github/awesome-kubernetes
1
0
Fork 0
mirror of https://github.com/nubenetes/awesome-kubernetes.git synced 2026-07-16 03:41:17 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
bee2b2fdbb669b71893de33b6f5eaecfdb6058ff
awesome-kubernetes/v2-docs/ocp4.md

73 KiB
Raw Blame History

OCP 4

!!! info "Architectural Context" Detailed reference for OCP 4 in the context of The Container Stack.

Standard Reference

Application Modernization

Migration

Multi-Cluster

Cloud Infrastructure

Kubernetes Distributions

Enterprise Platforms

  • (2026) ==OKD== [EN CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] [ENTERPRISE-STABLE] — OKD is the open-source upstream community distribution of Red Hat OpenShift, fully integrating containerized virtualization, developer tools, and operators. Built on Fedora CoreOS, OKD provides cloud architects with a platform-as-a-service engine optimized for continuous deployment and complex multi-tenant operations.

Service Mesh

Istio Mesh

  • Istio.io [EN CONTENT] [ADVANCED LEVEL] [DE FACTO STANDARD] — The premier open-source service mesh providing advanced traffic management, end-to-end security, and granular observability. Uses Envoy proxies (via sidecars or Ambient mode) to secure and manage microservice fabrics.

Red Hat Integrations

Cloud Native

Kubernetes

Knative

Cloud Native Infrastructure

Observability

Distributed Tracing

Jaeger Platform
  • jaegertracing.io [DOCUMENTATION] [DE FACTO STANDARD] [ENTERPRISE-STABLE] — The official gateway for Jaeger, a CNCF-graduated distributed tracing platform. Essential for microservice architectures to monitor transactions, perform root-cause analysis, optimize performance bottlenecks, and visualize complex request propagation paths.

Service Mesh (1)

Istio Distributions

Source Code
  • github.com: Maistra Istio ⭐ 94 [ADVANCED LEVEL] [COMMUNITY-TOOL] — The official GitHub repository for Maistra's modified Istio control plane code. Optimized for multi-tenancy support, advanced security policies, and tight integration within OpenShift environments.

Observability (1)

Visualization
  • (2025) ==kiali.io== [DOCUMENTATION] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] [ENTERPRISE-STABLE] — The home portal for Kiali, the de facto standard visual console for Istio service mesh topologies. It aggregates Prometheus metrics, Jaeger traces, and Istio configurations to display active traffic flows, circuit breakers, and network health anomalies.

Cloud Native Storage

Ceph

Data Federation

  • (2024) Red Hat Ceph Storage [C++ CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — Ceph is an enterprise-grade, software-defined storage platform designed for petabyte-scale environments. It handles object, block, and file storage dynamically. This entry covers its integration with NooBaa Multi-Cloud Gateway for asynchronous replication, data deduplication, and multi-cloud encryption.

OpenShift

Container Storage

  • (2021) State of OpenShift Container Storage [N/A CONTENT] [COMMUNITY-TOOL] — A strategic overview of Red Hat OpenShift Container Storage (now OpenShift Data Foundation). Explores how SDS integrates with Kubernetes topologies to provide multi-cloud block, file, and object storage. Curator insight notes integration with NooBaa, while modern grounding confirms its maturation under Ceph and Rook management.

Data Architecture

Databases

PostgreSQL

  • (2025) learn.crunchydata.com 🌟🌟🌟 [COMMUNITY-TOOL] [GUIDE] — An interactive database training portal detailing progressive PostgreSQL configuration, clustering, and troubleshooting. Crucial for architects planning highly available, stateful cloud-native storage engines.

Enterprise Kubernetes

Air-Gapped Installation

Mirror Registries

Capacity Planning

Sizing and Licensing

  • (2021) redhat.com: OpenShift sizing and subscription guide for enterprise Kubernetes 🌟 [PDF / HTML CONTENT] [COMMUNITY-TOOL] [GUIDE] — An official sizing and capacity-planning matrix that outlines subscription calculation criteria (based on virtual CPU/vCPU cores and hyper-threading definitions). It provides cloud architects with sizing worksheets to accurately estimate platform costs across bare-metal, virtualized, and public cloud deployment options.

Cluster Management

Ansible Integration

  • (2021) redhat.com: ACM Ansible Integration Overview [YAML CONTENT] [ADVANCED LEVEL] [GUIDE] [COMMUNITY-TOOL] [GUIDE] — Examines integration paths between Red Hat Advanced Cluster Management (RHACM) and Ansible. Enables pre-deployment and post-deployment playbooks to synchronize physical load balancers and CMDB states.

Hardware Architectures

OpenShift ARM

  • (2021) openshift.com: OpenShift on ARM Developer Preview Now Available for AWS [GO CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — Explores the developer preview of OpenShift running natively on ARM64 processor architecture within AWS (Graviton instances). It analyzes the technical benefits of multi-architecture builds, reduced energy footprint, and significant cost-to-performance optimizations for compute-bound Kubernetes worker environments.

Hyperconverged Infrastructure

OpenShift Virtualization

  • (2021) cloud.redhat.com: OpenShift Virtualization on Amazon Web Services [GO CONTENT] [ADVANCED LEVEL] [GUIDE] [LEGACY] — Deep-dive into OpenShift Virtualization (KubeVirt) running on bare-metal and AWS metal instances. It outlines how system operators can execute legacy virtual machines (VMs) and modern containers side-by-side on the same Kubernetes control plane, integrating VM networks, persistent disks, and migration pathways.

Managed Services

ROSA

  • (2020) datacenterknowledge.com: Red Hat Brings Its Managed OpenShift Kubernetes Service to AWS [HTML CONTENT] [COMMUNITY-TOOL] — Analysis of the release of Red Hat OpenShift Service on AWS (ROSA), a fully-managed cloud service co-engineered and supported by AWS and Red Hat. It highlights how the platform eliminates the overhead of managing underlying control planes and bootstrap infrastructure, leveraging native cloud billing integrations.

ROSA Networking

ROSA Storage

Mixed OS Clusters

Windows Containers

OpenShift (1)

Marketplace

  • (2024) Red Hat Marketplace [COMMUNITY-TOOL] — Historical portal for discovering and deploying certified containerized software on OpenShift. Engineering Truth: IBM and Red Hat officially sunsetted the Red Hat Marketplace in early 2024, steering clients toward direct purchases, native cloud marketplaces, and the Red Hat Ecosystem Catalog for third-party operator integration.

SaaS

  • (2026) OpenShift Online [COMMUNITY-TOOL] — Technical overview of Red Hat's public cloud multi-tenant hosting service (historic SaaS offering). Note: Red Hat retired OpenShift Online in favor of managed cloud options like ROSA and ARO, highlighting the shift from generic shared-tenant platforms to highly isolated, dedicated enterprise cloud-native environments.

Sandbox

  • (2026) try.openshift.com 🌟 [COMMUNITY-TOOL] — Developer trial and evaluation platform offering sandbox, cloud, and local environments (e.g., Red Hat OpenShift Local/CodeReady Containers) to test OpenShift features. Provides step-by-step paths for platform engineers to practice installation, application deployment, and cluster management.

Security

  • (2020) OpenShift and Network Security Zones: Coexistence Approaches 🌟🌟🌟 [ADVANCED LEVEL] [COMMUNITY-TOOL] [GUIDE] — Evaluates integration methods between OpenShift's flat software-defined network (SDN) model and traditional enterprise multi-zone network architectures. Highlights architecture patterns for separating traffic (physical cluster separation vs. logical separation using NetworkPolicies, Egress IPs, and ingress routers) to satisfy strict security requirements.

Updates

  • (2026) OpenShift blog 🌟 [COMMUNITY-TOOL] — Technical blog sharing the latest design, deployment, and operation guidelines for Red Hat OpenShift and hybrid cloud infrastructure. Focuses on cluster administration, multi-cluster management via Advanced Cluster Management (ACM), GitOps workflows, and runtime optimizations for modern enterprise workloads.

OpenShift Installation

AWS Deployment

  • (2019) ==AWS Account Set Up 🌟== ⭐ 1546 [MARKDOWN CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — This repository guide outlines the specific IAM policies, resource quotas, Route53 configurations, and networking permissions required to install OpenShift on AWS using the native installer-provisioned infrastructure (IPI). It is a vital technical reference for cloud infrastructure engineers.

OpenShift Networking

AWS Integration

  • (2020) openshift.com: How to Offer Service Running on OpenShift on AWS to Other AWS VPCs, Privately 🌟 [GO CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] [GUIDE] — An advanced network architecture guide demonstrating how to expose OpenShift microservices privately across AWS VPC boundaries using AWS PrivateLink and NLB integration. It ensures strict enterprise isolation and zero-exposure over the public internet, satisfying rigorous financial and health-sector regulatory controls.

OpenShift Platform

CoreOS Integration

  • (2018) nextplatform.com: red hat flexes CoreOS muscle in openshift kubernetes platform [HTML CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — This deep-dive architectural analysis details Red Hat's strategic acquisition and integration of CoreOS technologies into OpenShift 4. It highlights the transformation of the underlying OS into Red Hat Enterprise Linux CoreOS (RHCOS) and the introduction of tectonic Kubernetes paradigms like self-hosting and declarative infrastructure.

Diagnostics and Troubleshooting

Getting Started

  • (2021) cloud.redhat.com: Getting Started in OpenShift 🌟 [MARKDOWN CONTENT] [COMMUNITY-TOOL] [GUIDE] — A foundational educational portal designed for engineers transitioning from vanilla Kubernetes to OpenShift. It covers critical concepts like Projects, Routes, Security Context Constraints (SCC), S2I (Source-to-Image) pipelines, and standard cluster authentication mechanisms to fast-track application deployment.

Infrastructure Operations

  • (2020) Enabling OpenShift 4 Clusters to Stop and Resume Cluster VMs [BASH / SHELL CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] [GUIDE] — An essential operations guide for optimizing development budgets by pausing and resuming underlying cloud VMs supporting OpenShift 4. It outlines strategies to avoid certificates expiring and cluster synchronization failures when machines are suspended, providing a robust methodology for cluster lifecycle operations.

Infrastructure Provisioning

  • (2018) ==Machine API== ⭐ 185 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — The Machine API Operator is a foundational component of OpenShift 4's declarative node lifecycle. Based on upstream Cluster API, it manages clusters of Machine objects as standard Kubernetes resources, enabling auto-scaling, self-healing nodes, and seamless multi-cloud provider instance integration directly from the cluster console.

Installation

  • (2019) blog.openshift.com: OpenShift 4 Install Experience [GO CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] [GUIDE] — A walkthrough detailing the automated installer-provisioned infrastructure (IPI) and user-provisioned infrastructure (UPI) paradigms introduced in OpenShift 4. It guides system architects through bootstrapping a cluster from bare-metal, private virtualization, or public clouds using automated Terraform routines.

OpenShift 4

  • (2019) blog.openshift.com: Introducing Red Hat OpenShift 4 [GO CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — Red Hat OpenShift 4 marks a revolutionary architectural paradigm shift for the enterprise platform, transitioning to CoreOS-centric immutable host management. It introduced the Operator Framework as its core mechanism for platform upgrades and life-cycle management, dramatically simplifying Day-2 operations.

Performance Tuning

  • (2019) blog.openshift.com: OpenShift Scale: Running 500 Pods Per Node 🌟 [GO CONTENT] [ADVANCED LEVEL] [CASE STUDY] [COMMUNITY-TOOL] — A rigorous performance testing case study outlining the configurations and OS-level optimizations required to run 500 active pods on a single OpenShift node. It discusses container runtime engine memory management, Cgroup configuration, networking namespace limitations, and CIDR block allocation patterns crucial for massive hyper-scale clusters.

Platform Migration

  • (2019) redhat.com: Planning your migration from Red Hat OpenShift 3 to 4 [MARKDOWN CONTENT] [ADVANCED LEVEL] [GUIDE] [LEGACY] — An architectural planning roadmap detailing migration strategies from the legacy OpenShift Container Platform 3.x (based on Docker and RHEL) to OpenShift 4.x (based on CRI-O, RHCOS, and Operator control loops). It highlights the Migration Toolkit for Containers (MTC) to minimize downtime.

Release Analysis

  • (2021) openshift.com: Red Hat OpenShift 4.7 Is Now Available [GO CONTENT] [ADVANCED LEVEL] [LEGACY] — Details the OpenShift 4.7 feature payload, including underlying Kubernetes 1.20 support, enhanced OpenShift Virtualization, Windows Containers on vSphere, and automated bare-metal installations. It highlights robust mechanisms for enterprise migration from legacy VM estates directly into container-orchestrated platforms.
  • (2021) cloud.redhat.com: Red Hat OpenShift 4.8 Is Now Generally Available [GO CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — Highlights OpenShift 4.8 upgrades, introducing sandboxed containers (Kata Containers), declarative multi-cluster management integration, and developer UI enhancements. The release establishes a highly secure execution layer for workloads requiring hypervisor-level isolation on top of Kubernetes-native interfaces.
  • (2021) cloud.redhat.com: Red Hat OpenShift 4.9 Is Now Generally Available [GO CONTENT] [ADVANCED LEVEL] [LEGACY] — Details OpenShift 4.9, which focuses heavily on single-node OpenShift profiles optimized for edge deployments. It covers the deprecation of legacy Kubernetes APIs, GitOps and serverless optimizations, and advanced tooling for ultra-low latency telecommunication and remote-edge topologies.
  • (2020) devclass.com: OpenShift 4.4 goes all out on mixed workloads, puts observability at devs’ fingertips 🌟 [GO CONTENT] [COMMUNITY-TOOL] — Evaluates OpenShift 4.4's advancements, particularly the native integration of advanced metrics dashboards, developer-centric observability tools, and support for mixed workloads (Linux and Windows containers). This milestone release consolidated operational telemetry within unified Prometheus/Grafana interfaces directly inside the developer console.

OpenShift Security

OpenShift Platform Plus

  • (2021) fiercetelecom.com: Red Hat bundles security, management into OpenShift Plus [GO CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — Analysis of the OpenShift Platform Plus bundle, incorporating Advanced Cluster Management (RHACM), Advanced Cluster Security (RHACS, formerly StackRox), and Quay container registry. It details how this software suite provides end-to-end security compliance, policy enforcement, and multi-cluster management across public and hybrid-cloud locations.

Sandboxed Containers

  • (2021) cloud.redhat.com: OpenShift Sandboxed Containers 101 🌟 [GO CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] [GUIDE] — Explores OpenShift Sandboxed Containers, leveraging Kata Containers to run pods within lightweight QEMU/KVM virtual machines. It details the underlying architecture that enables running untrusted code, multi-tenant execution pools, and highly-regulated workloads with hardware-isolated security parameters.

OpenShift Storage

Image Registry

  • (2020) blog.openshift.com: Configure the OpenShift Image Registry backed by OpenShift Container Storage [GO CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] [GUIDE] — This deep operational guide illustrates how to back the integrated OpenShift Image Registry with high-availability block and object storage managed by OpenShift Container Storage (OCS/ODF). It walks through PVC bindings, persistent volume provisioning, and optimal storage class selection to build a resilient, multi-tenant registry.

Operator SDK

Sandboxed Containers (1)

Red Hat OpenShift

Image Management

  • cloudowski.com: Openshift ImageStreams [COMMUNITY-TOOL] — A technical architectural review contrasting OpenShift ImageStreams with standard Kubernetes container registry integrations. It explains how ImageStreams abstract container images and automate rolling deployments on build mutations.

Secure Pipelines

Red Hat Portal

Administration

  • (2021) cloud.redhat.com: Changes coming for OpenShift.com and Cloud.Redhat.com [JAVASCRIPT CONTENT] [COMMUNITY-TOOL] — Documents the UI unification and consolidation of Red Hat Hybrid Cloud Console interfaces. It provides system administrators with paths to locate managed cluster configurations, subscription licensing details, telemetry analytics, and download tools from a unified, enterprise dashboard.

Infrastructure

Containers

Storage

  • (2020) Rootless podman and NFS [ADVANCED LEVEL] [COMMUNITY-TOOL] — Tackles operational challenges and configurations for executing rootless Podman containers with mounted NFS shares. Addresses UID/GID translation requirements, kernel namespaces, and directory permissions.

Kubernetes (1)

Local Development

Operators

  • (2020) Top Kubernetes Operators [COMMUNITY-TOOL] — Explains the Kubernetes Operator SDK capability model. Evaluates operator evolution across maturity phases, ranging from basic helm-driven installs to autonomous lifecycle tuning and auto-healing.

OpenShift (2)

App Delivery

  • (2019) Openshift 4 image builds [COMMUNITY-TOOL] — Analyzes container image build pipelines inside OpenShift 4, examining Source-to-Image (S2I), Docker-style builds, and custom builders. Explains how build tasks execute within isolated, secure pod constraints.

Community

  • (2024) ==GitHub: OKD4== ⭐ 2070 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — The official open-source repository for OKD, the community distribution of Red Hat OpenShift. Features Fedora CoreOS integration to provide automated OS updates, built-in container orchestration, and multi-tenant tooling.

Cost Management

Home Lab

Management

Migration (1)

Networking

  • (2024) docs.projectcalico.org: Install an OpenShift 4 cluster with Calico [ADVANCED LEVEL] [DOCUMENTATION] [COMMUNITY-TOOL] — Installation and operations guide for deploying Calico within an OpenShift 4 ecosystem. Discusses configuring Calico as the primary CNI to enforce fine-grained, declarative network security policies and IPAM capabilities.
  • (2021) Using Third Party Network Operators with OpenShift [ADVANCED LEVEL] [DOCUMENTATION] [COMMUNITY-TOOL] — Details the integration of external, non-default network operators and custom network plugins within the OpenShift cluster lifecycle management framework.
  • (2020) openshift.com: Demystifying Multus 🌟 [ADVANCED LEVEL] [COMMUNITY-TOOL] — Demystifies Multus CNI, a meta-plugin that allows attaching multiple network interfaces (NICs) to a single Kubernetes Pod. Necessary for telecommunications workloads requiring segregated data and control planes.
  • (2020) cloud.redhat.com: A Guide to Ingress Controllers in OpenShift using IPI [COMMUNITY-TOOL] — Presents a functional roadmap to Ingress configuration on OpenShift using Installer-Provisioned Infrastructure (IPI). Compares default ingress controller settings with custom routing and load-balancing endpoints.

Security (1)

Storage (1)

  • (2023) Red Hat OpenShift Container Storage 4 [ADVANCED LEVEL] [DOCUMENTATION] [COMMUNITY-TOOL] — Introduces OpenShift Container Storage 4, now rebranded and matured as Red Hat OpenShift Data Foundation (ODF). Offers software-defined file, block, and object storage built on Ceph for highly dynamic stateful apps.

Registry

Quay

  • (2019) blog.openshift.com: Introducing Red Hat Quay [COMMUNITY-TOOL] — Introduces Red Hat Quay, a highly secure, enterprise-grade container registry. Promotes geographic replication, integrated Clair vulnerability scanning, and robust user access control auditing.

Virtualization

Ecosystem

KubeVirt

Infrastructure Standards

Container Registry

Enterprise Platforms (1)

  • Quay.io [ADVANCED LEVEL] [ENTERPRISE-STABLE] — A highly secure, enterprise-ready container registry platform providing advanced geo-replication, vulnerability scanning via Clair, and multi-tenant authentication patterns. It integrates natively with Red Hat ecosystem tooling.

Open Source Initiatives

Kubernetes and Orchestration

CLI Comparison

OC vs Kubectl

  • (2021) blog.knell.it: Commands Kubernetes should adopt from Red Hat OpenShift [BASH CONTENT] [COMMUNITY-TOOL] — A comparative analysis highlighting the productivity-focused differences between OpenShift's oc CLI and vanilla Kubernetes' kubectl. It focuses on features like oc new-app, integrated build definitions, project context isolation, and login session management, showing how standard Kubernetes could improve administrative developer ergonomics.

Community Ecosystems

OperatorHub

  • (2019) twitter.com/operatorhubio [N/A CONTENT] [COMMUNITY-TOOL] — Twitter/X community hub and news outlet for OperatorHub.io, the primary industry repository for sharing high-quality, community-certified Kubernetes Operators. This platform highlights the evolution of packaging, deploying, and managing complex cloud-native applications using declarative patterns.

Kubernetes Databases

Stateful Workloads

KubeDB

  • (2020) blog.byte.builders: Manage MongoDB in Openshift Using KubeDB [GO CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] [GUIDE] — Operational manual for executing high-availability MongoDB databases on OpenShift using the KubeDB Operator. It details how the operator abstracts storage provisioning, backups, rolling version upgrades, clustered clustering configuration, and TLS security, converting stateful engine administration into standard Kubernetes declarative resources.

Observability (2)

Metrics

Alerting

  • (2026) prometheus.io/docs/alerting/alertmanager/ [GO CONTENT] [ADVANCED LEVEL] [DOCUMENTATION] [COMMUNITY-TOOL] — Official reference for Prometheus Alertmanager, responsible for deduplicating, grouping, and routing alerts. It features advanced integration with incident response software such as PagerDuty, Opsgenie, and custom webhook targets.

Visualization (1)

  • (2018) grafana.com/docs/v5.4/ [DOCUMENTATION] [LEGACY] — Archived documentation for Grafana v5.4. While Grafana itself is a [DE FACTO STANDARD], this vintage release lacks modern features like the unified alert engine and advanced visual panels introduced in subsequent generations.

Orchestration

Kubernetes Operations

Velero Backup

  • (2026) ==github.com/vmware-tanzu/velero== ⭐ 10028 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Velero is the prominent open-source utility for safely backing up, restoring, and migrating Kubernetes cluster resources and persistent volumes. Integrates closely with cloud provider storage APIs or generic file-level backups via Kopia or Restic.

Platform Engineering

Site Reliability Engineering

Foundations

💡 Explore Related: OCP 3 | Kubernetes Operators Controllers | Openshift

Reference in New Issue View Git Blame Copy Permalink