---
name: framework-financial-services-shared-containers-openshift
title: Working with Red Hat OpenShift on IBM Cloud
description: If you want to use containers in either either the VPC or Satellite reference architectures, you should use Red Hat OpenShift on IBM Cloud. Red Hat OpenShift on IBM Cloud is a managed offering to create your own Red Hat OpenShift on IBM Cloud cluster of compute hosts to deploy and manage containerized apps on IBM Cloud. Red Hat OpenShift on IBM Cloud provides intelligent scheduling, self-healing, horizontal scaling, service discovery and load balancing, automated rollouts and rollbacks, and secret and configuration management for your apps. Combined with an intuitive user experience, built-in security and isolation, and advanced tools to secure, manage, and monitor your cluster workloads, you can rapidly deliver highly available and secure containerized apps in the public cloud.
last-updated: 2025-03-02
---

> ## Documentation Index
> The table of contents for this documentation set is at https://cloud.ibm.com/docs/framework-financial-services?format=markdown
> The index for all IBM Cloud docs is at: https://cloud.ibm.com/docs/llms.txt
> Use these files to discover more information as needed.

# Working with Red Hat OpenShift on IBM Cloud
{: #shared-containers-openshift}

If you want to use containers in either either the VPC or Satellite reference architectures, you should use [Red Hat OpenShift on IBM Cloud](https://cloud.ibm.com/docs/openshift?topic=openshift-getting-started&format=markdown). Red Hat OpenShift on IBM Cloud is a managed offering to create your own Red Hat OpenShift on IBM Cloud cluster of compute hosts to deploy and manage containerized apps on IBM Cloud. Red Hat OpenShift on IBM Cloud provides intelligent scheduling, self-healing, horizontal scaling, service discovery and load balancing, automated rollouts and rollbacks, and secret and configuration management for your apps. Combined with an intuitive user experience, built-in security and isolation, and advanced tools to secure, manage, and monitor your cluster workloads, you can rapidly deliver highly available and secure containerized apps in the public cloud.
{: shortdesc}



## Deploying Red Hat OpenShift on IBM Cloud
{: #deployment}

1. Install the CLI plugins for Red Hat OpenShift on IBM Cloud. For more information, see [Installing the Red Hat OpenShift on IBM Cloud CLI](https://cloud.ibm.com/docs/openshift?topic=openshift-kubernetes-service-cli&format=markdown).

2. Setup the API for Red Hat OpenShift on IBM Cloud. For more information, see [Setting up the API](https://cloud.ibm.com/docs/openshift?topic=openshift-cs_api_install&format=markdown).

3. Create your Red Hat OpenShift on IBM Cloud cluster. For more information, see [Creating a Red Hat OpenShift on IBM Cloud cluster in your VPC](https://cloud.ibm.com/docs/openshift?topic=openshift-vpc_rh_tutorial&format=markdown).

4. Install [Red Hat OpenShift on IBM Cloud Service Mesh](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-openshift-service-mesh&format=markdown) which is based on the open source [Istio](https://istio.io/){: external} project.

   Two of the most important reasons for using Red Hat OpenShift on IBM Cloud Service Mesh is to enable you to:

   * Encrypt network traffic between microservices running in your cluster. See [Data encryption in transit](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-encryption-in-transit&format=markdown) and [enable mTLS between containers](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-openshift-service-mesh&format=markdown#openshift-service-mesh-secure_services) for more details.
   * Implement gateways to specify which traffic you want to enter or leave the mesh (and deny all traffic by default). You can use an egress gateway to control/allowlist all necessary endpoints and domains that your application needs to connect to. For examples, see [Expose the app with the Istio Ingress Gateway and Route](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-openshift-service-mesh&format=markdown#openshift-service-mesh-ingress_gateway_route) and [Perform traffic management](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-openshift-service-mesh&format=markdown#openshift-service-mesh-traffic_management)

5. Set up Container Registry and Vulnerability Advisor. For more information, see [Container Registry and Vulnerability Advisor](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-development-processes&format=markdown#vpc-architecture-development-processes-registry-vulnerability-advisor).

6. Develop and deploy applications to your cluster. See the following for more details:
   * [Planning app deployments](https://cloud.ibm.com/docs/openshift?topic=openshift-plan_deploy&format=markdown) for more details.
   * [Service Mesh on Red Hat OpenShift on IBM Cloud](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-openshift-service-mesh&format=markdown)
   * [Deploying applications on Red Hat OpenShift on IBM Cloud Service Mesh](https://docs.openshift.com/container-platform/4.5/service_mesh/v1x/prepare-to-deploy-applications-ossm.html){: external}

## Related resources
{: #related-resources}



* [Security for Red Hat OpenShift on IBM Cloud](https://cloud.ibm.com/docs/openshift?topic=openshift-security&format=markdown)
* [Scalable web application on Red Hat OpenShift on IBM Cloud](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-scalable-webapp-openshift&format=markdown)
* [Deploy microservices with Red Hat OpenShift on IBM Cloud](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-openshift-microservices&format=markdown)

## Related controls in IBM Cloud Framework for Financial Services
{: #related-controls}

{{site.data.content.related-controls-disclaimer}}

| Family | Control |
|--------|---------|
| Identification and Authentication (IA) | [IA-2 (1) Identification and Authentication (organizational Users) | Multi-factor Authentication to Privileged Accounts](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ia-2.1&format=markdown) |
| System and Communications Protection (SC) | [SC-7 (5) Boundary Protection | Deny by Default / Allow by Exception](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-sc-7.5&format=markdown) \n [SC-8 Transmission Confidentiality and Integrity](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-sc-8&format=markdown) |
{: caption="Related controls in IBM Cloud Framework for Financial Services [FSv2.0]" caption-side="top"}
{: #related-controls-fsv2.0}
{: tab-title="FSv2.0"}
{: tab-group="RelatedControls-1"}
{: class="simple-tab-table"}


| Family | Control |
|--------|---------|
| Identification and Authentication (IA) | [IA-2 (1) Identification and Authentication (Organizational Users) | Network Access to Privileged Accounts](https://cloud.ibm.com/docs/framework-financial-services-controls-fsv1-1?topic=framework-financial-services-controls-fsv1-1-ia-2.1&format=markdown) |
| System and Communications Protection (SC) | [SC-7 (5) Boundary Protection | Deny by Default / Allow by Exception](https://cloud.ibm.com/docs/framework-financial-services-controls-fsv1-1?topic=framework-financial-services-controls-fsv1-1-sc-7.5&format=markdown) \n [SC-8 Transmission Confidentiality and Integrity](https://cloud.ibm.com/docs/framework-financial-services-controls-fsv1-1?topic=framework-financial-services-controls-fsv1-1-sc-8&format=markdown) |
{: caption="Related controls in IBM Cloud Framework for Financial Services [FSv1.1]" caption-side="top"}
{: #related-controls-fsv1.1}
{: tab-title="FSv1.1"}
{: tab-group="RelatedControls-1"}
{: class="simple-tab-table"}







## Next steps
{: #next-steps}

If using the VPC reference architecture, see [Storage for VPC reference architecture](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-vpc-architecture-storage&format=markdown).

If using the Satellite reference architecture, see [Storage for Satellite reference architecture](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-satellite-architecture-storage&format=markdown).