Site map

Getting started with Red Hat OpenShift on IBM Cloud

Getting started with Red Hat OpenShift on IBM Cloud

• Review the basics

• Prepare your account

• Create a cluster environment strategy

• Create a cluster

• Deploy a sample app

• What's next?

Understanding Red Hat OpenShift on IBM Cloud

Understanding Red Hat OpenShift on IBM Cloud

• What is Kubernetes?

• What are containers?

• What is Red Hat OpenShift?

• What compute host infrastructure does Red Hat OpenShift on IBM Cloud offer?

• What are the benefits of using the service?

• Comparison between Red Hat OpenShift and Kubernetes clusters

• Comparison between clusters that run in IBM Cloud and standard OCP

• Moving your workloads to IBM Cloud

• What kind of apps can I run? Can I move existing apps, or do I need to develop new apps?

• What skills should I have before I move my apps to a cluster?

• Related resources

Your responsibilities with using Red Hat OpenShift on IBM Cloud

Your responsibilities with using Red Hat OpenShift on IBM Cloud

• Overview of shared responsibilities

• Tasks for shared responsibilities by area

  • Incident and operations management

  • Change management

  • Identity and access management

  • Security and regulation compliance

  • Disaster recovery

  • Applications and data

Your responsibilities with using Red Hat OpenShift on Satellite

Your responsibilities with using Red Hat OpenShift on Satellite

• Overview of shared responsibilities

• Tasks for shared responsibilities by area

  • Incident and operations management

  • Change management

  • Identity and access management

  • Security and regulation compliance

  • Disaster recovery

  • Applications and data

Use cases

Overview of use cases

Financial services use cases for IBM Cloud

• Mortgage company trims costs and accelerates regulatory compliance

  • Context

  • Solution

  • Results

• Payment tech company streamlines developer productivity, deploying AI-enabled tools to their partners 4 times faster

  • Context

  • Solution

  • Results

Healthcare use cases for IBM Cloud

• Healthcare provider migrates workloads from inefficient VMs to Ops-friendly containers for reporting and patient systems

  • Context

  • Solution

  • Results

• Research nonprofit securely hosts sensitive data while it grows research with partners

  • Context

  • Solution

  • Results

Retail use cases for IBM Cloud

• Brick-and-mortar retailer shares data, by using APIs with global business partners to drive omnichannel sales

  • Context

  • Solution

  • Results

• Traditional grocer increases customer traffic and sales with digital insights

  • Context

  • Results

Transportation use cases for IBM Cloud

• Shipping company increases availability of worldwide systems for business partner ecosystem

  • Context

  • Solution

  • Results

• Airline delivers innovative Human Resources (HR) benefits site in under 3 weeks

  • Context

  • Solution

  • Results

Government use cases for IBM Cloud

• Regional government improves collaboration and velocity with community Developers who combine public-private data

  • Context

  • Solution

  • Results

• Large public port secures exchange of port data and shipping manifests that connect public and private organizations

  • Context

  • Solution

  • Results

Learning paths

Learning path for administrators

• Plan your environment

• Create a cluster

• Manage the network

• Secure your cluster

• Logging and monitoring

• Add a registry and CI/CD

• Add storage

• Add integrations

• Manage the lifecycle

Learning path for developers

• Access the cluster

• Plan your deployment

• Develop your app

• Deploy your app

• Test, log, and monitor

• Update your app

• Secure your app

• Expose your app

• Add app storage

• Add integrations

Release notes

Release notes

• April 2024

  • 24 April 2024

    • Red Hat OpenShift on IBM Cloud 4.15 is available.

    • Important networking changes for Red Hat OpenShift on IBM Cloud VPC clusters created with version 4.15.

    • Important changes to the default cluster provisioning behavior for new VPC clusters beginning with version 4.15.

    • Managing outbound traffic protection in new version 4.15 VPC clusters.

    • Red Hat CoreOS worker nodes are available for new VPC clusters beginning with version 4.15.

    • Red Hat OpenShift on IBM Cloud master and worker node fix packs.

    • IBM Cloud Object Storage plug-in version 2.2.25.

    • Red Hat OpenShift on IBM Cloud CLI version 1.0.617 is available.

  • 18 April 2024

    • Red Hat OpenShift on IBM Cloud CLI version 1.0.613 is available.

  • 09 April 2024

    • Worker node fix packs are available Red Hat OpenShift on IBM Cloud.

  • 03 April 2024

    • Red Hat OpenShift on IBM Cloud cluster autoscaler add-on patch updates.

    • Version 1.0.9 of the cluster autoscaler add-on is deprecated with an end of support date of 30 April 2024.

    • Image Key Synchronizer add-on patch update.

• March 2024

  • 27 March 2024

    • Master patch updates for Red Hat OpenShift on IBM Cloud clusters. Master patches are applied automatically over the course of several days. You can choose to use the ibmcloud ks cluster master update command yourself without waiting for the update automation to apply the patch. Review the change logs for your cluster version.

  • 25 March 2024

    • Worker node fix packs are available Red Hat OpenShift on IBM Cloud.

    • New! NVIDIA L40 GPU support. You can now create VPC clusters with worker nodes which have NVIDIA L40 GPUs.

  • 15 March 2024

    • Worker node fix packs are available Red Hat OpenShift on IBM Cloud.

    • Version 4.14 the default version for Red Hat OpenShift on IBM Cloud.

  • 08 March 2024

    • Block Storage for VPC add-on patch updates.

    • IBM Cloud File Storage for VPC add-on patch update.

  • 07 March 2024

    • Version 4.11 is no longer supported.

  • 06 March 2024

    • Red Hat OpenShift on IBM Cloud version 4.10 is no longer supported.

    • CLI version 1.0.601 is available.

• February 2024

  • 28 February 2024

    • Red Hat OpenShift on IBM Cloud cluster autoscaler version 1.2.1 is available.

    • Operators FAQ

    • Enable remote health monitoring with Telemetry

    • Master patch updates for Red Hat OpenShift on IBM Cloud clusters. Master patches are applied automatically over the course of several days. You can choose to use the ibmcloud ks cluster master update command yourself without waiting for the update automation to apply the patch. Review the change logs for your cluster version.

  • 27 February 2024

    • Worker node fix packs are available Red Hat OpenShift on IBM Cloud.

    • CLI version 1.0.597 is available.

  • 26 February 2024

    • New! NVIDIA L4 GPU support. You can now create VPC clusters with worker nodes which have NVIDIA L4 GPUs.

    • New worker node flavors are available with L4 GPUs.

  • 22 February 2024

    • IBM Cloud Object Storage plug-in version 2.2.24.

  • 21 February 2024

    • Red Hat OpenShift on IBM Cloud cluster autoscaler add-on patch updates 1.0.9_377 and 1.2.0_365.

  • 16 February 2024

    • A new tutorial is available for creating a small Red Hat OpenShift cluster on VPC.

    • Red Hat OpenShift on IBM Cloud cluster autoscaler add-on patch update 1.1.0_362.

  • 13 February 2024

    • Worker node fix packs are available Red Hat OpenShift on IBM Cloud.

  • 08 February 2024

    • CLI version 1.0.595 is available.

    • Block Storage for VPC add-on versions 5.2.15_501 and 5.1.21_506 are available.

    • IBM Cloud File Storage for VPC add-on version 1.2.6_130 is available.

  • 01 February 2024

    • Master fix packs are available for Red Hat OpenShift on IBM Cloud

    • Red Hat OpenShift on IBM Cloud cluster autoscaler add-on patch update 1.0.8_346.

• January 2024

  • 30 January 2024

    • Worker node fix packs are available.

  • 29 January 2024

    • IBM Cloud Object Storage plug-in version 2.2.23.

  • 19 January 2024

    • CLI version 1.0.589 is available.

    • OpenShift Data Foundation add-on version 4.14.0.

  • 17 January 2024

    • Worker node fix packs are available.

  • 16 January 2024

    • Cluster autoscaler add-on patch updates 1.2.0_322 and 1.0.9_328.

    • Image Key Synchronizer add-on version 1.0.0_2015.

  • 10 January 2024

    • Subscribe to the IBM Cloud documentation release notes via RSS.

    • IBM Cloud File Storage for VPC cluster add-on patch update 1.2.5_107.

    • Block Storage for VPC cluster add-on patch updates 5.2.14_485 and 5.1.19_486.

  • 8 January 2024

    • OpenShift Data Foundation add-on version 4.13.9.

  • 2 January 2024

    • Worker node fix packs are available.

• December 2023

  • 18 December 2023

    • Worker node fix packs are available.

  • 15 December 2023

    • New APIs for setting and getting the OAuth access type for private-only VPC clusters.

  • 14 December 2023

    • Information on worker node removal priority.

    • Kubernetes version 1.24 is unsupported.

  • 13 December 2023

    • Red Hat OpenShift on IBM Cloud 4.14.

    • Networking changes for VPC clusters 4.14 and later.

    • Red Hat OpenShift OAuth and console access changes for cluster version 4.14.

    • Master fix pack and worker node fix pack update.

    • Certified Kubernetes

  • 12 December 2023

    • Updating the global pull secret in Satellite clusters

  • 11 December 2023

    • Red Hat OpenShift on IBM Cloud version 4.11 is deprecated.

  • 6 December 2023

    • Master fix packs are available.

  • 4 December 2023

    • Worker node fix packs are available.

• November 2023

  • 29 November 2023

    • Worker node fix packs are available.

    • OpenShift Data Foundation add-on versions 4.10.32, 4.11.12, and 4.12.13.

  • 27 November 2023

    • The Beta File Storage for VPC cluster add-on is now available to all accounts.

    • Cluster autoscaler add-on patch updates 1.2.0_290, 1.0.9_290, 1.0.8_292, and 1.0.7_291.

    • Block Storage for VPC add-on versions 5.0.23_437 and 5.1.16_446, and 5.2.11_447.

    • IBM Cloud File Storage for VPC add-on patch 1.1.10_93 and 1.2.3_97.

    • You can now apply your Red Hat OpenShift entitlement to Satellite clusters and worker pools.

  • 20 November 2023

    • You can now specify a custom pod subnet size when creating a VPC cluster.

    • IBM Cloud Object Storage plug-in version 2.2.22.

  • 15 November 2023

    • The cluster autoscaler add-on now supports version 1.28 clusters.

    • Master fix packs are available.

  • 13 November 2023

    • IBM Cloud Object Storage plug-in version 2.2.21.

    • Block Storage for VPC add-on versions 5.0.21_401 and 5.1.15_419, and 5.2.10_428.

    • Cluster autoscaler add-on patch updates 1.0.9_195, 1.0.8_233, and 1.0.7_185.

    • IBM Cloud File Storage for VPC add-on patch 1.1.9_87.

  • 10 November 2023

    • Updated sorting and formatting for the Classic and VPC cluster flavor pages.

  • 9 November 2023

    • Worker node fix packs are available.

  • 7 November 2023

    • CLI version 1.0.579 is available.

• October 2023

  • 31 October 2023

    • VNI functionality for limiting access to File Storage for VPC by node, zone, worker pool and more.

    • IBM Cloud File Storage for VPC add-on version 1.2.

  • 30 October 2023

    • IBM Cloud Object Storage plug-in version 2.2.20

    • Setting up alerts for Block Storage for Classic PVs with limited network connectivity.

  • 25 October 2023

    • Master fix packs are available.

    • Cloud Image Key Synchronizer add-on version 1.0.0_1936.

  • 23 October 2023

    • Worker node fix packs are available.

    • Ingress ALB version 1.8.4_5586_ikss

  • 18 October 2023

    • Cloud Image Key Synchronizer add-on version 1.0.0_1921.

  • 17 October 2023

    • Ingress ALB versions 1.8.1_5543_iks, 1.6.4_5544_iks, and 1.5.1_5542_iks

  • 11 October 2023

    • Ingress ALB versions 1.5.1_5436_iks, 1.6.4_5435_iks, and 1.8.1_5434_iks

    • IBM Cloud Object Storage plug-in version 2.2.19

  • 10 October 2023

    • CLI version 1.0.573 is available.

    • Best practices for OpenShift Data Foundation

  • 9 October 2023

    • Worker node fix packs are available.

  • 4 October 2023

    • Cluster autoscaler add-on version 1.0.9_134.

  • 3 October 2023

    • Cloud Image Key Synchronizer add-on version 1.0.0_1831.

• September 2023

  • 27 September 2023

    • Worker node fix packs are available.

  • 25 September 2023

    • Block Storage for VPC add-on version 5.2.

  • 20 September 2023

    • Master fix packs are available.

  • 18 September 2023

    • CLI version 1.0.566 is available.

  • 15 September 2023

    • Cluster autoscaler add-on versions 1.0.9_103,1.0.8_104, and 1.0.7_102.

  • 14 September 2023

    • IBM Cloud File Storage for VPC add-on version 1.1.7_49

    • Block Storage for VPC add-on versions 5.0.19_358 and 5.1.13_345.

  • 12 September 2023

    • Worker node fix packs are available.

  • 7 September 2023

    • IBM Cloud Object Storage plug-in version 2.2.18

• August 2023

  • 30 August 2023

    • Master fix packs are available.

  • 29 August 2023

    • New! Madrid multizone region

    • Worker node fix packs are available.

  • 15 August 2023

    • Worker node fix packs are available.

  • 7 August 2023

    • Cluster autoscaler add-on versions 1.0.9_81,1.0.8_82, and 1.0.7_83.

  • 3 August 2023

    • CIS benchmarks for Red Hat OpenShift version 4.13.

  • 1 August 2023

    • Worker node fix packs are available.

    • Block Storage for VPC add-on versions 5.0.17_266 and 5.1.12_285.

• July 2023

  • 28 July 2023

    • Master fix packs are available.

    • IBM Cloud Object Storage plug-in version 2.2.17.

  • 27 July 2023

    • IBM Cloud File Storage for VPC add-on version 1.1.6

  • 24 July 2023

    • Cluster autoscaler add-on version 1.0.9_70.

    • Static route add-on version 1.0.0_1122.

  • 21 July 2023

    • Cluster autoscaler add-on update command.

  • 19 July 2023

    • CLI version 1.0.540 is available.

  • 17 July 2023

    • Worker node fix packs 4.9.59_1596_openshift, 4.10.63_1576_openshift, 4.11.44_1563_openshift, 4.12.24_1551_openshift, and 4.13.4_1526_openshift.

  • 13 July 2023

    • Cloud Image Key Synchronizer add-on version 1.0.0_1701.

  • 11 July 2023

    • New! OpenShift Data Foundation add-on version 4.13.0.

  • 6 July 2023

    • Cluster autoscaler add-on version 1.0.8_56 and 1.0.7_57.

    • Pod security admission updates

  • 3 July 2023

    • IBM Cloud Object Storage plug-in version 2.2.16

    • IBM Cloud File Storage for VPC add-on version 1.1

    • Worker node fix packs 4.9.59_1595_openshift, 4.10.62_1575_openshift, 4.11.43_1562_openshift, 4.12.22_1550_openshift, and 4.13.4_1525_openshift.

• June 2023

  • 28 June 2023

    • New! OpenShift Data Foundation add-on versions 4.12.6, 4.11.12, 4.10.27, and 4.9.29.

  • 27 June 2023

    • Master fix packs 4.9.59_1594_openshift, 4.10.61_1574_openshift, 4.11.42_1561_openshift, 4.12.20_1549_openshift, and 4.13.0_1524_openshift.

    • Compliance Operator benchmarks

  • 26 June 2023

    • CLI version 1.0.528.

  • 22 June 2023

    • Cluster autoscaler add-on version 1.0.9_44.

    • Certified Kubernetes

  • 21 June 2023

    • Block Storage for VPC add-on versions 5.0.16_127 and 5.1.11_126.

  • 20 June 2023

    • Worker node fix pack updates

  • 19 June 2023

    • IBM Cloud Object Storage plug-in version 2.2.15

  • 15 June 2023

    • Cloud Image Key Synchronizer add-on version 1.0.0_1633.

  • 14 June 2023

    • New! Red Hat OpenShift on IBM Cloud 4.13

    • New! Red Hat OpenShift console access for cluster version 4.13

    • Master fix pack and worker node fix pack update

    • Remote health monitoring

  • 9 June 2023

    • New! OpenShift Data Foundation add-on versions 4.12.5, 4.11.11, 4.10.26, and 4.9.28.

  • 5 June 2023

    • Worker node fix packs 4.9.59_1592_openshift, 4.10.60_1571_openshift, 4.11.42_1558_openshift, and 4.12.19_1546_openshift.

• May 2023

  • 31 May 2023

    • Master fix packs 4.9.59_1591_openshift, 4.10.59_1570_openshift, 4.11.39_1557_openshift, and 4.12.16_1545_openshift.

  • 25 May 2023

    • CLI version 1.0.523.

  • 24 May 2023

    • Worker node fix packs 4.9.59_1590_openshift, 4.10.59_1569_openshift, 4.11.40_1556_openshift, and 4.12.16_1544_openshift.

  • 16 May 2023

    • IBM Cloud File Storage for VPC add-on version 1.0.

  • 15 May 2023

    • Cluster autoscaler add-on versions 1.0.6_1077, 1.0.7_1076, 1.0.8_1078, and 1.1.0_1066.

    • IBM Cloud File Storage for VPC add-on version 1.1-beta

    • Block Storage for VPC add-on versions 5.0.12_1963 and 5.1.8_1970.

  • 10 May 2023

    • Create Classic and VPC clusters with Terraform

  • 9 May 2023

    • Worker node fix packs 4.9.59_1588_openshift, 4.10.59_1566_openshift, 4.11.39_1554_openshift, and 4.12.15_1542_openshift.

  • 5 May 2023

    • New! OpenShift Data Foundation add-on versions 4.12.4, 4.11.10, 4.10.24, 4.9.26, and 4.8.31.

  • 2 May 2023

    • Cloud Image Key Synchronizer add-on version 1.0.0_1523.

    • Master fix pack 4.12.13_1540_openshift.

    • IBM Cloud Object Storage plug-in version 2.2.14

• April 2023

  • 27 April 2023

    • Master fix packs 4.8.57_1600_openshift, 4.9.59_1587_openshift, 4.10.56_1565_openshift, 4.11.35_1552_openshift, and 4.12.11_1538_openshift.

  • 26 April 2023

    • Cluster autoscaler add-on version 1.1.0_1060.

  • 24 April 2023

    • Worker node fix packs 4.8.57_1600_openshift, 4.9.59_1587_openshift, 4.10.57_1565_openshift, 4.11.37_1553_openshift, and 4.12.13_1539_openshift.

  • 11 April 2023

    • CLI version 1.0.510.

    • Worker node fix packs 4.8.57_1598_openshift, 4.9.59_1585_openshift, 4.10.55_1563_openshift, 4.11.34_1550_openshift, and 4.12.10_1536_openshift.

  • 5 April 2023

    • Cluster autoscaler add-on versions 1.0.6_1010, 1.0.7_1021, and 1.0.8_1016.

    • Block Storage for VPC add-on versions 5.0.10_1869 and 5.1.6_1872.

  • 3 April 2023

    • Pod Security admission

    • IBM Cloud Object Storage plug-in version 2.2.13

• March 2023

  • 29 March 2023

    • Block Storage for VPC add-on versions 5.0.9_1862 and 5.1.5_1857.

    • Cluster autoscaler add-on versions 1.0.7_988 and 1.0.8_987.

  • 28 March 2023

    • Master fix packs 4.8.57_1596_openshift, 4.9.57_1583_openshift, 4.10.53_1561_openshift, 4.11.31_1548_openshift, and 4.12.7_1534_openshift.

    • Worker node fix packs 4.8.57_1597_openshift, 4.9.57_1584_openshift, 4.10.54_1562_openshift, 4.11.32_1549_openshift, and 4.12.8_1535_openshift.

  • 21 March 2023

    • New troubleshooting steps for workers in Critical or NotReady state.

  • 20 March 2023

    • IBM Cloud Object Storage plug-in version 2.2.12.

  • 16 March 2023

    • Cluster autoscaler add-on version 1.1.0_978.

    • New! OpenShift Data Foundation add-on version 4.12.0.

  • 14 March 2023

    • Worker node fix packs 4.8.57_1594_openshift, 4.9.57_1580_openshift, 4.10.52_1559_openshift, 4.11.30_1547_openshift, and 4.12.6_1531_openshift.

  • 9 March 2023

    • Cluster autoscaler add-on version 1.0.8_968

  • 7 March 2023

    • Worker node fix packs 4.8.57_1593_openshift, 4.9.56_1579_openshift, 4.10.52_1558_openshift, 4.11.28_1546_openshift, and 4.12.4_1530_openshift.

    • Cluster autoscaler add-on version 1.0.6_955 and 1.0.7_956.

    • Block Storage for VPC add-on versions 4.4.17_1829, 5.0.7_1836, and 5.1.2_1828.

  • 3 March 2023

    • IBM Cloud Object Storage plug-in version 2.2.10.

  • 1 March 2023

    • CLI version 1.0.498.

    • Cloud Image Key Synchronizer add-on version 1.0.0_1362.

• February 2023

  • 27 February 2023

    • New! Red Hat OpenShift on IBM Cloud 4.12

    • Master fix pack and worker node fix pack update

    • Worker node fix packs 4.8.57_1590_openshift, 4.9.56_1576_openshift, 4.10.52_1556_openshift, 4.11.28_1543_openshift, and 4.12.4_1528_openshift.

  • 21 February 2023

    • IBM Cloud Object Storage plug-in version 2.2.10.

    • Block Storage for VPC add-on versions 4.4.17_1829, 5.0.7_1836, and 5.1.2_1828.

  • 17 February 2023

    • Cluster autoscaler add-on version 1.0.7_944.

  • 14 February 2023

    • Istio add-on 1.15.5 and 1.16.2

  • 13 February 2023

    • IBM Cloud Object Storage plug-in version 2.2.9 is available.

    • Worker node fix packs 4.8.57_1589_openshift, 4.9.54_1575_openshift, 4.10.51_1555_openshift, and 4.11.26_1542_openshift.

  • 10 February 2023

    • New troubleshooting doc for how to recover after deleting a portable subnet in Classic clusters.

  • 9 February 2023

    • Block Storage for VPC add-on version 5.1.

  • 8 February 2023

    • Cloud Image Key Synchronizer add-on version 1.0.0_1329.

  • 2 February 2023

    • Istio add-on 1.14

  • 1 February 2023

    • Persistent VPC load balancers

    • Customized VPC load balancer health checks

• January 2023

  • 30 January 2023

    • Master fix packs 4.8.57_1587_openshift, 4.9.54_1573_openshift, 4.10.47_1553_openshift, and 4.11.25_1540_openshift.

    • Worker node fix packs 4.8.57_1588_openshift, 4.9.54_1574_openshift, 4.10.50_1554_openshift, and 4.11.25_1541_openshift.

    • New! Optional secondary disks for worker nodes in VPC clusters.

    • CLI version 1.0.489.

  • 24 January 2023

    • CLI version 1.0.487 change log update

    • Block Storage for VPC add-on versions 4.4.16_1779 and 5.0.5_1784.

    • Cluster autoscaler add-on version 1.0.7_940.

  • 23 January 2023

    • IBM Cloud Object Storage plug-in version 2.2.8 is available.

  • 16 January 2023

    • Worker node fix packs 4.11.22_1538_openshift, 4.10.47_1551_openshift, 4.9.54_1571_openshift, 4.8.55_1586_openshift.

  • 10 January 2023

    • Block Storage for VPC add-on versions 4.4.15_1764 and 5.0.4_1773

    • Istio add-on versions 1.14.6, 1.15.4, and 1.16.1

  • 9 January 2023

    • Cluster autoscaler add-on versions 1.0.5_898, 1.0.6_899, 1.0.7_900, and 1.1.0_897.

  • 5 January 2023

    • IBM Cloud Object Storage plug-in version 2.2.7 is available.

  • 2 January 2023

    • Worker node fix packs 4.11.20_1537_openshift, 4.10.45_1550_openshift, 4.9.53_1570_openshift, 4.8.55_1585_openshift, 4.7.60_1594_openshift

• December 2022

  • 19 December 2022

    • Worker node fix packs 4.11.18_1536_openshift, 4.10.45_1549_openshift, 4.9.53_1569_openshift, 4.8.54_1584_openshift, 4.7.60_1593_openshift

  • 15 December 2022

    • IBM Cloud Object Storage plug-in version 2.2.6 is available.

    • Cloud Image Key Synchronizer add-on version 1.0.0_1269

  • 14 December 2022

    • Master fix pack 4.7.60_1592_openshift, 4.8.54_1583_openshift, 4.9.52_1568_openshift, 4.10.43_1548_openshift, and 4.11.17_1535_openshift

    • CLI version 1.0.480 change log update

  • 12 December 2022

    • Changes to cluster config for Satellite clusters

  • 9 December 2022

    • IBM Cloud Object Storage plug-in version 2.2.5 is available.

  • 5 December 2022

    • IBM Cloud Object Storage plug-in version 2.2.4 is available.

    • Worker node fix packs 4.11.13_1534_openshift, 4.10.41_1547_openshift, 4.9.52_1567_openshift, 4.8.52_1582_openshift, 4.7.60_1591_openshift

  • 1 December 2022

    • CLI version 1.0.471 change log update

• November 2022

  • 30 November 2022

    • Istio add-on version 1.16.0

    • Ingress ALB change log updates

    • Experimental: Installing OpenShift Data Foundation on private only, air-gapped clusters

  • 21 November 2022

    • Worker node fix pack 4.11.13_1533_openshift, 4.10.41_1546_openshift, 4.9.51_1566_openshift, 4.8.52_1581_openshift, 4.7.60_1590_openshift

  • 17 November 2022

    • Block Storage for VPC add-on versions 4.4.13_1712 and 5.0.2_1713

  • 16 November 2022

    • Master fix pack 4.7.59_1589_openshift, 4.8.52_1580_openshift, 4.9.51_1565_openshift, 4.10.39_1545_openshift, and 4.11.12_1532_openshift.

  • 15 November 2022

    • New Ingress status messages

    • IBM Cloud Object Storage plug-in version 2.2.3 is available.

  • 11 November 2022

    • Block Storage for VPC add-on version 4.3.8_1705

    • Worker node fix pack 4.11.12_1531_openshift, 4.10.39_1544_openshift, 4.9.51_1564_openshift

  • 10 November 2022

    • Istio add-on version 1.15.3

  • 9 November 2022

    • Block Storage for VPC add-on version 4.4.12_1700 and 5.0.1_1695

  • 8 November 2022

    • IBM Cloud Object Storage plug-in version 2.2.2 is available.

  • 7 November 2022

    • Worker node fix pack 4.11.12_1530_openshift, 4.10.39_1543_openshift, 4.9.51_1563_openshift, 4.8.52_1579_openshift, 4.7.59_1588_openshift, 4.6.61_1603_openshift

  • 3 November 2022

    • Changes to the Portworx update process beginning with version 2.12.

    • Cluster autoscaler add-on version 1.0.7_883.

• October 2022

  • 27 October 2022

    • Master fix pack 4.6.61_1605_openshift, 4.7.59_1587_openshift, 4.8.51_1578_openshift, 4.9.49_1561_openshift, 4.10.36_1541_openshift, and 4.11.8_1528_openshift.

    • Worker node fix pack 4.11.9_1529_openshift, 4.10.37_1542_openshift, and 4.9.50_1562_openshift

    • Cloud Image Key Synchronizer add-on version 1.0.0_1200

  • 26 October 2022

    • Worker node fix pack 4.11.9_1526_openshift, 4.10.37_1539_openshift, 4.9.50_1559_openshift, 4.8.51_1576_openshift, 4.7.59_1585_openshift, 4.6.61_1603_openshift

  • 25 October 2022

    • Istio add-on

  • 21 October 2022

    • CLI change log update

  • 12 October 2022

    • Istio add-on

  • 11 October 2022

    • Block Storage for VPC add-on version 5.0.

  • 10 October 2022

    • Worker node fix pack

    • Cluster autoscaler add-on version 1.0.6_828.

  • 5 October 2022

    • Red Hat Enterprise Linux version 8 is available for Red Hat OpenShift on IBM Cloud 4.9 and 4.10 clusters

  • 3 October 2022

    • CLI change log update

• September 2022

  • 30 September 2022

    • New! Enabling Flow logs for VPC components

  • 26 September 2022

    • Worker node fix pack

  • 23 September 2022

    • Block Storage for VPC add-on version 4.4.11_1614.

  • 22 September 2022

    • Cluster autoscaler add-on versions 1.1.0_798, 1.0.6_800, and 1.0.5_779.

    • Block Storage for VPC add-on version 4.3.7_1613.

  • 21 September 2022

    • CLI change log update

  • 20 September 2022

    • IBM Cloud Object Storage plug-in version 2.2.1 is available.

  • 13 September 2022

    • Block Storage for VPC add-on version 4.4.10_1578 is available.

    • New! vGPU worker node flavors are now available for VPC Gen 2.

  • 12 September 2022

    • Block Storage for VPC add-on version 4.3.6_1579 is available.

    • IBM Cloud Object Storage plug-in version 2.2.0 is available.

    • CLI change log update

  • 8 September 2022

    • CLI change log update

  • 7 September 2022

    • Master fix pack update

    • New! Pod security admission

• August 2022

  • 31 August 2022

    • Cluster autoscaler add-on

  • 29 August 2022

    • Worker node fix pack

  • 26 August 2022

    • CLI change log update

  • 25 August 2022

    • Block Storage for VPC add-on version 4.4.9_1566 is available.

  • 24 August 2022

    • Block Storage for VPC add-on version 4.3.5_1563 is available.

    • IBM Cloud Object Storage plug-in version 2.1.21 is available.

  • 17 August 2022

    • IBM Cloud Object Storage plug-in version 2.1.20 is available.

    • Cluster autoscaler add-on

  • 16 August 2022

    • Worker node fix pack

    • Istio add-on

  • 11 August 2022

    • Dynamically provision IBM Cloud Object Storage buckets with quotas enabled

  • 5 August 2022

    • CLI change log update

  • 3 August 2022

    • New! IBM Cloud File Storage for VPC CSI Driver (Beta)

  • 1 August 2022

    • Worker node fix pack

• July 2022

  • 27 July 2022

    • IBM Cloud Object Storage plug-in version 2.1.19 is available.

  • 26 July 2022

    • Master fix pack update

  • 22 July 2022

    • Version change log

    • Cluster autoscaler add-on

  • 19 July 2022

    • Cluster autoscaler add-on

  • 18 July 2022

    • Block Storage for VPC add-on.

    • Worker node fix pack

  • 15 July 2022

    • CLI change log update

    • Cluster autoscaler add-on

  • 14 July 2022

    • Cross-account encryption

    • IBM Cloud Object Storage plug-in

    • Block Storage for VPC add-on.

    • HPCS Router add-on

  • 13 July 2022

    • CLI change log update

    • Compliance Operator benchmarks

  • 11 July 2022

    • Worker node fix pack

  • 7 July 2022

    • HPCS Router add-on

    • Cloud Image Key Synchronizer add-on

  • 5 July 2022

    • Worker node fix pack

• June 2022

  • 30 June 2022

    • Cluster autoscaler add-on

  • 28 June 2022

    • IBM Cloud Object Storage plug-in

  • 27 June 2022

    • Block Storage for VPC

  • 24 June 2022

    • Block Storage for VPC

    • Block Storage for VPC add-on.

  • 22 June 2022

    • New! Portworx Cloud Drive support

  • 20 June 2022

    • Worker node fix pack

  • 17 June 2022

    • Block Storage for VPC add-on.

  • 15 June 2022

    • IBM Cloud Monitoring metrics and label updates

    • Block Storage for VPC add-on.

  • 13 June 2022

    • Block Storage for VPC add-on.

    • HPCS Router add-on

    • Cloud Image Key Synchronizer add-on

    • Block Storage for VPC add-on.

  • 9 June 2022

    • New! Kubernetes 1.24

    • Deprecated and unsupported Kubernetes versions

  • 7 June 2022

    • CLI change log update

  • 6 June 2022

    • Worker node fix pack

    • Version 3.11 is unsupported

  • 3 June 2022

    • Master fix pack update

• May 2022

  • 26 May 2022

    • CLI change log update

  • 25 May 2022

    • IBM Cloud Object Storage plug-in

    • Block Storage for VPC add-on.

    • Block Storage for VPC add-on.

  • 20 May 2022

    • Worker node fix pack

    • IBM Cloud Container Registry private IP address changes beginning 23 June 2022

    • New! Enable volume encryption in OpenShift Data Foundation by using Hyper Protect Crypto Services.

    • New! Version 4.10.0 of the OpenShift Data Foundation add-on is available.

  • 16 May 2022

    • Cluster autoscaler add-on

    • ALB OAuth Proxy add-on

  • 12 May 2022

    • Block Storage for VPC add-on.

  • 9 May 2022

    • Worker node fix pack

  • 6 May 2022

    • IBM Cloud Object Storage plug-in

  • 4 May 2022

    • HPCS Router add-on

    • Cloud Image Key Synchronizer add-on

• April 2022

  • 28 April 2022

    • CLI change log update

    • Certified Kubernetes

    • CIS Kubernetes Benchmark

    • Cluster security groups

  • 27 April 2022

    • New! Red Hat OpenShift on IBM Cloud 4.10

    • Master fix pack update

    • Worker node fix pack update

  • 26 April 2022

    • CLI change log update

  • 25 April 2022

    • Worker node fix pack

  • 13 April 2022

    • IBM Cloud Object Storage plug-in

  • 12 April 2022

    • New! Create clusters that use Red Hat CoreOS hosts in Satellite

    • Create and manage dedicated hosts in VPC Gen 2.

  • 11 April 2022

    • New! IBM Cloud® Secrets Manager

    • HPCS Router add-on

    • Cloud Image Key Synchronizer add-on

    • Block Storage for VPC add-on.

    • Worker node fix pack

  • 7 April 2022

    • Red Hat OpenShift on IBM Cloud clusters in Mexico City (MEX01) are deprecated and become unsupported later this year.

    • Red Hat OpenShift on IBM Cloud default version update.

    • CLI change log update

  • 6 April 2022

    • Master fix pack update

• March 2022

  • 30 March 2022

    • Cluster autoscaler add-on

  • 28 March 2022

    • Worker node fix pack update.

  • 24 March 2022

    • IBM Cloud Object Storage plug-in

    • Block Storage for VPC add-on.

    • HPCS Router add-on

    • Cloud Image Key Synchronizer add-on

  • 22 March 2022

    • Hong Kong (HKG02) and Seoul (SEO01) are deprecated and become unsupported later this year.

    • Ingress ALB change log updates

  • 21 March 2022

    • CLI change log update

  • 17 March 2022

    • Block Storage for VPC add-on.

  • 14 March 2022

    • Worker node fix pack update.

    • HPCS Router add-on

  • 11 March 2022

    • IBM Cloud Object Storage plug-in

  • 10 March 2022

    • Cluster autoscaler

    • IBM Cloud Object Storage plug-in

  • 9 March 2022

    • OpenShift Data Foundation

  • 8 March 2022

    • Master fix pack update.

• February 2022

  • 28 February 2022

    • Block Storage for VPC add-on.

    • Cluster autoscaler

    • HPCS Router add-on

    • Cloud Image Key Synchronizer add-on

    • Worker node fix pack

  • 24 February 2022

    • Container service CLI

  • 23 February 2022

    • Cluster autoscaler

  • 18 February 2022

    • Container service CLI

  • 17 February 2022

    • IBM Cloud Object Storage plug-in

  • 16 February 2022

    • HPCS Router add-on

  • 14 February 2022

    • Worker node fix pack

    • IBM Cloud Object Storage doc restructuring.

    • Block Storage for VPC add-on.

  • 10 February 2022

    • Certified Kubernetes

  • 9 February 2022

    • New! OpenShift 4.9

    • Master fix pack and worker node fix pack update

• January 2022

  • 31 January 2022

    • Version change log

    • New! Worker node flavor reference

  • 28 January 2022

    • New! Troubleshooting the Red Hat OpenShift console.

  • 27 January 2022

    • Block Storage for VPC add-on.

    • New! Gathering Ingress logs

  • 25 January 2022

    • HPCS Router add-on

    • Cloud Image Key Synchronizer add-on

  • 24 January 2022

    • IBM Cloud Object Storage plug-in

  • 20 January 2022

    • Cluster autoscaler add-on.

    • Block Storage for VPC add-on.

    • OpenShift Data Foundation

  • 18 January 2022

    • Review the release notes for January 2022.

    • New! Red Hat OpenShift on IBM Cloud CLI Map

    • Kubernetes Service 1.19, 1.20, 1.21, and 1.22 unsupported date change

    • Worker node fix pack update.

  • 17 January 2022

    • IBM Cloud Object Storage plug-in

  • 11 January 2022

    • HPCS Router add-on

    • Cloud Image Key Synchronizer add-on

  • 06 January 2022

    • Block Storage for VPC add-on.

    • Kubernetes Service 1.20 end of support date change

  • 4 January 2022

    • Worker node fix pack update

• December 2021

  • Review the release notes for December 2021.

  • 20 December 2021

    • Worker node fix pack update

  • 7 December 2021

    • Master fix pack update

  • 6 December 2021

    • Worker node fix pack update

  • 2 December 2021

    • Red Hat OpenShift on IBM Cloud default version update.

• November 2021

  • Review the release notes for November 2021.

  • 29 November 2021

    • Container service CLI

    • Red Hat OpenShift Ingress controller

    • Red Hat OpenShift Data Foundation

  • 22 November 2021

    • Worker node fix pack update

    • Block Storage for VPC add-on.

    • Cluster autoscaler add-on.

  • 19 November 2021

    • HPCS Router add-on

    • Cloud Image Key Synchronizer add-on

  • 18 November 2021

    • IBM Cloud Activity Tracker and IBM Cloud Activity Tracker

    • IBM Cloud Object Storage

  • 17 November 2021

    • Worker node fix pack update

  • 16 November 2021

    • HPCS Router add-on

  • 15 November 2021

    • CLI change log

  • 12 November 2021

    • Master fix pack updates

  • 10 November 2021

    • Worker node fix pack update

  • 8 November 2021

    • Update commands to use docker build

  • 4 November 2021

    • IAM trusted profiles for pod authorization

  • 2 November 2021

    • Istio add-on change log

• October 2021

  • Review the release notes for October 2021.

  • 28 October 2021

    • Istio add-on change log

  • 26 October 2021

    • CLI change log

  • 25 October 2021

    • Worker node fix pack update

  • 22 October 2021

    • IBM Cloud Object Storage plug-in.

  • 19 October 2021

    • Ingress ALB change log updates

  • 18 October 2021

    • New troubleshooting topic

    • IBM Cloud HPCS Router add-on

    • OpenShift Data Foundation

  • 13 October 2021

    • CLI change log

  • 11 October 2021

    • Unsupported Red Hat OpenShift version 4.5

    • Worker node fix pack update

  • 7 October 2021

    • Istio add-on change log

    • Cluster autoscaler add-on.

  • 6 October 2021

    • Block Storage for VPC add-on.

  • 5 October 2021

    • Updated supported, deprecated, and unsupported versions for strongSwan Helm chart.

    • IBM Cloud Image Key Synchronizer add-on change log.

    • IBM Cloud Object Storage plug-in.

• September 2021

  • Review the release notes for September 2021.

  • 29 September 2021

    • New! OpenShift 4.8

    • Deprecated and unsupported OpenShift versions

    • Master fix pack and worker node fix pack update

  • 27 September 2021

    • Master fix pack update

    • Worker node fix pack update

  • 23 September 2021

    • Review the release notes for 23 September 2021.

    • Istio add-on change log

  • 22 September 2021

    • Review the release notes for 22 September 2021.

    • Ingress ALB version change log

  • 21 September 2021

    • Review the release notes for 21 September 2021.

    • HPCS Router add-on

  • 16 September 2021

    • Block Storage for VPC add-on

  • 15 September 2021

    • Review the release notes for 16 September 2021.

    • OpenShift Data Foundation

  • 14 September 2021

    • Review the release notes for 14 September 2021.

    • Ingress ALB version change log

    • Istio add-on change log

  • 13 September 2021

    • Worker node fix pack update

  • 9 September 2021

    • Ingress ALB change log

  • 8 September 2021

    • Review the release notes for 8 September 2021.

    • HPCS Router add-on

  • 1 September 2021

    • Review the release notes for 1 September 2021.

    • Block Storage for VPC add-on

    • IBM Cloud Object Storage plug-in

• August 2021

  • Review the release notes for August 2021.

  • 31 August 2021

    • Review the release notes for 31 August 2021.

    • Istio add-on change log

    • New! Sao Paulo multizone region

  • 30 August 2021

    • Review the release notes for 30 August 2021.

    • Worker node fix pack update

  • 25 August 2021

    • New! Create a cluster with a template

    • IBM Cloud Object Storage plug-in

    • Master fix pack update change log documentation

  • 23 August 2021

    • Registry token update

    • Ingress change logs

    • HPCS Router

    • Image key synchronizer

  • 16 August 2021

    • Worker node versions

  • 10 August 2021

    • Ingress change logs

    • HPCS Router

    • Image key synchronizer

  • 9 August 2021

    • CLI change log

  • 2 August 2021

    • Ingress change logs

    • Worker node versions

• July 2021

  • 27 July 2021

    • New! IAM trusted profile support

    • Master versions

  • 26 July 2021

    • HPCS Router

    • Block Storage for VPC add-on

  • 23 July 2021

    • Image key synchronizer

  • 19 July 2021

    • Worker node versions

  • 12 July 2021

    • OpenShift Data Foundation doc restructuring.

  • 07 July 2021

    • OpenShift Data Foundation

  • 6 July 2021

    • Ingress change logs

    • Worker node versions

  • 2 July 2021

    • Unsupported Kubernetes version 1.17

• June 2021

  • From 07 to 31 July 2021, the DNS provider is changed from Cloudflare to Akamai for all containers.appdomain.cloud, containers.mybluemix.net, and containers.cloud.ibm.com domains for all clusters in Red Hat OpenShift on IBM Cloud. Review the following actions that you must make to your Ingress setup.

  • • If you currently allow inbound traffic to your classic cluster from the Cloudflare source IP addresses, you must also allow inbound traffic from the Akamai source IP addresses before 07 July. After the migration completes on 31 July, you can remove the Cloudflare IP address rules.
  • • The Akamai health check does not support verification of the body of the health check response. Update any custom health check rules that you configured for Cloudflare that use verification of the body of the health check responses.
  • • Cluster subdomains that were health checked in Cloudflare are now registered in the Akamai DNS as CNAME records. These CNAME records point to an Akamai Global Traffic Management domain that health checks the subdomains. When a client runs a DNS query for a health checked subdomain, a CNAME record is returned to the client, as opposed to Cloudflare, in which an A record was returned. If your client expects an A record for a subdomain that was health checked in Cloudflare, update your logic to accept a CNAME record.
  • • During the migration, an Akamai Global Traffic Management (GTM) health check was automatically created for any subdomains that had a Cloudflare health check. If you previously created a Cloudflare health check for a subdomain, and you create an Akamai health check for the subdomain after the migration, the two Akamai health checks might conflict. Note that Akamai GTM configurations don't support nested subdomains. In these cases, you can use the ibmcloud oc nlb-dns monitor disable command to disable the Akamai health check that the migration automatically configured for your subdomain.

  • 28 June 2021

    • Master versions

  • 24 June 2021

    • CLI change log

  • 23 June 2021

    • Cluster autoscaler add-on

  • 22 June 2021

    • IBM Cloud Object Storage plug-in

    • Worker node versions

  • 21 June 2021

    • Ingress change logs

    • New! The addon options command is now available

    • New! Deploy OpenShift Data Foundation on VPC clusters with a single command

    • New! OpenShift Container Storage is now OpenShift Data Foundation.

  • 17 June 2021

    • Image key synchronizer

  • 15 June 2021

    • New! Private VPC NLB

  • 9 June 2021

    • New! Red Hat OpenShift 4.7

    • Deprecated Red Hat OpenShift 4.5

    • Expanded Troubleshooting

  • 07 June 2021

    • Worker node versions

  • 3 June 2021

    • IBM Cloud Object Storage plug-in

  • 2 June 2021

    • HPCS Router

    • Image key synchronizer

  • 1 June 2021

    • Unsupported version

• May 2021

  • 26 May 2021

    • CLI change log

    • Version 0.45.0 of the Kubernetes Ingress image

  • 24 May 2021

    • Master versions

    • Worker node versions

  • 17 May 2021

    • Deprecated: Kubernetes web terminal.

  • 11 May 2021

    • VPC cluster healthchecks

  • 10 May 2021

    • New! Portworx Backup is now available

    • Cluster autoscaler add-on

    • IBM Cloud Object Storage plug-in

    • Worker node versions

  • 4 May 2021

    • Master versions

• April 2021

  • 30 April 2021

    • CIS Kubernetes Benchmark

  • 28 April 2021

    • Default version

    • Image key synchronizer

  • 27 April 2021

    • Master versions

  • 26 April 2021

    • CLI change log

    • Red Hat OpenShift Container Storage

    • VPC NLB

    • Worker node versions

  • 22 April 2021

    • HPCS Router

  • 20 April 2021

    • New! Toronto multizone region for VPC

  • 19 April 2021

    • add-on change logs

    • Cluster autoscaler add-on

    • IBM Cloud Object Storage plug-in

  • 16 April 2021

    • New fields and events for Activity Tracker

  • 15 April 2021

    • New! Red Hat OpenShift Container Storage add-on

    • Supported add-ons

    • Accessing VPC clusters

  • 14 April 2021

    • IBM Cloud HPCS Router add-on

    • IBM Cloud Image Key Synchronizer add-on

  • 12 April 2021

    • Worker node versions

  • 5 April 2021

    • Deprecated data centers for classic clusters

  • 2 April 2021

    • Master versions

  • 1 April 2021

    • Cluster autoscaler add-on

    • Block Storage for VPC add-on

    • Block Storage for VPC driver

    • New! image security add-on

• March 2021

  • 31 March 2021

    • Compliance operator

  • 30 March 2021

    • add-on change logs

    • Master versions

  • 29 March 2021

    • Worker node versions

  • 25 March 2021

    • CIS Kubernetes Benchmark

    • CRI-O container runtime

    • Certificate Manager instances

  • 22 March 2021

    • Ingress updates

  • 17 March 2021

    • Deprecated events to be replaced for Activity Tracker

    • Deprecated fields across events

  • 16 March 2021

    • Ingress ALB change log

  • 12 March 2021

    • Worker node versions

  • 9 March 2021

    • Cluster autoscaler add-on

  • 7 March 2021

    • Unsupported version

  • 5 March 2021

    • Trusted images

  • 1 March 2021

    • CLI change log

    • New! General availability of IBM Cloud Satellite®

    • Exposing apps in Satellite clusters

    • Worker node versions

• February 2021

  • 27 February 2021

    • Master versions

  • 26 February 2021

    • Block Storage for VPC add-on

  • 25 February 2021

    • CLI change log

  • 23 February 2021

    • VPE

  • 22 February 2021

    • Master versions

  • 20 February 2021

    • Certified Kubernetes

  • 17 February 2021

    • New! Red Hat OpenShift 4.6

    • Deprecated Red Hat OpenShift 4.4

  • 15 February 2021

    • New! Osaka multizone region

    • Worker node versions

  • 12 February 2021

    • Gateway firewalls and Calico policies

  • 10 February 2021

    • Ingress ALB change log

    • Gateway firewalls and Calico policies

  • 8 February 2021

    • CLI change log

  • 4 February 2021

    • Worker node modifications

  • 1 February 2021

    • Unsupported: Kubernetes version 1.16

    • Worker node versions

• January 2021

  • 27 January 2021

    • Block Storage for VPC add-on

  • 25 January 2021

    • New! Red Hat OpenShift Do (odo) CLI tutorial

    • New! Private service endpoint allowlists

    • Private Kubernetes Ingress

  • 19 January 2021

    • Ingress ALB change log

    • Master versions

  • 18 January 2021

    • Knative add-on is unsupported

    • Worker node versions

  • 14 January 2021

    • Cluster autoscaler

  • 12 January 2021

    • Ingress resources

    • Kubernetes benchmarks

    • Removal of data center support

  • 6 January 2021

    • Master versions

• December 2020

  • 21 December 2020

    • Gateway firewalls and Calico policies

    • Worker node versions

  • 18 December 2020

    • CLI change log

    • IBM Cloud Object Storage plug-in

  • 17 December 2020

    • Audit documentation

    • Back up and restore

  • 15 December 2020

    • Cluster autoscaler

  • 14 December 2020

    • Encrypted images

    • Master versions

  • 11 December 2020

    • Storage add-ons

    • strongSwan versions

  • 9 December 2020

    • Accessing clusters

    • CLI change log

    • Proxy protocol for Ingress

    • Helm version 2 unsupported

  • 7 December 2020

    • Key Protect enhancements

    • Worker node versions

  • 3 December 2020

    • Cluster autoscaler add-on

  • 2 December 2020

    • Default version

• November 2020

  • 25 November 2020

    • New! IBM Cloud HPCS Router

  • 24 November 2020

    • New! Reservations to reduce classic worker node costs

  • 23 November 2020

    • Worker node versions

  • 20 November 2020

    • New! Portieris for image security enforcement

  • 19 November 2020

    • Ingress ALB change log

  • 18 November 2020

    • CLI change log

    • New! Block Storage for VPC change log

  • 16 November 2020

    • New! GPU support in Red Hat OpenShift 4

    • Master versions

  • 13 November 2020

    • IBM Cloud Activity Tracker and IAM events

  • 9 November 2020

    • New! Reduced and hourly billing is available for OCP licenses

    • Worker node versions

  • 5 November 2020

    • Block Storage for VPC

    • Classic-enabled VPCs

    • Disabling remote health reporting

    • Gateway firewalls and Calico policies

  • 2 November 2020

    • Persistent storage

    • Version 4 Ingress

• October 2020

  • 26 October 2020

    • Master versions

    • Worker node versions

  • 22 October 2020

    • API key

  • 16 October 2020

    • Gateway firewalls and Calico policies

    • Object Storage

  • 13 October 2020

    • New! Certified Red Hat OpenShift version 4.5

    • Deprecated: Red Hat OpenShift version 4.3

    • Version change logs

    • VPC load balancer

    • VPC security groups

    • Object Storage in VPC Gen 2

  • 12 October 2020

    • Versions

  • 8 October 2020

    • Ingress ALB change log

  • 6 October 2020

    • CLI change log

    • Ingress secret expiration synchronization

    • Internal Red Hat OpenShift container image registry

  • 1 October 2020

    • Default version

    • Ingress ALB change log

• September 2020

  • 30 September 2020

    • Versions

  • 29 September 2020

    • Gateway firewalls and Calico policies

  • 26 September 2020

    • Versions

  • 24 September 2020

    • CLI change log

  • 23 September 2020

    • Ingress ALB change log

    • New! Reservations and limits for PIDs

  • 22 September 2020

    • Unsupported: Kubernetes version 1.15

  • 21 September 2020

    • Versions

    • Versions

  • 3 September 2020

    • CA certificate rotation

Tutorials library for OpenShift

Tutorials library for OpenShift

Setting up your first classic cluster in the CLI

Setting up your first classic cluster in the CLI

• Audience

• Objectives

• What you'll get

• Overview of cluster resources

• Prerequisites

• Create a Red Hat OpenShift on IBM Cloud cluster

• Navigate the Red Hat OpenShift console

• Deploy an app to your cluster

• Clean up the tutorial resources

• What's next?

Setting up your first cluster in your Virtual Private Cloud (VPC)

Setting up your first cluster in your Virtual Private Cloud (VPC)

• Audience

• Objectives

• What you'll get

• Prerequisites

• Create a cluster in a VPC

• Deploy an app to your cluster

• Set up a VPC load balancer to expose your app publicly

• What's next?

Creating a 2 node OpenShift cluster on VPC infrastructure by using Schematics

Creating a 2 node OpenShift cluster on VPC infrastructure by using Schematics

• Audience

• What you'll get

• Create a Schematics workspaces

• Generate, review, and apply the Schematics plan

• Access your OpenShift cluster

• Optional: Clean up the resources

Installing Red Hat OpenShift AI

Installing Red Hat OpenShift AI

• Before you begin

• Optional. Install the Red Hat OpenShift Pipelines Operator

• Install the OpenShift AI Operator

• Install the Node Feature Discovery Operator

• Install the NVIDIA GPU Operator

• Check installed operators

• What's next?

Planning to create clusters

Creating a cluster environment strategy

• Decide how many clusters to create

• Select a cluster type

• Define a cluster naming strategy

• Decide how many worker nodes for each cluster

• Select worker node flavors

• Determine worker node capacity for the resources

• Choose how many namespaces to create within the cluster

• Establish resource requests and limits for the namespaces

Planning your cluster for high availability

• High availability at different levels

• Resource distribution for high availability

• Single zone clusters

• Multizone clusters

  • Multizone cluster FAQ

• Multiple public clusters connected with a global load balancer

  • Why do I need 3 clusters in three zones?

  • What if I want to set up multiple clusters across regions?

  • What options do I have to load balance workloads across multiple clusters?

  • What if I want to load balance workloads on the private network?

Planning your worker node setup

• Worker node FAQs

  • What hardware options are available to me?

  • Which operating systems are available?

  • Can I combine different flavors in a cluster?

  • How can I change worker node flavors?

  • Are the worker nodes encrypted?

  • How do I manage my worker nodes?

  • What storage options are available on worker nodes?

  • What limitations do I need to be aware of?

  • What operations are blocked if my worker node is running an unsupported operating system?

  • Why do my worker nodes have the master role?

• Virtual machines

  • Planning considerations for VMs

  • Available flavors for VMs

• Physical machines (bare metal)

  • Planning considerations for bare metal

  • Available flavors for bare metal

• Software-defined storage (SDS) machines

  • Planning considerations for SDS

  • Available flavors for SDS

• Worker node resource reserves

Understanding VPC cluster networking

• Worker-to-worker communication using VPC subnets

• Worker-to-master and user-to-master communication using Virtual private endpoints or cloud service endpoints

• Worker-to-master communication in VPC clusters

• User-to-master communication in VPC clusters

• Worker communication to other services or networks

• Communication with other IBM Cloud services over the private or public network

• Communication with resources in on-premises data centers

  • Communication with resources in other VPCs

  • Communication with IBM Cloud classic resources

• External communication to apps that run on worker nodes

• Private traffic to cluster apps

• Public traffic to cluster apps

• Example scenarios for VPC cluster network setups

  • Scenario: Run internet-facing app workloads in a VPC cluster

  • Worker-to-worker communication

  • Worker-to-master and user-to-master communication

  • Worker communication to other services or networks

  • External communication to apps that run on worker nodes

• Extend your on-premises data center to a VPC cluster

  • Worker-to-worker communication

  • Worker-to-master and user-to-master communication

  • Worker communication to other services or networks

  • External communication to apps that run on worker nodes

Understanding Classic cluster networking

• Worker-to-worker communication: classic VLANs and subnets

  • VLAN connections for worker nodes

  • Worker node communication across subnets and VLANs

• Worker-to-master and user-to-master communication: Service endpoints

  • Public service endpoint only

  • Public and private cloud service endpoints

• Worker communication to other IBM Cloud services or on-premises networks

  • Communication with other IBM Cloud services over the private or public network

  • IBM Cloud® Direct Link for communication over the private network with resources in on-premises data centers

  • strongSwan IPSec VPN connection for communication over the public network with resources in on-premises data centers

• External communication to apps that run on worker nodes

  • Private traffic to cluster apps

  • Public traffic to cluster apps

• Scenario: Running internet-facing app workloads in a classic cluster

  • Worker-to-worker communication in classic clusters with internet-facing workloads

  • Worker-to-master and user-to-master communication in classic clusters with internet-facing workloads

  • Worker communication to other services or networks with internet-facing workloads

  • External communication to apps that run on worker nodes with internet-facing workloads

• Scenario: Allow limited public connectivity with a gateway appliance

  • Worker-to-worker communication, worker-to-master and user-to-master communication with a gateway appliance

  • Worker communication to other services or networks with a gateway appliance

  • External communication to apps that run on worker nodes with a gateway appliance

Encryption overview

• Control plane

• Worker node disks

• Cluster secrets

• Persistent storage

• Next steps

Red Hat OpenShift on IBM Cloud storage overview

• Non-persistent storage options

• Single zone clusters

• Multizone clusters

Documenting your environment architecture

• Step 1: Understanding your app and architecture

  • Example 1: A basic app running in a single OpenShift cluster

  • Example 2: A multi-cluster architecture with a global load balancer and Cloudant service

  • Example 3: A VSI client contacting a VPC network load balancer with an external service backend

• Step 2: Choose a tool

• Step 3: Create the diagram

Preparing your account

Preparing your account to create clusters

• Create or upgrade your account

• Setting user permissions

• Plan your resource groups

• Cluster-specific account setup

• Next steps

IAM roles and actions

• Kubernetes Service

• Permissions to create a cluster

• Example custom IAM roles

Installing the CLI

Installing the CLI

• Understanding the CLI tools

• Run the installation command

• Verify the installation

• Install CLI plug-ins and tools

• Install the Red Hat OpenShift CLI

Updating the CLI

• Updating the IBM Cloud CLI

• Updating installed plug-ins

Uninstalling the stand-alone IBM Cloud CLI

• Uninstalling on Windows

• Uninstalling on Linux and macOS

Setting up the API

Setting up the API

• About the API

• Automating cluster deployments with the API

• Refreshing IAM access tokens and obtaining new refresh tokens with the API

• Refreshing IBM Cloud IAM access tokens and obtaining new refresh tokens with the CLI

Creating clusters

Creating classic clusters

• Prerequisites

• Creating a classic cluster in the console

• Creating a classic cluster in the CLI

• Example commands to create classic clusters

• Creating a single-zone classic cluster with Terraform

• Next steps for Classic clusters

Creating VPC clusters

• Prerequisites and notes

• Creating a VPC cluster in the console

• Creating VPC clusters from the CLI

• Example commands to create VPC clusters

• Creating a VPC cluster with Terraform

• Next steps for VPC clusters

Creating clusters on dedicated hosts for VPC

Creating Satellite clusters

• Prerequisites

• Creating Satellite clusters from the console

• Creating Satellite clusters from the CLI

• Next steps

Accessing clusters

Accessing Red Hat OpenShift clusters

• Prerequisites

• Accessing clusters through the public cloud service endpoint

  • Connecting to the cluster from the console

  • Connecting to the cluster from the CLI

• Accessing clusters through the private cloud service endpoint

  • Accessing VPC clusters through the private cloud service endpoint

  • Accessing classic clusters through the private cloud service endpoint

  • Creating an allowlist for the private cloud service endpoint

• Accessing Red Hat OpenShift clusters on Satellite

  • Accessing clusters through the cluster service URL

  • Accessing clusters from within the IBM Cloud private network

  • Accessing clusters from the public network

• Accessing VPC clusters through the Virtual Private Endpoint Gateway

• Accessing clusters from automation tools by using an API key

  • Using an API key to log in to clusters

  • Using a service ID to log in to clusters

Accessing the cluster master with admission controllers and webhooks

• Can I create my own admission controllers?

• What are the best practices for using webhooks?

• What other types of apps use admission controllers?

  • Setting up admission controller webhooks

• I need help with a broken webhook. What can I do?

Setting the OAuth access type for VPC clusters

• Setting the OAuth access type for a cluster from the API

• Getting the OAuth access type for a cluster from the API

Accessing private clusters

Adding worker nodes

Adding worker nodes to Classic clusters

• Creating a new worker pool

• Resizing a worker pool

• Adding a zone to a worker pool

Adding worker nodes to VPC clusters

• Resizing a worker pool

• Creating a new worker pool

• Adding a zone to a worker pool

Managing the cluster and worker node lifecycle

Checking your cluster version, operating system, and Kubernetes server version

• Checking your cluster master version, worker node version, and worker node operating system in the console

• Checking your cluster master version in the CLI

• Checking your worker node version in the CLI

• Checking a cluster's Kubernetes server version in the CLI

• Checking your worker node operating system in the CLI

Updating clusters, worker nodes, and cluster components

• Updating the master

  • Steps to update the cluster master

• Updating classic worker nodes

  • Prerequisites

  • Updating classic worker nodes in the CLI with a configmap

  • Updating classic worker nodes in the console

• Updating VPC worker nodes

  • Prerequisites

  • Updating VPC worker nodes in the CLI

  • Updating VPC worker nodes in the console

• Updating flavors (machine types)

• How are worker pools scaled down?

• Updating cluster components

  • Managing automatic updates for Fluentd

  • Managing automatic updates for Ingress ALBs

• Updating managed add-ons

Creating and managing dedicated hosts on VPC Gen 2 infrastructure

• Setting up dedicated hosts in the CLI

• Removing worker nodes from a dedicated host in the CLI

• Removing dedicated hosts in the CLI

• Removing dedicated hosts pools in the CLI

Migrating to a new Red Hat Enterprise Linux version

• Migration actions by cluster version

• Creating RHEL 8 worker pools in the command line

Managing Satellite worker pools

• Creating Satellite worker pools with host labels for autoassignment

• Resizing a Satellite worker pool

• Rebalancing a Satellite worker pool

• Updating worker nodes in a Satellite worker pool

• Adding zones to a Satellite worker pool

• Removing a Satellite worker pool

Preparing for host maintenance updates

• Identifying your affected workers

• Actions to take before the maintenance period

  • Workers in Classic clusters

  • Workers in VPC clusters

Setting the cluster credentials

• Resetting the cluster API key

Rotating CA certificates in your cluster

Adding tags and labels to clusters

• Adding tags to clusters with the console

• Adding tags to clusters with the CLI

• Adding labels to existing worker pools

Setting up encryption

Setting up a key management service (KMS) provider

• Rotating your KMS root key

Setting up cluster secret encryption

• Enabling secret encryption from the CLI

• Enabling secret encryption from the console

• Rotating the root key for your cluster

• Verifying secret encryption

Setting up worker node disk encryption for VPC clusters

Enhancing security

Security for Red Hat OpenShift on IBM Cloud

• Overview of security threats for your cluster

• Red Hat OpenShift API server and etcd

  • How is access to my API server granted?

  • What does Red Hat OpenShift on IBM Cloud do to secure my API server and etcd data store?

  • What else can I do to secure my API server?

• Worker node

  • Who owns the worker node and am I responsible to secure it?

  • How does my worker node setup look?

• Network

  • Network segmentation and privacy for classic clusters

  • What network traffic is allowed for my Classic cluster by default?

  • What is network segmentation and how can I set it up for a Classic cluster?

  • What else can I do to reduce the surface for external attacks for Classic clusters?

  • What if I want to connect my cluster to an on-prem data center?

  • Network segmentation and privacy for VPC clusters

  • What network traffic is allowed for my VPC cluster by default?

  • What is network segmentation and how can I set it up for a VPC cluster?

  • What else can I do to reduce the surface for external attacks for VPC clusters?

  • Securely expose apps with routes

  • Securely expose apps with LoadBalancer and Ingress services

  • Can I use security groups to manage my cluster's network traffic?

  • How can I do TLS termination with LoadBalancer and Ingress services?

• Persistent storage

• Monitoring and logging

• Container runtime

• Image and registry

• Container isolation and security

  • Should I set up a single-tenant or a multi-tenant cluster?

• Storing personal information

• Kubernetes security bulletins

Architecture and dependencies of the service

• Classic Red Hat OpenShift version 4 architecture

  • Red Hat OpenShift version 4 master components

  • Red Hat OpenShift version 4 worker node components

• VPC cluster service architecture

  • Cluster with public and private cloud service endpoints

  • Cluster with private cloud service endpoint only

  • VPC version 4 master and worker node components

Overview of personal and sensitive data storage and removal options

• What information is stored with IBM when using Red Hat OpenShift on IBM Cloud?

• How is my information stored and encrypted?

• Where is my information stored?

• How can I remove my information?

Protecting cluster resources with context-based restrictions

• How Red Hat OpenShift on IBM Cloud integrates with context-based restrictions

  • Protecting cluster resources

  • Protecting specific APIs

  • Allowing Red Hat OpenShift on IBM Cloud to access other IBM Cloud resources by using CBR

• Creating network zones

  • Creating network zones from the API

  • Creating network zones from the CLI

  • Creating network zones from the console

• Creating rules

  • Creating rules by using the API

  • Creating rules from the CLI

  • Creating rules from the console

• Limitations

Example context-based restrictions scenarios

• Understanding the scenario

• Prerequisites

• Creating your network zone

• Creating your CBR rule

• Testing your context-based restrictions

• Additional scenarios

  • Allowing different IPs to access the public and private service endpoints

  • Allowing different IPs to access different API types over the public and private service endpoints

Managing access control

Understanding access control for clusters

• Access control checklist

  • IBM Cloud access control

  • Assign access roles to individual or groups of users in IBM Cloud IAM

  • Scope user access to cluster instances, namespaces, or resource groups

Understanding Classic infrastructure credentials

• Accessing a different classic infrastructure account

Understanding RBAC permissions

• What are the types of RBAC roles?

• What are RBAC role bindings and cluster role bindings?

• What do these roles look like in my cluster?

• Can I create custom roles or cluster roles?

• When do I need to use custom cluster role bindings and role bindings?

• Creating custom RBAC permissions for users, groups, or service accounts

• Extending existing permissions by aggregating cluster roles

  • What are some common operations that I might want to extend permissions for a default cluster role?

• Checking RBAC roles

  • Checking RBAC roles from the UI

  • Checking RBAC roles with the CLI

• Kubernetes service access roles and corresponding RBAC roles

  • Kubernetes resource permissions per RBAC role

  • IBM Cloud IAM issuer details for RBAC users

Authorizing pods in your cluster to IBM Cloud services with IAM trusted profiles

• Prerequisites

• Creating an IAM trusted profile for your cluster in the API

• Creating an IAM trusted profile for your cluster in the UI

• Configure your application pods to authenticate with IBM Cloud services

Assigning cluster access by using Terraform for Red Hat OpenShift on IBM Cloud

• Creating a Red Hat OpenShift cluster by using Terraform

• Assigning IAM user access to Red Hat OpenShift clusters

Removing users

• Checking whether the user's credentials are used for infrastructure permissions

• Removing IBM Cloud IAM platform permissions and the associated pre-defined RBAC permissions

  • Removing custom RBAC permissions

Securing cluster workloads

Configuring security context constraints

• Customizing security context constraints

• Guidelines for assigning access to SCCs

• Default Red Hat OpenShift security context constraints

• Default IBM security context constraints

Setting pod priority

• Understanding default priority classes

• Creating a priority class

• Assigning priority to your pods

Setting Kubernetes API priority and fairness

• Reviewing default flow schema and priority levels

  • Viewing Red Hat OpenShift on IBM Cloud created priority level configurations

Pod security admission

• Understanding security profiles

• What if Pod Security Admission isn't the right choice for me?

• Configuring Pod Security admission namespace labels

• Default Pod Security Admission plug-in configuration

• Configuring pod security admission

• Additional resources

Setting up an image registry

Setting up an image registry

• Choosing an image registry solution

• Storing images in the internal registries

  • Backing up your internal image registry to IBM Cloud Object Storage

  • Storing images in the internal registry in Classic clusters

  • Storing images in the worker node empty directory

• Removing the internal image registry

• Setting up a secure external route for the internal registry

• Importing images from IBM Cloud Container Registry into the internal registry image stream

• Setting up builds in the internal registry to push images to IBM Cloud Container Registry

• Using IBM Cloud Container Registry

• Understanding how to authorize your cluster to pull images from a private registry

  • Default image pull secret setup

  • Private network connection to icr.io registries

• Updating existing clusters to use the API key image pull secret

  • Updating your image pull secret

• Using an image pull secret to access images in other IBM Cloud accounts or external private registries from non-default Red Hat OpenShift projects

  • Copying an existing image pull secret

  • Creating an image pull secret with different IAM API key credentials

  • Accessing images that are stored in other private registries

• Using the image pull secret to deploy containers

  • Storing the image pull secret in the Kubernetes service account for the selected project

• Setting up a cluster to pull entitled software

• Adding a private registry to the global pull secret

• Updating an IBM Cloud Kubernetes Service containerd custom registry configuration

  • Example daemonset to update a containerd custom registry configuration

Setting up the internal image registry for Satellite clusters

Setting up the internal image registry for Satellite clusters

• Create an IBM Cloud Object Storage instance that meets the requirements

• Create a bucket to use for your image registry

• Create a secret that contains your COS service credentials

• Update the Red Hat OpenShift Registry operator CRDs

• Verify your changes

Updating the global pull secret in Satellite clusters

Updating the global pull secret in Satellite clusters

• Updating the global pull secret

• Updating the global pull secret by using Satellite config

Restricting network traffic to edge worker nodes

Restricting network traffic to edge worker nodes

• Isolating NLB workloads to edge nodes

• Isolating ALB workloads to edge worker nodes

• Preventing app workloads from running on edge worker nodes

• Deploying the Sysdig agent on edge worker nodes

Controlling network traffic in Classic clusters

Using Calico network policies to control traffic on Classic clusters

• Objectives

• Audience

• Prerequisites

• Deploy an app and expose it by using an NLB

• Block all incoming traffic to all node ports

• Allow incoming traffic from a specific IP to the NLB

• Deny incoming traffic from specific IPs to the NLB

• Logging blocked traffic from specific IPs to the NLB

• What's next?

Controlling traffic with network policies

• Default Calico network policies

• Installing and configuring the Calico CLI

• Viewing network policies

• Adding network policies

• Controlling inbound traffic to NLB or NodePort services

• Example Calico policies to restrict public or private network traffic

  • Applying public network policies

  • Applying private network policies

• Controlling traffic between pods

• Logging denied traffic

Opening required ports and IP addresses in your allowlist

• Opening ports in a corporate allowlist

  • Running ibmcloud, ibmcloud oc, and ibmcloud cr commands from behind an allowlist

  • Running oc commands from behind an allowlist

  • Running calicoctl commands from behind an allowlist

• Opening ports in gateway appliance allowlists

  • Opening required ports in a public allowlist

  • Opening required ports in a private allowlist

  • Opening ports in a public or private allowlist for inbound traffic

• Allowing the cluster to access resources through Calico network policies

• Allowing traffic from your cluster in other services' allowlists or in on-premises allowlists

• Updating IAM allowlists for Kubernetes Service IP addresses

  • Getting your Kubernetes Service subnet IP addresses

Configuring classic subnets and IP addresses

• Overview of classic networking in Red Hat OpenShift on IBM Cloud

  • VLANs

  • Subnets and IP addresses

  • Finding subnets provisioned in your account

  • Network segmentation

• Using existing subnets to create a cluster

• Managing existing portable IP addresses

  • Viewing available portable public IP addresses

  • Freeing up used IP addresses

• Adding portable IP addresses

  • Adding portable IPs by ordering more subnets

  • Adding portable IPs by adding existing subnets to your cluster

• Managing subnet routing

  • Enabling routing between primary subnets on the same VLAN

  • Managing subnet routing for gateway appliances

• Removing subnets from a cluster

Changing service endpoints or VLAN connections in Red Hat OpenShift 3.11

• Setting up the private cloud service endpoint

• Setting up the public cloud service endpoint

  • Steps to enable the public cloud service endpoint

• Changing your worker node VLAN connections

Setting up classic VPN connectivity

• Using the strongSwan IPSec VPN service Helm chart

• strongSwan VPN service considerations

• Configuring the strongSwan VPN in a multizone cluster

  • Configuring a single outbound VPN connection from a multizone cluster

  • Configuring a single inbound VPN connection to a multizone cluster

  • Configuring an inbound VPN connection in each zone of a multizone cluster

• Configuring the strongSwan Helm chart

  • Step 1: Get the strongSwan Helm chart

  • Step 2: Configure basic IPSec settings

  • Step 3: Select inbound or outbound VPN connection

  • Step 4: Access cluster resources over the VPN connection

  • Step 5: Access remote network resources over the VPN connection

  • Step 6 (optional): Enable monitoring with the Slack webhook integration

  • Step 7: Deploy the Helm chart

• Testing and verifying strongSwan VPN connectivity

• Limiting strongSwan VPN traffic by namespace or worker node

  • Limiting strongSwan VPN traffic by namespace

  • Limiting strongSwan VPN traffic by worker node

• Upgrading or disabling the strongSwan Helm chart

• Using a Virtual Router Appliance

Controlling network traffic in VPC clusters

Understanding Secure by Default Cluster VPC Networking

• Overview

• Virtual private endpoint (VPE) gateways

• Managed security groups

  • Worker security group

  • Master VPE gateway security group

  • Shared VPE gateway security group

  • Load balancer services security group

• Limitations

Managing outbound traffic protection in VPC clusters

• Disabling outbound traffic protection when creating a cluster

  • Option 1: Disabling outbound traffic protection when you create a cluster

  • Option 2: Allowing outbound traffic through a custom security group

• Disabling outbound traffic protection for existing clusters

  • Option 1: Disabling outbound traffic protection from the CLI

  • Option 2: Adding a security group rule to the default cluster worker security group

• Enabling outbound traffic protection for existing clusters

• Example scenarios for selectively allowing outbound traffic

  • Accessing images from external container registries like DockerHub or quay.io

  • Allowing outbound traffic to Red Hat Marketplace and OperatorHub

  • Allowing outbound traffic to Image Streams

  • Allowing outbound traffic for remote health monitoring with Telemetry

  • Accessing 4.15 clusters and the web console over the VPE

  • Allowing outbound traffic for webhooks

  • Allowing outbound traffic to a public service

  • Considerations for hub and spoke VPCs with outbound traffic protection

  • Allowing temporary traffic to the cluster API server over the public network

Understanding VPC security groups in version 4.14 and earlier

• Virtual private endpoint (VPE) gateways

• Managed security groups

  • Security groups applied to cluster workers

  • Security groups applied to VPE gateways and VPC ALBs

• Minimum inbound and outbound requirements

  • Required inbound and outbound rules for cluster workers

  • Required rules for VPCs with a cluster that runs at version 4.14 or later

  • Required inbound and outbound rules for VPC ALBs

• Allow the worker nodes to connect to the public service endpoint IPs for the OAuth service

• Allow worker nodes to connect to the Ingress LoadBalancer

Creating and managing VPC security groups

• Adding security groups during cluster creation

  • If you only want the default security groups

  • If you want the cluster security group and your own additional security groups

  • If you only want your own security groups

• Adding security groups to worker pools during creation

  • If you do not want to attach additional security groups to the worker pool

  • If you want to attach additional security groups to the worker pool

• Viewing security groups

• Viewing security groups in the console

• Creating security group rules in the console

• Creating security group rules in the command line

• Allow worker nodes to connect to the public service endpoint IP addresses for the Oauth service

• Allow worker nodes to connect to the Ingress LoadBalancer

Controlling traffic with ACLs

• Creating ACLs from the console

  • Creating ACLs with the CLI

  • Required rules for VPCs with a cluster that runs at version or later

Controlling traffic between pods with Kubernetes policies

• Isolate app services within a namespace

• Isolate app services between namespaces

  • Required policy rules for VPCs with a cluster that runs at version or later

Opening required ports and IP addresses in other network allowlists

• Opening ports in a corporate allowlist

  • Running ibmcloud, ibmcloud oc, and ibmcloud cr commands from behind an allowlist

  • Running oc commands from behind an allowlist

  • Running calicoctl commands from behind an allowlist

  • Allowing access to the Red Hat OpenShift image registry in an allowlist

• Allowing traffic from your cluster in other services' allowlists or in on-premises allowlists

  • Allowing ingress from a cluster to another service

  • Allowing egress to a cluster from another service

Configuring VPC subnets

• Overview of VPC networking in Red Hat OpenShift on IBM Cloud

  • Subnets

  • Public gateways

  • Virtual private endpoints (VPE)

  • Network segmentation

  • VPC networking limitations

• Creating a VPC subnet and attaching a public gateway

  • Creating a VPC subnet in the console

  • Creating a VPC subnet in the CLI

• Creating VPC subnets for classic access

  • Creating VPC subnets for classic access in the console

  • Creating VPC subnets for classic access from the CLI

Setting up VPC VPN connectivity

• Communication with resources in on-premises data centers

  • IBM Cloud VPC VPN

  • Direct Link

• Communication with resources in other VPCs

  • IBM Cloud VPC VPN

  • IBM Cloud Transit Gateway

• Communication with IBM Cloud classic resources

  • Create a classic-access VPC

  • Use IBM Cloud Transit Gateway

Controlling network traffic in Satellite clusters

Customizing your network setup in Satellite locations and clusters

• Defining custom subnets when creating your location

• Defining the pod network interface when creating your location

• Defining the pod network interface when creating your cluster

• Limiting access to your Satellite cluster

• Creating network policies by using Calico host endpoints

• Restricting NodePort service access

Setting up Single Root I/O Virtualization (SR-IOV) in IBM Cloud Satellite clusters

• Prerequisites for using SR-IOV

• Installing the SR-IOV network operator

Adding static routes to worker nodes

Adding static routes to worker nodes

• About static routes

• Enabling the static route add-on

  • Enabling the static route add-on from the console

  • Enabling the static route add-on with the CLI

• Creating static routes

Setting up the cluster autoscaler

Preparing classic and VPC clusters for autoscaling

• Understanding scale-up and scale-down

• Following scalable deployment practices

  • Can I autoscale multiple worker pools at once?

  • How can I make sure that the cluster autoscaler responds to what resources my app needs?

  • Can I scale down a worker pool to zero (0) nodes?

  • Can I optimize my deployments for autoscaling?

  • Can I use taints and tolerations with autoscaled worker pools?

• Rebalancing or resizing autoscaled worker pools

• Preparing classic or VPC Gen 2 clusters for autoscaling

Preparing Satellite clusters for autoscaling

• Understanding autoscaling in Satellite clusters

• Setting up your location and cluster for autoscaling

Enabling the cluster autoscaler add-on in your cluster

• Enabling the cluster autoscaler add-on from the console

• Enabling the cluster autoscaler add-on from the CLI

• Updating the cluster autoscaler add-on

• Removing the cluster autoscaler add-on from the console

• Removing the cluster autoscaler add-on from the CLI

Setting up autoscaling for your worker pools

• Customizing the cluster autoscaler configuration values

• Cluster autoscaler configmap reference

Deploying apps to worker pools where autoscaling is enabled

• Scaling up worker nodes before the worker pool has insufficient resources

• Pause pods

• Horizontal pod autoscaling (HPA)

Logging and monitoring

Logging for clusters

• Understanding options for logging

• Forwarding cluster and app logs to IBM Log Analysis

• Using the cluster logging operator

Monitoring cluster health

• Understanding options for monitoring

  • IBM Cloud Monitoring

  • Built-in Red Hat OpenShift monitoring tools

  • Monitoring Red Hat® OpenShift® on IBM Cloud® storage metrics

• Forwarding cluster and app metrics to IBM Cloud Monitoring

• Viewing cluster states

  • Master states

• Enabling remote health reporting

Reviewing service, API server, and worker node logs

• Kubernetes API server audit logs

  • Considerations and prerequisites

  • Forwarding Kubernetes API audit logs to Log Analysis

  • Forwarding Kubernetes API audit logs to a resource in the IBM Cloud private network

• Worker node audit logs

  • Understanding the worker node audit configuration

  • Setting up log forwarding for worker nodes

• Service audit logs

  • Viewing AuditWebhookError alerts in auditing-enabled clusters

Enabling Flow Logs for VPC cluster components

• Configuring a flow log collector

• Viewing worker node flow logs

Telemetry for remote health monitoring

• Enabling Telemetry

• Disabling Telemetry

• Checking if Telemetry is enabled for a cluster

Continuous integration and delivery for app development and deployment

Continuous integration and delivery for app development and deployment

• Before you begin

• Creating a toolchain with Delivery Pipeline

• Other resources for automating your pipeline

Developing and deploying apps

Planning app deployments

• Moving workloads to Red Hat OpenShift on IBM Cloud

  • What kind of apps can I run in Red Hat OpenShift on IBM Cloud?

  • What are some guidelines for developing stateless, cloud-native apps?

  • What about serverless apps?

  • I already have an app. How can I migrate it to Red Hat OpenShift on IBM Cloud?

• Common app modification scenarios

  • Example steps for giving a deployment privileged access

• Understanding Kubernetes objects for apps

  • I thought that I needed to put my app in a container. Now what's all this stuff about pods?

  • So if I can use a pod, why do I need all these different types of objects?

  • What type of Kubernetes objects can I make for my app?

  • What if I want my app configuration to use variables? How do I add these variables to the YAML?

  • How can I make sure that my app has the correct resources?

  • How can I add capabilities to my app configuration?

  • How can I add IBM services to my app, such as Watson?

• Planning highly available deployments

  • How can I increase the availability of my app?

  • How can I scale my app?

• Versioning and updating apps

  • How can I organize my deployments to make them easier to update and manage?

  • What app update strategies can I use?

  • How can I automate my app deployment?

• Setting up service discovery

  • How can I make sure that my services are connected to the correct deployments and ready to go?

  • How can I expose my services on the Internet?

• Securing apps

• Managing access and monitoring app health

  • How can I control who has access to my app deployments?

  • After I deploy my app, how can I monitor its health?

Building images for your apps

• Building images

• Deploying containers from an existing image stream in the internal registry

  • Using an image stream with the CLI

  • Using an image stream from the Red Hat OpenShift web console

• Deploying containers from an IBM Cloud Container Registry image to the default Red Hat OpenShift project

• Deploying containers from an encrypted image

• Referring to the image pull secret in your pod deployment

• Pushing images to IBM Cloud Container Registry

• Managing security of images in IBM Cloud Container Registry with Vulnerability Advisor

• Setting up trusted content for container images

• Enabling image security enforcement in your cluster

  • Enabling or disabling image security enforcement

  • Default image policies

Developing apps

• Specifying your app requirements in your YAML file

  • Basic deployment metadata

  • Replica set

  • Labels

  • Affinity

  • Container image

  • Port for the app's service

  • Resource requests and limits

  • Liveness and readiness probes

  • Pod Disruption Budget

  • Exposing the app service

  • Configmaps for container environment variables

  • Secrets for container environment variables

  • Persistent volumes for container storage

• Complete example deployment YAML

Deploying apps in Red Hat OpenShift clusters

• Moving your apps to Red Hat OpenShift

  • Deploying apps through the console

  • Deploying apps through the CLI

• Deploying apps to specific worker nodes by using labels

• Deploying an app on a GPU machine

  • Prerequisites

  • Deploying a workload

Testing access to apps with NodePorts

• About NodePorts

• Enabling access to an app by using a NodePort service

Managing the app lifecycle

• Update strategies

• Scaling apps

• Managing rolling deployments to update your apps

• Setting up continuous integration and delivery

• Copying deployments to another cluster

Packaging apps for reuse in multiple environments with Kustomize

Exposing apps

Choosing an app exposure service

• Understanding options for exposing apps

• Choosing among load balancing solutions

• Planning public external load balancing

  • Public app networking for classic clusters

  • Public app networking for VPC clusters

• Planning private external load balancing

  • Private app networking for classic clusters

  • Private app networking for VPC clusters

Setting up Block Storage for Classic

Setting up Block Storage for Classic

• Quick start for IBM Cloud Block Storage for Classic

• Deciding on the block storage configuration

• Setting up encryption for Block Storage for Classic

  • Encrypting volume data by using a custom storage class

  • Create a PVC that references your Block Storage for Classic secret

  • Verifying the encryption of your Block Storage for Classic volumes

• Adding block storage to apps

• Using existing block storage in your cluster

  • Retrieving the information of your existing block storage

  • Creating a persistent volume (PV) and a matching persistent volume claim (PVC)

• Using block storage in a stateful set

  • Creating the PVC by using dynamic provisioning when you create a stateful set

  • Static provisioning by using existing PVCs with a stateful set

• Changing the size and IOPS of your existing storage device

• Backing up and restoring data

  • Setting up periodic snapshots

  • Replicating snapshots to another zone

  • Duplicating storage

  • Backing up data to IBM Cloud® Object Storage

  • Copying data to and from pods and containers

• Storage class reference

  • Bronze

  • Silver

  • Gold

  • Custom

• Sample customized storage classes

  • Creating topology-aware storage

  • Specifying the zone and region

  • Mounting block storage with an XFS file system

• Removing persistent storage from a cluster

  • Understanding your storage removal options

  • Cleaning up persistent storage

• Setting up monitoring for limited connectivity PVs

Setting up Block Storage for VPC

Setting up Block Storage for VPC

• Quick start for IBM Cloud Block Storage for VPC

• Adding Block Storage for VPC to your apps

• Using an existing Block Storage for VPC instance

• Updating the Block Storage for VPC add-on

  • Recreating custom storage classes after updating to version 4.2

• Setting up encryption for Block Storage for VPC

• Customizing the default storage settings

  • Changing the default storage class

  • Creating a custom storage class

  • Verifying your Block Storage for VPC file system

  • Updating the VolumeAttachLimit

  • Storing your custom PVC settings in a Kubernetes secret

  • Enabling every user to customize the default PVC settings

  • Enforcing base64 encoding for the Key Protect root key CRN

• Setting up volume expansion

  • Manually expanding volumes before add-on version 4.2

• Backing up and restoring data

• Storage class reference

  • 10 IOPs tier

  • 5 IOPs tier

  • Custom

  • General purpose

Setting up snapshots with the Block Storage for VPC add-on

• Creating an app deployment

• Creating a volume snapshot

• Restoring from a volume snapshot

• Turning off snapshots

• Next steps

• Troubleshooting snapshots

Customizing the Block Storage for VPC configmap

• Block Storage for VPC configmap reference

Setting up trusted profiles for the Block Storage for VPC add-on

• Enabling the Block Storage for VPC add-on

• Setting up trusted profiles

  • Automatically creating a secret by using a Shell script

Setting up Block Storage for VPC for unmanaged clusters

• Prerequisites

  • Labeling your worker nodes

  • Retrieving IAM and VPC details

• Creating the image pull secret in your cluster

• Creating the Block Storage for VPC driver deployment

• Deploying a stateful set that uses Block Storage for VPC

• Removing the Block Storage for VPC driver

• Config map reference

  • RHEL or CentOS ConfigMap

  • Ubuntu ConfigMap

Removing Block Storage for VPC from your cluster

• Cleaning up Block Storage for VPC

Setting up File Storage for Classic

Setting up File Storage for Classic

• Quick start for File Storage for Classic

• Deciding on the File Storage for Classic configuration

  • File storage types

  • IOPS

  • Reclaim policy

  • Billing type

• Adding File Storage for Classic to apps

• Using existing File Storage for Classic in your cluster

  • Preparing your existing storage

  • Creating a persistent volume and a persistent volume claim

• Using File Storage for Classic in a stateful set

  • Creating the PVC when you create a stateful set by using dynamic provisioning

  • Static provisioning: Using an existing PVC with your stateful set

• Changing the size and IOPS of your existing storage device

• Changing the default NFS version

  • Creating a customized storage class with a specific NFS version

  • Changing your existing PV to use a different NFS version

• Backing up and restoring data

  • Setting up periodic snapshots

  • Replicating snapshots to another zone

  • Duplicating storage

  • Backing up data to IBM Cloud® Object Storage

  • Copying data to and from pods and containers

• Storage class reference

• Sample customized storage classes

  • Creating topology-aware storage

  • Specifying the zone for multizone clusters

  • Changing the default NFS version

• Removing persistent storage from a cluster

  • Understanding your storage removal options

  • Cleaning up persistent storage

Setting up File Storage for VPC

Enabling the IBM Cloud File Storage for VPC add-on

• Prerequisites

Adding File Storage for VPC to apps

• Quick start for File Storage for VPC with dynamic provisioning

• Attaching existing file storage to an app

• Deploying an app that runs as non-root

• Creating a custom storage class

• Limiting file share access by worker node, zone, or worker pool

  • Prerequisites

  • Limiting file share access to pods on one worker node

  • Limiting file share access to pods on worker nodes in a single zone

  • Limiting file share access to pods on worker nodes in a single worker pool

  • Limiting file share access to pods on worker nodes in multiple worker pools

Managing IBM Cloud File Storage for VPC

• Updating the File Storage for VPC add-on

• Understanding your storage removal options

• Cleaning up persistent storage

Storage class reference

Setting up Object Storage

Setting up IBM Cloud Object Storage

• Creating your object storage service instance

• Creating IBM Cloud Object Storage service credentials

• Creating a secret for the object storage service credentials

• Limitations

Installing the IBM Cloud Object Storage plug-in

• Updating the IBM Cloud Object Storage plug-in

• Removing the IBM Cloud Object Storage plug-in

• Deciding on the object storage configuration

• Verifying your installation

Adding object storage to apps

• Creating a deployment

• Using object storage in a stateful set

Setting capacity quotas for apps that use IBM Cloud Object Storage

• Objectives

• Prerequisites

• Creating a set of service credentials

• Creating a secret to store your credentials

• Installing the plug-in

• Dynamically provisioning a bucket with a quota

• Uploading a file to your bucket

• Creating an app that mounts the bucket

• Review

• Next steps

VPC: Setting up authorized IP addresses for IBM Cloud Object Storage

Storage class reference

Setting up OpenShift Data Foundation

Understanding OpenShift Data Foundation

• Architecture overview

• Multicloud Object Gateway overview

• Feature support by billing type

• Best practices

  • Planning

  • Deployment

  • Capacity expansion

  • Update

  • Recovery

  • Uninstalling and removal

  • Troubleshooting

• Deploying OpenShift Data Foundation

Setting up Portworx

About Portworx

• What is software-defined storage (SDS)?

• What are the benefits of Portworx?

• How does Portworx work?

• What are the requirements to run Portworx?

• How can I make sure that my data is stored highly available?

• What volume topology offers the best performance for my pods?

• Can I install Portworx in a private cluster?

• Can I install Autopilot while using Portworx?

• How do I get support?

• What's next?

• Exploring other Portworx features

Planning your Portworx setup

• Limitations

• Overview of the Portworx lifecycle

• Creating a secret to store the KMS credentials

Preparing your cluster for Portworx

• Classic clusters

• VPC clusters

• Satellite clusters

Setting up the Portworx key-value store

• Setting up a key-value store for Portworx metadata

• Using the Portworx key-value database

  • Optional: Setting up a Databases for etcd service instance

Understanding encryption for Portworx

• Encryption overview

• Decryption overview

• Setting up volume encryption

  • Getting your KMS instance and credentials

Installing Portworx in your cluster

• Creating a Portworx volume

• Mounting the volume to your app

Installing Autopilot for Portworx

• Prerequisites

• Installing Autopilot

• Creating Rules

Updating Portworx in your cluster

• VPC: Updating worker nodes with Portworx volumes

Setting up disaster recovery with Portworx

Backing up and restoring apps and data with Portworx Backup

• Installing Portworx Backup

• Verifying your Portworx Backup installation

• Logging in to the Portworx Backup console

• Adding a backup location to your Portworx Backup service

• Adding Red Hat OpenShift on IBM Cloud clusters to your Portworx Backup service

• Installing Stork on a non-Portworx cluster

• Creating a backup with the kmpd command

• Backing up and restoring cluster data with PX-Backup

  • Upgrading PX-Backup

Removing Portworx

• Removing Portworx volumes from apps

• Removing a worker node from your Portworx cluster or the entire Portworx cluster

• Removing the Portworx DaemonSet

• Removing Portworx from your cluster

Getting help and support

• Gathering logs

IBM Cloud storage utilities

IBM Cloud storage utilities

• Classic: Installing the IBM Cloud Block Storage Attacher plug-in (beta)

  • Updating the IBM Cloud Block Storage Attacher plug-in

  • Removing the IBM Cloud Block Volume Attacher plug-in

• Classic: Manually adding block storage to specific worker nodes

• Classic: Attaching raw block storage to non-SDS worker nodes

• VPC: Adding raw Block Storage for VPC to VPC worker nodes by using the API

  • Detaching raw and unformatted Block Storage for Classic from a worker node in a VPC cluster by using the API

  • Reviewing volume attachment details for a VPC worker node by using the API

• VPC: Attaching raw Block Storage for VPC to VPC worker nodes by using the CLI

  • Removing raw Block Storage for VPC from VPC worker nodes by using the CLI

• Backing up and restoring PVC data for file and block storage

  • Setting up an IBM Cloud Object Storage service instance

  • Using IBM Cloud Object Storage to back up and restore PVC data

• Setting up IBM Cloud Monitoring for storage volumes

  • Troubleshooting persistent storage when an IBM Cloud Monitoring alert is triggered

Backing up and restoring storage data

Backing up and restoring storage data

Enhancing your cluster with Cloud Paks, Operators, and integrations

IBM Cloud services and third-party integrations

• IBM Cloud services

  • IBM Cloud platform services

  • IBM Cloud classic infrastructure services

  • IBM Cloud VPC infrastructure services

• Kubernetes community and open source integrations

  • Integrations operated in partnership

  • Managed add-ons

  • Other third-party integrations

  • Extending Red Hat OpenShift API and software with CRDs and Operators

Adding Cloud Paks, entitlements, or licenses to your cluster

• Assigning a Cloud Pak entitlement to your IBM Cloud account

• Adding entitlements to your cluster

• Adding Cloud Pak images from an entitled registry

Adding services by using Operators

• Using Operators in clusters

• Adding the IBM Operator Catalog source to OperatorHub

• Disabling OperatorHub and mirroring catalog source images to icr.io

• Getting support for Operators

• Operator FAQ

Using the compliance operator

Setting up the Red Hat Marketplace

Adding services by using managed add-ons

• Adding managed add-ons

• Updating managed add-ons

• Reviewing add-on states and statuses

• Supported add-ons for clusters in Satellite locations

Adding services by using Helm charts

• About Helm in Red Hat OpenShift on IBM Cloud

  • What is Helm and how do I use it?

  • What Helm charts are supported in Red Hat OpenShift on IBM Cloud?

• Installing Helm v3 in your cluster

Adding services by using IBM Cloud service binding

• About service binding

  • What types of services can I bind to my cluster?

  • What is IBM Cloud service binding?

  • I already have an IBM Cloud service. Can I still use IBM Cloud service binding?

  • What if I want to use service credentials that use the private cloud service endpoint?

  • Can I use all IBM Cloud services in my cluster?

  • Can I bind multiple IBM Cloud services to multiple clusters at once?

• Adding IBM Cloud services to clusters

• Accessing service credentials from your apps

  • Mounting the secret as a volume to your pod

  • Referencing the secret in environment variables

• Removing a service from a cluster

Installing SGX drivers and platform software on SGX-capable worker nodes

• Installing with a script

Tuning performance

Tuning performance

• Default worker node settings

  • Customizing the operating system

  • Hardware changes

• Modifying worker node settings to optimize performance

• Optimizing network keepalive sysctl settings

• Changing the Calico maximum transmission unit (MTU)

  • Updating the Calico installation

• Disabling the port map plug-in

Tuning performance for Red Hat CoreOS worker nodes

• Deploying the Node Feature Discovery Operator

• Enabling non-uniform memory access (NUMA), CPU pinning, and huge pages on your worker nodes

• Enabling CPU pinning and huge pages on your worker nodes

• Removing performance customizations

Managing cluster costs

Understanding costs for your clusters

• Understanding costs by component

  • Worker nodes

  • What is the difference between virtual and physical machines?

  • Compute licenses

  • Public bandwidth

  • Subnet IP addresses

  • Multizone load balancer

  • Default storage for images

  • Storage for apps

  • IBM Cloud services

  • Operators and other third-party integrations

  • VPC worker nodes

• Estimating costs

• Managing costs

• Pricing for clusters in Satellite

Using reservations to reduce classic worker node costs

• Understanding reservations

  • Reservation usage and lifecycle

  • Billing and discounts

• Creating a reservation

• Using a reservation in a cluster

• Reviewing reservation usage

Removing clusters

Removing clusters

• Removing Satellite worker nodes or clusters

• Next steps

API reference

IBM Cloud Kubernetes Service API

IBM Cloud Kubernetes Service API JSON

OpenShift Container Platform REST API

CLI plug-in reference

Red Hat OpenShift on IBM Cloud CLI Map

• ibmcloud oc cluster

• ibmcloud oc worker

• ibmcloud oc worker-pool

• ibmcloud oc zone

• ibmcloud oc ingress

• ibmcloud oc logging

• ibmcloud oc nlb-dns

• ibmcloud oc webhook-create

• ibmcloud oc api-key

• ibmcloud oc credential

• ibmcloud oc infra-permissions

• ibmcloud oc kms

• ibmcloud oc quota

• ibmcloud oc subnets

• ibmcloud oc vlan

• ibmcloud oc vpcs

• ibmcloud oc flavors

• ibmcloud oc locations

• ibmcloud oc messages

• ibmcloud oc versions

• ibmcloud oc api

• ibmcloud oc init

• ibmcloud oc script

• ibmcloud oc security-group

• ibmcloud oc storage