github/awesome-kubernetes
1
0
Fork 0
mirror of https://github.com/nubenetes/awesome-kubernetes.git synced 2026-07-12 18:00:37 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
f9e994778aacea0aed51d4f7ccded9c643a72121
awesome-kubernetes/v2-docs/ocp4.md

123 KiB
Raw Blame History

OCP 4

!!! info "Architectural Context" Detailed reference for OCP 4 in the context of The Container Stack.

Table of Contents

  1. AI-ML
  1. App Migration
  1. Architectural Foundations
  1. Artifact Management
  1. CI-CD
  1. CICD and Delivery
  1. CICD Pipeline
  1. Cloud Infrastructure
  1. Cloud Native Application
  1. Cloud Native Infrastructure
  1. Cluster Management
  1. Compute and Runtime
  1. Container Management
  1. Container Platforms
  1. Containers and Orchestration
  1. Developer Experience
  1. Development
  1. Ecosystem
  1. Enterprise Kubernetes
  1. Extensibility
  1. Extensibility and APIs
  1. Industry Solution
  1. Infrastructure
  1. Infrastructure Security
  1. Kubernetes and OpenShift
  1. Networking
  1. Networking and Security
  1. Observability and Ops
  1. Operations
  1. Platform
  1. Platform Engineering
  1. Platforms
  1. Resources and Training
  1. Security
  1. Security and Compliance
  1. Storage
  1. Storage and Data

AI-ML

Machine Learning Platform

OpenShift AI

  • (2023) youtube: Red Hat OpenShift AI overview [COMMUNITY-TOOL] — A technical video overview of Red Hat OpenShift AI. It details multi-tenant Jupyter notebooks, model execution scaling, automated training pipelines, and GPU orchestration configurations for high-throughput machine learning workloads.

App Migration

Application Modernization

Java Migration

  • (2020) Migrate your Java apps to containers with Migration Toolkit for Applications 5.0 [COMMUNITY-TOOL] — A detailed technical announcement of Migration Toolkit for Applications 5.0. This release emphasizes accelerated JEE migration pipelines, Quarkus targets, and dynamic containerization analysis for enterprise Java portfolios.
  • (2013) windup [JAVA CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — Windup (upstream source for Red Hat Migration Toolkit for Applications) is an extensible, rule-based modernization engine. It analyzes Java application bytecode and source files to generate detailed cloud-readiness and microservice conversion reports.

Quarkus

Architectural Foundations

Kubernetes Tools

General Reference

Artifact Management

Container Registries

Red Hat Quay

  • (2022) OpenShift Registry & Quay [ADVANCED LEVEL] [COMMUNITY-TOOL] [GUIDE] — Comprehensive analysis of Red Hat Quay and the integrated OpenShift Container Registry. Details secure image storage, vulnerability scanning with Clair, and geo-replication capabilities. It highlights Quay's enterprise-grade multi-tenancy and RBAC controls, which ensure secure artifact promotion within high-performance microservices pipelines.

CI-CD

App Migration (1)

GitHub Actions

  • (2020) RHAMT in Github Actions [YAML CONTENT] [COMMUNITY-TOOL] — A practical guide outlining how to embed the Red Hat Application Migration Toolkit (RHAMT) into automated GitHub Actions. This implementation enables automated static code analysis inside continuous integration pull requests to ensure cloud compatibility.

CICD and Delivery

Container Builds

Source-to-Image

  • (2020) Openshift 4 image builds [COMMUNITY-TOOL] — Details OpenShift's native, highly secure in-cluster build mechanisms, explaining the source-to-image (S2I) workflow and safe artifact pipeline practices.

GitOps Blueprints

Community Catalog

  • (2026) ==github.com/redhat-cop/gitops-catalog== ⭐ 377 [YAML CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — An indispensable, community-curated collection of production-ready GitOps blueprints, Argo CD definitions, and cluster config charts maintained by Red Hat CoP.

CICD Pipeline

SecOps

Automated Builds

  • (2020) openshift.com: Keep Your Applications Secure With Automatic Rebuilds [N/A CONTENT] [COMMUNITY-TOOL] — Detailed technical guide illustrating how to configure OpenShift's image change triggers and ImageStreams to drive automatic rebuilds of downstream containers when upstream base images update or fix security issues. This methodology tightens SecOps loops, ensuring immediate mitigation of CVEs. It integrates container registry security alerts directly with native cluster build systems.

Cloud Infrastructure

Managed Kubernetes

Azure Red Hat OpenShift

  • (2020) Introducing Azure Red Hat OpenShift on OpenShift 4 🌟 [COMMUNITY-TOOL] — Details the managed Azure Red Hat OpenShift (ARO) offering on OpenShift 4, built on operator-led cluster lifecycle management. It discusses direct integration with Microsoft Azure services, integrated scaling, and unified support channels. This managed service drastically simplifies operational overhead, letting enterprises focus purely on microservices delivery.

Cloud Native Application

Serverless

OpenShift Serverless

  • (2020) Serverless applications made faster and simpler with OpenShift Serverless GA [COMMUNITY-TOOL] — Introducing OpenShift Serverless GA, this resource outlines the packaging of Knative into an enterprise-supported product. It details the integration of OpenShift's default routing layer, integration with service mesh (Istio), and developer console enhancements that provide visual revision graphs, simple traffic-splitting controls, and event-source creation.
  • (2020) youtube [COMMUNITY-TOOL] — A practical walk-through of OpenShift Serverless features. The session demonstrates creating a Node.js microservice, deploying it via git-import, scaling down to absolute zero instances to conserve resources, and automatically scaling up instances to handle sudden HTTP request surges.

Cloud Native Infrastructure

Service Mesh

OpenShift

  • (2022) ==github.com: Maistra Istio== ⭐ 94 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — The official GitHub repository for Maistra's modified Istio control plane code. Optimized for multi-tenancy support, advanced security policies, and tight integration within OpenShift environments.

Cluster Management

Scheduling and Node Assignment

Dynamic Balancing

  • (2026) ==Descheduler for Kubernetes 🌟== ⭐ 5441 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — A highly critical Kubernetes SIG project that addresses scheduling drift by continuously examining running pods against modified constraints, evicting pods that violate affinities, taints, topology spreads, or resource capacities.

Compute and Runtime

Local Container Engines

Rootless Storage

  • (2021) Rootless podman and NFS [ADVANCED LEVEL] [COMMUNITY-TOOL] — A troubleshooting guide explaining UID/GID translation mechanisms when mounting NFS shared drives onto rootless Podman systems.

Serverless (1)

Knative Tutorials

  • (2023) redhat-developer-demos.github.io/knative-tutorial [COMMUNITY-TOOL] [GUIDE] — A self-paced developer tutorial for master-level Knative techniques. It covers Knative Serving configurations, custom scaling thresholds, and routing strategies.

Virtualization

KubeVirt Core

  • (2026) kubevirt.io 🌟 [ADVANCED LEVEL] [DOCUMENTATION] [COMMUNITY-TOOL] — The home page of KubeVirt, a CNCF-graduating project that enables orchestration of VMs and containers within the same Kubernetes engine.

KubeVirt Introduction

OpenShift Virtualization

  • (2023) cloud.redhat.com: OpenShift Virtualization on Amazon Web Services [ADVANCED LEVEL] [LEGACY] — This architectural guide describes how to run legacy virtual machines natively alongside microservice containers on AWS bare-metal instances using KubeVirt. It establishes the bridge for migrating classic virtualized workloads into cloud-native architectures.

Container Management

OpenShift (1)

Image Management

  • (2019) cloudowski.com: Openshift ImageStreams [N/A CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — This analysis compares OpenShift ImageStreams with vanilla Kubernetes image pulling mechanisms. It explains how ImageStreams provide abstraction layers over container registries, enabling automatic redeployments upon detection of updated remote images (triggers). By decoupling pods from concrete repository URLs, it automates deployment lifecycle workflows for platform engineering teams.

Container Platforms

OKD OpenShift

Cluster Bootstrap

  • (2020) openshift.com: Deploy a multi-master OKD 4.5 cluster using a single command in ~30 minutes [ADVANCED LEVEL] [COMMUNITY-TOOL] — Highlights the deployment of an upstream OKD 4.5 cluster (the open-source origin of OpenShift) using the quick installer-provisioned infrastructure (IPI) workflow. It provides a step-by-step breakdown of how a single command automates the bootstrapping of multi-master control planes on cloud providers. Useful for labs and staging environments targeting standard Kubernetes platform development.

OpenShift (2)

FAQ

  • (2020) openshift.com: 8 Answers to 7 OpenShift Questions 🌟 [COMMUNITY-TOOL] — A practical synthesis addressing common operational and architectural questions regarding Red Hat OpenShift deployment modes, upgrade cycles, and subscription models. It clarifies the differentiators between upstream Kubernetes and OpenShift's opinionated, enterprise-ready application platform. Useful for enterprise decision-makers evaluating platform migrations or hybrid-cloud architectures.

Infrastructure Provisioning

  • (2021) Fully Automated OpenShift Deployments With VMware vSphere [ADVANCED LEVEL] [COMMUNITY-TOOL] — Detailed documentation on Installer-Provisioned Infrastructure (IPI) for Red Hat OpenShift on VMware vSphere environments. The automation workflow covers DNS registration, load balancing, virtual machine provisioning, and cluster bootstrapping directly from the installer. This integration streamlines on-premise private cloud delivery, reducing manual operational overhead to nearly zero.

Containers and Orchestration

OpenShift (3)

Installation and Setup

  • (2019) blog.openshift.com: OpenShift 4 Install Experience [ADVANCED LEVEL] [COMMUNITY-TOOL] — Outlines the modernized Full Stack Automation (IPI) and Pre-existing Infrastructure (UPI) install pathways for OpenShift 4. Guides systems administrators through bootstrapping, node discovery, and control-plane deployment workflows.

Platform Release

  • (2019) blog.openshift.com: Introducing Red Hat OpenShift 4 [ADVANCED LEVEL] [COMMUNITY-TOOL] — Unveils Red Hat OpenShift 4, highlighting its transition to self-managing, automated cloud-native infrastructure powered by CoreOS. Establishes how Operators control the deployment, patching, and scaling of Kubernetes clusters.

Technical Background

Developer Experience

Application Development

Kubernetes Fundamentals

  • (2024) developers.redhat.com: Developing applications on Kubernetes 🌟 [COMMUNITY-TOOL] — Red Hat's developer ecosystem portal containing targeted learning paths for deploying applications onto Kubernetes and OpenShift. Content spans building container images, designing Kubernetes manifests, managing secret injections, and orchestrating deployment patterns like rolling updates or canary releases. It serves as a continuous educational hub for containerized application design.

Cloud IDEs

Dev Spaces

  • (2020) developers.redhat.com: How to install CodeReady Workspaces in a restricted OpenShift 4 environment [ADVANCED LEVEL] [COMMUNITY-TOOL] [GUIDE] — This architectural guide details installing Red Hat CodeReady Workspaces (now OpenShift Dev Spaces) within highly restricted, air-gapped environments. Utilizing an internal container registry and offline operator configurations, it provides an in-browser development IDE based on Eclipse Che. The configuration ensures that code never leaves the secure boundaries of the company's internal network.

SDKs

Operator SDK

  • (2020) developers.redhat.com: 5 tips for developing Kubernetes Operators with the new Operator SDK [ADVANCED LEVEL] [COMMUNITY-TOOL] — This technical guide provides 5 key design strategies for engineering robust Kubernetes Operators utilizing the modernized Operator SDK. It covers optimal Go reconciler coding patterns, caching clients, minimizing API rate-limiting via efficient event filtration, and optimizing tests with the EnvTest framework to ensure consistent execution.

Development

Kubernetes Operators

API Design

Ecosystem

Marketplace

Application Lifecycle

Enterprise Kubernetes

Capacity Planning

Platform Sizing

Cluster Diagnostics

Troubleshooting Protocols

Cluster Management (1)

Developer Tooling

Cluster Operations

Cluster Upgrades

  • (2021) mkdev.me: How to upgrade Openshift 4.x 🌟 [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Step-by-step upgrade guide for OpenShift 4.x environments. Outlines operator orchestration dependencies, pre-upgrade testing workflows, and the use of the Cincinnati update service to maintain stability.

Cluster Storage

Container Registry Management

Database Orchestration

Operator Integrations

  • (2021) blog.byte.builders: Manage MongoDB in Openshift Using KubeDB [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Demonstrates how to run and manage MongoDB instances on OpenShift using the KubeDB Operator. Covers scaling clusters, orchestrating schema updates, configuring persistent disk claims, and executing point-in-time recoveries.

Developer Experience (1)

Developer Tooling (1)

Local Prototyping

Platform Onboarding

Edge Computing

Single Node Architectures

Hardware Architectures

Cloud Provider Integration

  • (2021) openshift.com: OpenShift on ARM Developer Preview Now Available for AWS [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Profiles the technical preview of running OpenShift on AWS ARM64 (Graviton) environments. Explains performance metrics, lower operational energy signatures, and compilation steps required for ARM-based microservices.

Platform Strategy

Identity Management

Cloud Provider Integration (1)

Industrial IoT

Enterprise Deployments

Infrastructure Operations

Air-Gapped Environments

Cost Optimization

  • (2020) Enabling OpenShift 4 Clusters to Stop and Resume Cluster VMs [ADVANCED LEVEL] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Outlines the procedural and architectural mechanics required to pause and resume OpenShift 4 clusters running on virtualized or cloud infrastructures. Details how to coordinate VM shutdowns while preventing split-brain scenarios and preserving etcd consensus state upon cluster wake-up.

Developer Tooling (2)

  • (2020) openshift-yolo ⭐ 8 [SHELL CONTENT] 🌟🌟 [COMMUNITY-TOOL] — A lightweight community playbook designed to spin up fast, non-production OpenShift 4 clusters on local machines. Streamlines initialization steps by bypassing heavy production components.

VMware Integration

Multi-Cluster Management

Hosted Control Planes

  • (2022) ==github.com/openshift/hypershift: HyperShift== ⭐ 526 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — HyperShift decouples the OpenShift control plane from the infrastructure, hosting it as standard containerized workloads within a central management cluster. This architecture enables lightning-fast provisioning, significantly lower operational overhead, and highly cost-effective multi-tenant fleet management.

Network Engineering

Cloud Provider Integration (2)

Observability Frameworks

Telemetry Metrics

Operator Framework

Lifecycle Management

Performance Tuning

High Density Node Architectures

  • (2020) ==blog.openshift.com: OpenShift Scale: Running 500 Pods Per Node 🌟== [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Explains the systems engineering and kernel adjustments needed to execute up to 500 pods per cluster node on OpenShift. Focuses on tuning the CRI-O container runtime, garbage collection frequency, CPU scheduler configurations, and CIDR allocation limits.

Platform Ecosystem

Administrative Systems

Enterprise Security

Multicloud Marketplaces

Platform Evaluation

Architecture Reviews

  • (2020) cloudowski.com: Honest review of OpenShift 4 🌟 🌟🌟🌟 [COMMUNITY-TOOL] — An analytical, architectural critique of OpenShift 4's primary design shifts. Highlights the structural changes of shifting control plane workflows into automated Kubernetes Operators and the operational trade-offs of using Red Hat Enterprise Linux CoreOS (RHCOS) as the mandatory immutable operating system.

Learning Resources

  • (2022) mikeroyal/OpenShift-Guide: OpenShift Guide 🌟🌟 [MARKDOWN CONTENT] 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — A comprehensive community repository providing structured technical references for OpenShift. Includes instructions for cluster setup, networking tools, persistent storage, and third-party integrations.

Platform Migrations

Cluster Upgrades (1)

Platform Packaging

Enterprise Security (1)

Release Diagnostics

Observability Frameworks (1)

Platform Lifecycle

  • (2021) openshift.com: Red Hat OpenShift 4.7 Is Now Available 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — A programmatic overview of OpenShift 4.7 capabilities, featuring the adoption of Kubernetes 1.20, advanced OpenShift Virtualization tools, simplified bare-metal installs, and enhanced multi-cluster administration integrations via Red Hat Advanced Cluster Management (RHACM).
  • (2021) cloud.redhat.com: Red Hat OpenShift 4.8 Is Now Generally Available 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Details the general availability of OpenShift 4.8. Focuses on OVN-Kubernetes networking integrations, multi-network attachments via Multus, IPv6 transition mechanisms, and consolidated sandboxed execution parameters.
  • (2021) cloud.redhat.com: Red Hat OpenShift 4.9 Is Now Generally Available 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Summarizes the general availability updates of OpenShift 4.9. Focuses on API transitions associated with Kubernetes 1.22, the launch of single-node OpenShift, and automated Bare-Metal provisioning.

Serverless and CICD

Resource Management

Advanced Scheduling

Workload Isolation

Sandboxed Runtimes

Workload Modernization

Windows Container Support

Extensibility

Operators

Lifecycle Management (1)

  • (2024) ==Red Hat OLM== ⭐ 1857 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Part of the Operator Framework, OLM manages the installation, updates, and role-based access control of Operators running inside a cluster. It acts as an orchestrator for custom resource definitions (CRDs) and controller versions, ensuring dependencies are resolved safely. This tool is standard infrastructure across Red Hat OpenShift and enterprise Kubernetes configurations to scale operations reliably.

Extensibility and APIs

Microservices

Operator Integrations (1)

Operator Framework (1)

Community Feed

  • (2024) twitter.com/operatorhubio [COMMUNITY-TOOL] — The official community account sharing news, releases, and developments in the operator ecosystem.

Industry Solution

Construction Industry

Platform-as-a-Service

  • (2021) OpenBuilt [ADVANCED LEVEL] [COMMUNITY-TOOL] — OpenBuilt is an open industry platform facilitating digital supply chain orchestration for construction environments. Built on hybrid cloud and OpenShift technologies, it streamlines third-party application interoperability.
  • (2021) infoq.com: IBM, Red Hat and Cobuilder Develop OpenBuilt, a Platform for the Construction Industry [COMMUNITY-TOOL] — This InfoQ article covers the collaborative launch of OpenBuilt by IBM, Red Hat, and Cobuilder, exploring the architectural goals of unifying global construction logistics, IoT, and BIM solutions through API patterns.

Infrastructure

Automation

Ansible

  • (2021) tommeramber/ocp-automations [SHELL CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — A community repository of automation playbooks and scripts designed to streamline configuration, security hardening, and deployment procedures across diverse OpenShift Container Platform clusters.

Cluster Provisioning

AWS Quick Starts

Container Registry

Red Hat Ecosystem

  • (2018) blog.openshift.com: Introducing Red Hat Quay [COMMUNITY-TOOL] — This article introduces the commercial enterprise capabilities of Red Hat Quay within the OpenShift ecosystem. It highlights key features such as high availability, geographic replication, automated pruning, and deep platform security integrations.

Self-Hosted

  • (2019) ==GitHub Quay (OSS)== ⭐ 2785 [PYTHON CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Project Quay is the open-source upstream version of Red Hat Quay, providing a highly scalable container registry designed for cloud-native infrastructure. It features multi-tenancy, geo-replication, advanced security pruning, and Clair integration to secure the software delivery pipeline.

Data Protection

Kubernetes Backup Operators

  • (2026) ==github.com/vmware-tanzu/velero== ⭐ 10062 [GO CONTENT] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — Velero is the standard open-source utility for safely backing up and restoring entire Kubernetes cluster structures and persistent volumes. Deeply integrates with both raw cloud APIs and file-level utilities like Kopia and Restic.

Kubernetes Operators (1)

Database and Registry

  • (2020) operatorhub.io/operator/quay [YAML CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — The Quay Operator automates the installation, scaling, configuration, and day-2 operations of Red Hat Quay on Kubernetes and OpenShift. It handles storage provisioning, database migrations, and ingress configurations via custom resource definitions.

Managed Kubernetes (1)

ROSA

ROSA Assessment

ROSA HCP

Multi-Cloud

Platform Deployments

Public Cloud

ARO Console

ARO with Azure DevOps

AWS Provisioning

  • (2026) ==AWS Account Set Up 🌟== ⭐ 1550 [MARKDOWN CONTENT] [ADVANCED LEVEL] [DOCUMENTATION] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — This repository guide outlines the specific IAM policies, resource quotas, Route53 configurations, and networking permissions required to install OpenShift on AWS using the native installer-provisioned infrastructure (IPI). It is a vital technical reference for cloud infrastructure engineers.
  • (2020) OpenShift 4 on AWS Quick Starts 🌟 [COMMUNITY-TOOL] — An official AWS blueprint details early CloudFormation-driven automations to instantiate OpenShift 4 environments. While largely replaced by Modern Partner Solutions, it remains an informative model for multi-AZ topology layouts.

Scheduling

Load-Aware

  • (2024) kubernetes-sigs: Trimaran: Load-aware scheduling plugins 🌟 ⭐ 1295 [GO CONTENT] 🌟🌟🌟 [COMMUNITY-TOOL] — A collection of scheduling plugins (TargetLoadPacked and LoadWatcher) under the Trimaran umbrella that enable real-time, load-aware scheduling in Kubernetes. Instead of scheduling purely based on static requests, it utilizes actual node resource utilization metrics. Active in 2026, it is vital for optimizing cluster efficiency and reducing overall infrastructure costs.

Infrastructure Security

Container Registries (1)

Project Quay

  • (2019) Red Hat Introduces open source Project Quay container registry [N/A CONTENT] [COMMUNITY-TOOL] — Official press release detailing Red Hat's open-sourcing of Project Quay, the upstream foundation of Red Hat Quay. This transition opened up the registry engine, vulnerability scanner (Clair), and helper tools to public collaborative development. It established Project Quay as a fully open, scalable option for global container storage and scanning.

Quay

  • (2026) Quay.io [N/A CONTENT] [COMMUNITY-TOOL] — Quay.io is Red Hat's enterprise-grade hosting platform for container images, offering advanced security and vulnerability scanning. It provides built-in support for fine-grained access control, geographic replication, and integration with external identity providers. Quay serves as a critical infrastructure backbone for secure container image distribution across large scale cluster topologies.

Kubernetes and OpenShift

Networking

Traffic Control

  • (2019) redhat.com: Network traffic control for containers in Red Hat OpenShift 🌟 [YAML CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — Examines ingress/egress bandwidth shaping, container rate-limiting, and packet prioritization within OpenShift's SDN. Live grounding shows that while basic Linux TC limits apply, contemporary architectures utilize service meshes to execute complex L7 rate-limiting policies.

Security

Architecture

  • (2018) OpenShift and Network Security Zones: Coexistence Approaches 🌟🌟🌟 [NONE CONTENT] [ADVANCED LEVEL] [CASE STUDY] [LEGACY] — This seminal architectural analysis details patterns for deploying OpenShift across physical and logical enterprise network security zones. Contrasts legacy perimeter firewall zoning models with flat cloud-native Software-Defined Networks (SDNs), providing proven coexistence topologies.

Networking (1)

Container Network Interface

Calico Integrations

  • (2023) docs.projectcalico.org: Install an OpenShift 4 cluster with Calico [ADVANCED LEVEL] [COMMUNITY-TOOL] [GUIDE] — A step-by-step technical blueprint for deploying Project Calico as the primary CNI within a Red Hat OpenShift 4 cluster. It outlines replacing the default network provider with Calico to leverage enhanced network security policy engines and optimized IP Address Management (IPAM). Integration focuses on Operator-driven setups, configuring custom Calico CRDs to control BGP routing and wireguard encryption for inter-node pod traffic.

Multus CNI

  • (2019) openshift.com: Demystifying Multus 🌟 [ADVANCED LEVEL] [LEGACY] — Demystifying Multus CNI, this analysis details how the meta-plugin enables multi-homing for Kubernetes pods. By orchestrating a primary CNI (like OVN-Kubernetes or Calico) along with secondary interfaces (like Macvlan, SRIOV, or host-device), Multus provides pods with isolated control and data planes. This architecture is vital for high-throughput telecom workloads (5G/NFV) and legacy applications requiring direct hardware access.

Ingress

Ingress Controllers

  • (2020) cloud.redhat.com: A Guide to Ingress Controllers in OpenShift using IPI [COMMUNITY-TOOL] [GUIDE] — This reference architecture analyzes Ingress controller configurations in OpenShift when deployed via Installer-Provisioned Infrastructure (IPI). It highlights the automated integration of load balancers with OpenShift's internal router (HAProxy-based). Configuration points focus on scaling the ingress operator, managing wildcard DNS, configuring TLS termination strategies (Edge, Passthrough, Re-encrypt), and establishing highly-available traffic endpoints.

Orchestration

Third-Party CNI

  • (2020) Using Third Party Network Operators with OpenShift [ADVANCED LEVEL] [COMMUNITY-TOOL] — An analytical guide reviewing the integration of third-party network operators inside the OpenShift ecosystem. It details the interaction boundaries between the cluster-network-operator and custom CNI plugins. Architectural considerations focus on ensuring compatibility with OpenShift's default SDN parameters, identity controls, and DNS routing setups to prevent operational regression during cluster upgrades.

Networking and Security

Cluster Networking

ROSA Networking

VPC Peering

Identity and Access

OAuth Providers

  • (2020) youtube: OpenShift 4 OAuth Identity Providers [ADVANCED LEVEL] [COMMUNITY-TOOL] — A video presentation detailing identity federation. It explains configuration patterns for LDAP, Active Directory, and custom OAuth providers on OpenShift.

OS Security

SELinux and MCS

  • (2013) SELinux [COMMUNITY-TOOL] — An early architectural overview of security layers in OpenShift, detailing how SELinux and Multi-Category Security (MCS) keep container filesystems separated.

Traffic Routing

Ingress Controllers (1)

  • (2026) Ingress Controller [DOCUMENTATION] [COMMUNITY-TOOL] — The official Kubernetes documentation explaining Ingress. It teaches engineers how to manage HTTP routing, SSL termination, and hostnames at the cluster edge.

Observability and Ops

Alerting and Telemetry

Alertmanager Configuration

  • (2026) prometheus.io/docs/alerting/alertmanager/ [ADVANCED LEVEL] [DOCUMENTATION] [COMMUNITY-TOOL] — Official Prometheus Alertmanager guide explaining notification deduplication, silent intervals, and dynamic routing to operations channels like Slack or PagerDuty.

Log Management

Vector and Loki

Metrics Visualization

Grafana Old Versions

  • (2018) grafana.com/docs/v5.4/ [DOCUMENTATION] [LEGACY] — Archived documentation for Grafana v5.4, preserved primarily to reference legacy metrics collection architectures from early OpenShift 4 telemetry configurations.

Operations

Benchmarking

Performance Testing

  • (2020) kubestone.io [GO CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — Kubestone is an open-source performance benchmarking operator for Kubernetes. It runs diagnostic tests (like iperf3, sysbench, fio, and pgbench) directly in custom pods to validate network throughput, disk performance, database transactions, and compute resources. This provides structural benchmarking data to ensure cluster performance before deploying workloads.
  • (2020) operatorhub.io: kubestone [ADVANCED LEVEL] [DOCUMENTATION] [COMMUNITY-TOOL] — The OperatorHub page for Kubestone, simplifying the automated installation of Kubestone benchmark CRDs. Developers can easily configure YAML parameters for execution pipelines, gather raw benchmark reports, and export metrics directly to Prometheus for analysis.

FinOps

Cost Management

Platform

User Experience

OpenShift Console

Platform Engineering

Kubernetes Distributions

Evaluation and Sandbox

  • (2026) try.openshift.com 🌟 🌟🌟🌟🌟 [ENTERPRISE-STABLE] — Unified gateway for trialing OpenShift deployments across public clouds, virtualization platforms, and local developer workstations (via OpenShift Local). Enables architects to evaluate operational complexity and developer tooling. Continually updated in 2026 to reflect the latest stable 4.x features.

Platforms

Cluster Management (2)

Cluster Provisioning (1)

  • (2026) github.com/openshift/hive ⭐ 277 [GO CONTENT] [ADVANCED LEVEL] 🌟🌟🌟 [COMMUNITY-TOOL] — OpenShift Hive is an API-driven operator for provisioning, managing, and scaling OpenShift clusters. Running on a central management hub, Hive accepts declarative custom resources defining target clusters (AWS, GCP, Azure, Bare-Metal) and orchestrates the installer (IPI) to bootstrap, update, and manage the life cycle of target clusters dynamically at scale.

Fleet Management

  • (2024) Red Hat Advanced Cluster Management for Kubernetes 🌟 [ADVANCED LEVEL] [COMMUNITY-TOOL] — Red Hat Advanced Cluster Management (RHACM) for Kubernetes is the premier tool for multi-cluster fleet administration. Based on the open-source Open Cluster Management (OCM) project, it automates bare-metal or cloud provisioned cluster lifecycles, enforces strict declarative security policies (via GitOps), and simplifies cross-cluster networking. It is the enterprise benchmark for orchestrating massive edge, hybrid, or multi-cloud deployments.
  • (2020) containerjournal.com: Red Hat Simplifies Kubernetes Cluster Management [COMMUNITY-TOOL] — An early industry evaluation of Red Hat's multi-cluster management strategies. The text highlights RHACM's features designed to address cloud sprawl. By introducing centralized management planes for application delivery and policy enforcement across diverse Kubernetes engines (EKS, GKE, AKS, and OCP), it establishes uniform security baselines and automates drift remediation.

Distribution

Cloud Provisioning

  • (2020) dustymabe.com: OpenShift OKD on Fedora CoreOS on DigitalOcean Part 4: Recorded Demo [ADVANCED LEVEL] [COMMUNITY-TOOL] — A recorded deployment demo focusing on installing OKD on Fedora CoreOS within DigitalOcean droplets. It illustrates configuring DigitalOcean resources (VPCs, firewalls, volume spaces) and custom ignition templates to orchestrate a highly available cluster topology on an affordable cloud.

Cluster Provisioning (2)

  • (2020) youtube.com: How To Install OKD4 on GCP - Vadim Rutkovsky (Red Hat) [ADVANCED LEVEL] [COMMUNITY-TOOL] — A video walk-through guide demonstrating the step-by-step installation of OKD4 on Google Cloud Platform (GCP). It outlines preparing DNS zones, setting up GCP service accounts, configuring the installation manifests, executing the ignition installer, and troubleshooting common cluster bootstrap failures.

Community Kubernetes

  • (2026) ==GitHub: OKD4== ⭐ 2076 [SHELL CONTENT] [ADVANCED LEVEL] 🌟🌟🌟🌟🌟 [DE FACTO STANDARD] — The core GitHub repository containing build configurations, release pipelines, and architectural trackers for OKD4. Integrating Fedora CoreOS, this platform bridges the gap between raw Kubernetes and enterprise-ready application runtimes, including build pipelines (S2I), route configurations, and multi-tenant tooling natively.
  • (2026) docs.okd.io 🌟 [ADVANCED LEVEL] [DOCUMENTATION] [COMMUNITY-TOOL] — The official documentation hub for OKD. It provides detailed guides on platform design, installer-provisioned infrastructure (IPI) patterns, user-provisioned infrastructure (UPI), security constraints, operator lifecycle management, and administrative configuration for community cluster installations.
  • (2022) github.com: OKD 4 Roadmap [MARKDOWN CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — The OKD 4 development roadmap hosted on GitHub. It tracks the migration of build systems, target OS configurations (e.g., transition states of Fedora CoreOS), integration of updated Kubernetes API versions, and community-driven features like multi-arch architectures.
  • (2020) youtube.com: OKD4 [COMMUNITY-TOOL] — An official video presentation describing OKD4's architecture, community direction, and installation paradigms. Engineers discuss the advantages of moving to an Operator-driven architecture, Fedora CoreOS foundation, and how community contributions influence the commercial OpenShift pipeline.

Enterprise Kubernetes (1)

  • (2020) containerjournal.com: Red Hat Delivers Latest Kubernetes Enhancements [COMMUNITY-TOOL] — An industry report analyzing the release of early OpenShift 4.x enhancements. It focuses on how Red Hat embedded CoreOS into the cluster installation engine (IPI/UPI), allowing for automated, operator-led operating system updates. This architecture ensures the OS is treated as an extension of the Kubernetes control plane, drastically reducing management overhead.

Lab Setup

  • (2021) okd4-upi-lab-setup: Building an OpenShift - OKD 4.X Lab [ANSIBLE CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — An automated GitHub lab orchestration repository designed to construct an OKD 4.x environment via User Provisioned Infrastructure (UPI). Using automated Bash scripts and Ansible playbooks, it speeds up the configuration of helper services (DNS, HAProxy, Web server) and manages cluster deployment.
  • (2020) blog.openshift.com: Guide to Installing an OKD 4.4 Cluster on your Home Lab [ADVANCED LEVEL] [COMMUNITY-TOOL] — An extensive blog series instructing network engineers and developers on setting up a bare-metal OKD 4.4 cluster inside a personal home lab. It covers essential infrastructure prep, including configuring DHCP, DNS forwarding, PXE booting, HAProxy for load balancing, and deploying the bootstrap control VM.

Lifecycle Management (2)

Application Migration

  • (2020) blog.openshift.com: Migrating your applications to OpenShift 4 🌟 [ADVANCED LEVEL] [COMMUNITY-TOOL] — An in-depth technical migration blueprint for moving workloads to OpenShift 4. It highlights the OpenShift Migration Toolkit, utilizing Velero as the foundational control engine for application backup, metadata translation, and restore operations, while using Restic to execute block-level transfers of persistent container volumes across cluster hosts.

Operator Framework (2)

  • (2020) Top Kubernetes Operators [COMMUNITY-TOOL] — This reference guide details the Operator Capability Model (Levels 1 to 5). It analyzes features required to advance an operator from basic installation (Level 1) and seamless upgrades (Level 2) to full lifecycle automation (Level 3), deep metrics tracking (Level 4), and auto-pilot anomaly remediation (Level 5).

Local Development

Kubernetes Local

  • (2020) redhat.com: How to run a Kubernetes cluster on your laptop 🌟 [COMMUNITY-TOOL] — An analytical guide reviewing options for running Kubernetes clusters locally on laptops. The resource compares Kind, Minikube, and CodeReady Containers (OpenShift Local) based on system overhead, target APIs, developer workflows, and system constraints.

OpenShift Local

  • (2025) Homepage [COMMUNITY-TOOL] — The landing portal for Red Hat OpenShift Local (formerly CodeReady Containers / CRC). OpenShift Local packages a minimal, single-node OpenShift cluster into a single virtual machine optimized for local development. Live grounding confirms it is the primary local emulation tool, replacing minishift, and is designed for developers building cloud-native applications directly on macOS, Windows, or Linux.
  • (2020) schabell.org: How to setup OpenShift Container Platform 4.5 on your local machine in minutes [COMMUNITY-TOOL] — A developer-authored setup guide focusing on standing up an OpenShift Container Platform 4.5 environment locally in minutes. The post reviews resource constraints, command-line usage, automated virtual machine instantiation steps, and best practices for optimizing memory footpins to prevent developer system crashes.
  • (2019) Red Hat OpenShift 4.2 on your laptop: Introducing Red Hat CodeReady Containers [COMMUNITY-TOOL] — Historical launch announcement introducing Red Hat CodeReady Containers (now OpenShift Local) for OpenShift 4.2. It marks the transition to Operator-driven OpenShift clusters running on local developer laptops. The single-node environment utilizes host-native hypervisors (Hyper-V, Libvirt, Hyperkit) to containerize all cluster control-plane workloads into a resource-constrained footprint.

Operators (1)

Remote Deployments

  • (2020) Overview: running crc on a remote server [BASH CONTENT] [COMMUNITY-TOOL] — An active community technical gist demonstrating how to configure and run CodeReady Containers (OpenShift Local) on a remote server. This workaround allows developers to bypass local RAM/CPU limitations by running the heavy single-node cluster on beefy headless remote servers while routing local CLI controls (oc, kubectl) over custom SSH tunnels and reverse proxies.

Virtualization (1)

KubeVirt Core (1)

  • (2021) kubermatic.com: Bringing Your VMs to Kubernetes With KubeVirt [COMMUNITY-TOOL] [GUIDE] — A deep technical exploration of KubeVirt mechanics, detailing how VMs are translated into Kubernetes pods. By mapping VM instances to pod boundaries, KubeVirt uses standard container runtimes to manage virtual disks, tap network interfaces, and guest system memory. This guide details the API translation layer where VM resources are scheduled as standard K8s objects, leveraging built-in scheduler constraints, affinity rules, and persistent volumes.

KubeVirt Integration

  • (2020) containerjournal.com: Red Hat Integrates KubeVirt With Kubernetes Management Platform From SAP [ADVANCED LEVEL] [LEGACY] — Red Hat's integration of KubeVirt with SAP's cloud platform represents a major convergence of virtualization and containerization. Live grounding confirms KubeVirt enables legacy VM-based workloads to run directly alongside microservices within unified Kubernetes namespaces. This architecture reduces operational complexity by replacing dedicated hypervisors with Kubernetes constructs like Custom Resource Definitions (CRDs) for virtual machine lifecycles.

Resources and Training

Self-Paced Labs

Curriculum Code

  • (2024) github.com: Openshift 4 training [SHELL CONTENT] [COMMUNITY-TOOL] — A public Git repository containing self-paced curriculum materials and lab configurations to train systems engineers in Day 2 cluster management tasks.

Video Learning

Community Conferences

Official Stream

  • (2026) OpenShift Youtube [COMMUNITY-TOOL] — The main YouTube page for OpenShift, hosting recorded community developer events, product demonstrations, and architectural panels.

Security (1)

Cloud Security

Managed OpenShift

  • (2023) cloud.ibm.com: openshift-security [ADVANCED LEVEL] [DOCUMENTATION] [COMMUNITY-TOOL] — Documentation outlining security controls on Red Hat OpenShift on IBM Cloud (ROKS). It details the split-responsibility model between cloud providers and customers, managing IAM integrations, enforcing private endpoints, setting up CIS/Benchmarks, and isolating network compute nodes to fulfill stringent regulatory standards for enterprise workloads.

Container Registry (1)

Project Quay (1)

  • (2026) projectquay.io [COMMUNITY-TOOL] — The project homepage for Project Quay. Quay is an open-source, highly scalable, and secure container registry engine. The platform provides granular access controls, robot accounts, and support for multi-arch OCI registry specifications, serving as the upstream codebase for Red Hat Quay.

Hardening

Cluster Security

  • (2020) blog.openshift.com: Introducing Red Hat OpenShift 4.3 to Enhance Kubernetes Security 🌟 [ADVANCED LEVEL] [COMMUNITY-TOOL] — This analysis details OpenShift 4.3's enhanced security features. It reviews the integration of automated certificate rotation, enhanced cryptography with FIPS 140-2 compliance, encryption-at-rest for etcd key-value stores, and advanced ingress security configurations. These features form the baseline of modern OpenShift multi-tenant security architecture.

Security and Compliance

Access Control

OpenShift IAM

  • (2021) openshift.com: Ask an OpenShift Admin Office Hour - Authentication and Authorization [COMMUNITY-TOOL] — An interactive session breakdown focused on OpenShift's native OAuth server, identity providers (LDAP, Active Directory, Keycloak), and RBAC mapping strategies. It provides deep troubleshooting techniques for authentication flow misconfigurations and token management. Live grounding validates these techniques as crucial for securing enterprise-grade API endpoints.

Network Security

Prisma Cloud

  • (2023) docs.aporeto.com: OpenShift Master API Protection [ADVANCED LEVEL] [DOCUMENTATION] [COMMUNITY-TOOL] — Details how to protect the OpenShift Master API using microsegmentation and identity-based security policies, now consolidated under Palo Alto Networks Prisma Cloud. It explores runtime enforcement, traffic whitelist policies, and vulnerability detection to shield critical control planes. Live grounding shows that Aporeto's identity-based security is now fully integrated into the Prisma Cloud platform.

OpenShift Security

Cluster Design

  • (2021) openshift.com: OpenShift Security Best Practices for Kubernetes Cluster Design 🌟 [ADVANCED LEVEL] [COMMUNITY-TOOL] — Explores architectural security design patterns for OpenShift, including network segmentation, API access control, multi-tenancy models, and secure OS configurations via CoreOS. It highlights key defensive controls like Security Context Constraints (SCCs) and identity provider integrations. A must-read for compliance-oriented infrastructure architects designing high-security Kubernetes platforms.

Storage

Cloud-Native Storage

OpenShift Data Foundation

  • (2023) Red Hat OpenShift Container Storage 4 [ADVANCED LEVEL] [COMMUNITY-TOOL] — Red Hat OpenShift Data Foundation (formerly OpenShift Container Storage 4) delivers software-defined persistent storage engineered for containerized environments. Built on Ceph, Rook, and NooBaa, ODF provides unified block, file, and object storage interfaces directly inside Kubernetes. This architecture simplifies lifecycle operations and enables dynamic provisioning, snapshotting, and disaster recovery across hybrid cloud footprints.

Storage and Data

Cloud Native Storage

Ceph Operators

  • (2024) Rook-Ceph [ADVANCED LEVEL] [COMMUNITY-TOOL] — The OperatorHub page for Rook-Ceph, establishing a Kubernetes-native way to run storage servers directly on a cluster. It turns local drives into dynamic volumes.

Enterprise Storage

Robin Storage

  • (2023) Robin Storage Operator [ADVANCED LEVEL] [COMMUNITY-TOOL] — The OperatorHub entry for Robin Storage, detailing an enterprise-grade SDS solution specialized in automating complex relational databases and stateful systems on Kubernetes.

Persistent Storage

AWS EFS Integration

💡 Explore Related: Kubernetes Storage | Kubernetes Alternatives | Kubernetes Client Libraries

Reference in New Issue View Git Blame Copy Permalink