into a shared Virtual Private Cloud (VPC) with a cross-account private hosted zone.


		[IMPORTANT]
		====

Conversation

brendan-daly-red-hat commented Apr 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

ocpdocs-previewbot commented Apr 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

bscott-rh left a comment

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

brendan-daly-red-hat commented Apr 29, 2026

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

brendan-daly-red-hat Apr 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

openshift-ci Bot commented Apr 30, 2026

Uh oh!

tthvo left a comment

Choose a reason for hiding this comment

Uh oh!

brendan-daly-red-hat commented May 5, 2026

Uh oh!

ShaunaDiaz left a comment

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

ShaunaDiaz commented May 5, 2026

Uh oh!

openshift-cherrypick-robot commented May 5, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

brendan-daly-red-hat commented Apr 22, 2026 •

edited

Loading

ocpdocs-previewbot commented Apr 22, 2026 •

edited

Loading

brendan-daly-red-hat Apr 30, 2026 •

edited

Loading