Prerequisites
Before you use the CloudFormation templates, make sure that the listed permissions and resources are in place.
Version support
The current service version is IBM® Data Gate on Cloud Version 1.0.0.
The current service version is compatible with:
- Red Hat® OpenShift® 4.12.12
- Db2® (5737-L73)
Hardware requirements
The following requirements exist for a single instance of the product, that is, the Data Gate on Cloud server pod. More resources are needed for the entire cluster. For information on the cluster requirements, see Table 1.
- Supported architectures
- Determined by Amazon Web Services.
- Min. number of virtual CPUs required for installation
- 2
- Min. amount of memory (in GB of RAM) required for the service to run
- 13
- Min. amount of storage (in GB) required by the service
- 50
- Supported storage types
- Data Gate on Cloud runs on Amazon Elastic Block Storage (EBS).
Software dependencies
- Supported Red Hat OpenShift platforms
- The only supported OpenShift platform is Red Hat OpenShift on AWS.
- External dependencies
-
- IBM
z/OS® Version 2.2 (5650-ZOS) or higher.
For the z/OS Communications Server component of z/OS, install the following program temporary fixes (PTFs):
- One of the following database management systems:
- IBM Db2 13 for z/OS
- IBM Db2 12 for z/OS (5650-DB2® or 5770-AF3).
For the required Function Level and the list of required PTFs, see Installing Db2 for z/OS maintenance to enable Data Gate on Cloud.
- Distributed data facility (DDF) with a secure port, configured for network encryption through AT-TLS. See Configuring network access between Data Gate on Cloud and IBM Z for configuration information.
- IBM
z/OS® Version 2.2 (5650-ZOS) or higher.
- Service dependencies
- To run Data Gate on Cloud, you must provision Db2 Warehouse on Cloud on AWS as an additional service.Note: See Provisioning a Db2 Warehouse on Cloud instance for more information.
Multitenancy support
Multiple instances of the Data Gate on Cloud service can be installed within a single Red Hat OpenShift cluster.
Required skill level
To deploy Data Gate on Cloud successfully, you need to be familiar with the Red Hat OpenShift command-line interface, and, to a lesser degree, with AWS services.
AWS requirements
See Table 1.
| Resource | Number |
|---|---|
| VPCs | 1 |
| Availability zones | 3 |
| Elastic IP addresses | 3 |
| Network Load Balancers | 2 |
| Classic Load Balancers | 1 |
| Internet gateways | 1 |
| NAT gateways | 3 |
| Security groups | 1 |
| Key pairs | 1 |
| t.2 large EC2 instances (boot node) | 1 |
| m5.2x large EC2 instances (master nodes) | 3 |
| m5.2x large EC2 instances (worker nodes) | 3 |
| r5.xlarge EC2 instances (infrastructure nodes) | 3 |
Key pair
Your AWS account needs to have one Amazon EC2 key pair in the region where you deploy the templates. Make a note of the key pair name. You’ll be prompted for this information during the deployment. To create a key pair, follow the instructions in Amazon EC2 key pairs and Linux® instances.
For testing or a proof-of-concept, create a new key pair. Do not reuse a key pair that’s already being used by a production instance.
AWS regions
The CloudFormation templates make the product available in 3 availability zones within a single region, but these must be regions in which Db2 Warehouse on Cloud can be deployed as well. Currently, only the following regions are supported:
- Nothern Virginia (us-east-1)
- Frankfurt (eu-central-1)
For a list of all regions, see AWS CloudFormation endpoints and quotas.
ROSA subscription
A deployment of Data Gate on Cloud requires that you install and run a Red Hat OpenShift cluster. The underlying product that provides this cluster is Red Hat OpenShift on AWS (ROSA). ROSA is available as an AWS service. To install and run the service, you need to obtain a service token. To obtain the token:
IAM permissions
To use the template, you must log in to the AWS Management Console. The template requires sufficient Identity and Access Management (IAM) permissions for the resources it creates and the actions that it triggers. The AdministratorAccess managed policy within IAM provides sufficient permissions, although your organization may choose to use a more restrictive custom policy.
However, mind that AdministratorAccess is required for the creation of the ROSA cluster.