Chapter 3. Cloud Access Gold Images

Cloud Access Gold Images are cloud-ready Red Hat virtual machine (VM) images available in select Red Hat CCSP environments for Cloud Access customers as an alternative to using their own custom images for Bring Your Own Subscription (BYOS) use cases in the cloud.

3.1. Gold Image basics

Cloud Access Gold Images are built and maintained by a trusted source and are made available to Cloud Access customers who have enabled eligible Red Hat product subscriptions for use in a participating public cloud.

Customers use Gold Images to deploy Red Hat instances in the cloud without having to import their own images, using the cloud provider’s standard tools and interfaces.

Benefits of using Gold Images include:

  • No cost
  • No need to build, maintain, or import images
  • Cloud-ready and prepopulated images in cloud regions
  • Easily deployed Red Hat instances using standard tools and interfaces

3.1.1. Customer eligibility

Gold Images are available as a no-cost benefit to all Red Hat customers who have Cloud Access-eligible product subscriptions. Gold Images are not publicly available. You need to enable a matching Red Hat product subscription(s) for use in one of the participating public cloud providers as described in Chapter 2 to get access to the Gold Images.

3.1.2. Availability

Gold Images are currently available only in Amazon Web Services and Microsoft Azure.

3.1.3. Image types

Gold Images are primarily built for Red Hat Enterprise Linux (RHEL) BYOS use cases in AWS and Azure, but there are additional Gold Images built for Red Hat Middleware, Red Hat Storage, and RHEL for SAP use cases in AWS only.

Gold Image types and availability will expand over time to meet customer needs.

3.1.4. Updates and patches

Options for delivering updates and patches to cloud instances deployed from Gold Images vary by image type and cloud provider.

AWS Gold Images

  • AWS Gold Images are preconfigured to use the Red Hat Update Infrastructure (RHUI) running in EC2.
  • You can continue to use RHUI as the main update source for the cloud instances deployed from Gold Images without actually attaching Red Hat product subscriptions to those instances.
  • Optionally, you can disable RHUI and manage your cloud instances with Red Hat Satellite or Red Hat Subscription Manager (RHSM).
Note

When choosing the RHUI option, be aware of the number of active Red Hat product subscriptions in your account and be careful to not over-deploy Red Hat cloud instances in AWS.

Azure Gold Images

  • Azure Gold Images are not configured to use the RHUI running in Azure.
  • You need to manage your Red Hat cloud instances deployed from Gold Images in Azure with Red Hat Satellite or RHSM.

3.2. Using Gold Images on Azure

After enabling an eligible Red Hat product subscription for Cloud Access on Azure, all available Cloud Access Gold Images are shared with the Azure Subscription ID(s) that you enabled for Cloud Access.

Gold Images can be used to provision BYOS RHEL VMs in Azure for BYOS using the standard interfaces: Azure Portal, Azure CLI, or PowerShell Cmdlet. Azure Gold Images are:

  • Built, maintained, and published by Microsoft
  • Available in Azure commercial and Government regions but not in China
  • RHEL images only
  • Not eligible for Azure Hybrid Benefit

3.2.1. Naming and identifying Gold Images in Azure

There are multiple ways to search for and launch Red Hat Enterprise Linux Gold Images in Azure. This includes the Azure Portal, Azure CLI, and PowerShell Cmdlet. The naming convention for the Red Hat Gold Images in Azure is RedHat:[Offering Name]:[Red Hat Product]-[OS Disk Type]-[Azure VM Generation]:[Red Hat Version].[Red Hat Release].[Image Creation Date].

An example Gold Image Uniform Resource Name (URN) is RedHat:rhel-byos:rhel-lvm8-gen2:8.0.20200715.

3.2.2. Locating Gold Images in the Azure Portal

  1. Log in to the Azure Portal using an Azure subscription that has been enabled for Cloud Access.
  2. Go to Create a Resource > See All.
  3. You can see available private offers at the top of the page. private offers
  4. Click View private offers. A Red Hat Enterprise Linux “Bring your own license” offering is available in the list of private offers.

    private offers list

3.2.3. Locating Gold Images in the Azure CLI

  1. Make sure you are using an Azure subscription that was enabled for Cloud Access.

    az account show
  2. Display the list of available RHEL Gold Images.

    az vm image list --publisher RedHat --offer rhel-byos --all
  3. Find the Gold Image version you want to use and copy the URN. You need this URN to provision a VM.

3.2.4. Locating Gold Images in the Azure PowerShell Cmdlet

This example command displays all of the RHEL Gold Images in the US East region that were shared with the Azure account provided during enrollment in Cloud Access.

Get-AzVMImageSku -Location "East US" -PublisherName RedHat -Offer rhel-byos

3.2.5. Using Gold Images in Azure

Using the Azure Portal

  1. View the private offers as described in Steps 3 and 4 of Locating Gold Images in the Azure Portal
  2. Click the Create drop-down menu to select the RHEL Gold Image version you want to use. The remaining provisioning steps are the same as any other RHEL Marketplace image.

Using the Azure CLI

  1. Use the image URN from Step 3 of Locating Gold Images in the Azure CLI to accept Azure terms (only once per Azure Subscription, per image).

    az vm image terms accept --urn RedHat:rhel-byos:rhel-lvm8-gen2:8.0.20200715
  2. Provision a VM using the az vm create command.

    az vm create -n my-rhel-byos-vm -g my-rhel-byos-group --image RedHat:rhel-byos:rhel-lvm8-gen2:8.0.20200715

3.3. Using Gold Images on AWS

After enabling an eligible Red Hat product subscription for Cloud Access on AWS, all available Cloud Access Gold Images are shared with the AWS account(s) that you enabled for Cloud Access.

Gold Images can be used to provision VMs in AWS using the standard interfaces: EC2 Console, AWS CLI, and AWS PowerShell Cmdlet.

AWS Gold Images are:

  • Built, maintained, and published by Red Hat
  • Available in AWS commercial regions but not in China or GovCloud
  • Preconfigured to use the Red Hat Update Infrastructure (RHUI) running in EC2
  • RHEL, RHEL for SAP, Red Hat Middleware, and Red Hat Storage images

3.3.1. Naming and identifying Gold Images in AWS

There are multiple ways to search for and launch Red Hat Enterprise Linux Amazon Machine Images (AMIs) in AWS. This includes the EC2 Management Console, AWS CLI, and PowerShell Cmdlet. The naming convention for the Red Hat AMIs in AWS is listed below.

  • Initial GA AMI release: [Red Hat Product]-[Version]-[Virtualization Type]_[Red Hat Release Type]-[Release Date]-[Minor Version Release AMI Iteration]-[Subscription Model]-[EBS Volume Type]
  • After the initial GA AMI release: [Red Hat Product]-[Version]-[Virtualization Type]-[Release Date]-[Minor Version Release AMI Iteration]-[Subscription Model]-[EBS Volume Type]
Note

The Red Hat Gold Images will have the designation of Access in the AMI Name representing the subscription model.

Red Hat Gold Images are published under the Owner ID 309956199498. You can ensure that you are using official Red Hat Gold Images by looking for this Owner ID when you choose an image.

3.3.2. Locating Gold Images in the AWS EC2 Console

When working in the EC2 Management Console, there is a menu item for AMIs under the IMAGES section within the left-side navigation pane. In this view, using the designation of Private images displays the Gold Images that have been shared with the AWS account provided during enrollment.

Note

When in this section of the EC2 Management Console, it is possible to add a filter of Owner : 309956199498, which limits the displayed AMIs to those that were shared with the AWS account after enrolling in Cloud Access.

It is possible to further filter the list of displayed AMIs by adding an additional filter representing different aspects of the AMI Name that Red Hat uses, such as AMI Name : RHEL, AMI Name :.

An example AMI Name is RHEL-8.3.0_HVM-20201031-x86_64-0-Access2-GP2.

If you use the Launch Instance button from the EC2 Dashboard section of the EC2 Management Console and you select My AMIs, the filter Shared with me filters the listed AMIs to show the Gold Images that have been shared with the AWS account provided during enrollment.

3.3.3. Locating Gold Images in the AWS CLI

This example command displays all of the RHEL 8.3 AMIs in the US-East-1 region that were shared with the AWS account provided during enrollment in Cloud Access using the AWS CLI. The AWS CLI Command Reference provides additional documentation regarding available options, commands, subcommands, and parameters.

$ aws ec2 describe-images --owners 309956199498 \
> --filters "Name=is-public,Values=false" \>
"Name=name,Values=RHEL*8.3*GA*Access*" \
> --region us-east-1

3.3.4. Locating Gold Images in the AWS PowerShell Cmdlet

This example command displays all of the RHEL 8.3 AMIs in the US-East-1 region that were shared with the AWS account provided during enrollment in Cloud Access using the AWS Tools for Cmdlet. The AWS Tools for Cmdlet Reference provides additional documentation on the PowerShell cmdlets.

PS > Get-EC2Image -Region us-east-1 `
>> -Owner 309956199498 -Filter `
>> @{ Name="name" ; Values="RHEL*8.3*GA*Access*" }