---
name: secure-infrastructure-vpc-deploy-arch-ibm-slz-ocp-quickstart
title: Landing zone for containerized applications with OpenShift - QuickStart (Financial Services edition)
description: The QuickStart (Financial Services edition) variation of the Landing zone for containerized applications with OpenShift deployable architecture creates a fully customizable Virtual Private Cloud (VPC) environment in a single region. The solution provides a single Red Hat OpenShift cluster in a secure VPC for your workloads. This variation is designed to deploy quickly for demonstration and development.
last-updated: 2024-09-26
---

> ## Documentation Index
> The table of contents for this documentation set is at https://cloud.ibm.com/docs/secure-infrastructure-vpc?format=markdown
> The index for all IBM Cloud docs is at: https://cloud.ibm.com/docs/llms.txt
> Use these files to discover more information as needed.

# Landing zone for containerized applications with OpenShift - QuickStart (Financial Services edition)
{: #roks-ra-qs}
{: toc-content-type="reference-architecture"}
{: toc-industry="Banking,FinancialSector"}
{: toc-use-case="Cybersecurity"}
{: toc-version="8.15.1"}

The QuickStart (Financial Services edition) variation of the Landing zone for containerized applications with OpenShift deployable architecture creates a fully customizable Virtual Private Cloud (VPC) environment in a single region. The solution provides a single Red Hat OpenShift cluster in a secure VPC for your workloads. This variation is designed to deploy quickly for demonstration and development.

## Architecture diagram
{: #ra-roks-qs-architecture-diagram}

![Architecture diagram for the QuickStart (Financial Services edition) variation of Landing zone for containerized applications with OpenShift](roks-quickstart.drawio.svg "Architecture diagram of QuickStart (Financial Services edition) variation of Landing zone for containerized applications with OpenShift deployable architecture"){: caption="QuickStart variation of Landing zone for containerized applications with OpenShift" caption-side="bottom"}{: external download="roks-quickstart.drawio.svg"}

## Design concepts
{: #ra-roks-qs-design-concepts}

![Design requirements for Landing zone for containerized applications with OpenShift](heat-map-deploy-arch-slz-roks-quickstart.svg "Design concepts"){: caption="Scope of the design concepts" caption-side="bottom"}

## Requirements
{: #ra-roks-qs-requirements}

The following table outlines the requirements that are addressed in this architecture.

| Aspect | Requirements |
|---|---|
| Compute | Kubernetes cluster with minimal machine size and nodes, suitable for low-cost demonstration and development |
| Storage | Kubernetes cluster registry backup (required) |
| Networking | * Multiple VPCs for network isolation. \n * All public inbound and outbound traffic that is allowed to VPCs. \n * Administration of cluster that is allowed from public endpoint and web console. \n * Load balancer for cluster workload services. \n * Outbound internet access from cluster. \n * Private network connection between VPCs. |
| Security | * Encryption of all application data in transit and at rest to protect it from unauthorized disclosure. \n * Storage and management of all encryption keys. \n * Protect cluster administration access through IBM Cloud security protocols. |
| Service Management | Automated deployment of infrastructure with IBM Cloud catalog |
{: caption="Requirements" caption-side="bottom"}

## Components
{: #ra-roks-qs-components}

The following table outlines the products or services that are used in the architecture for each aspect.

| Aspects | Architecture components | How the component is used |
|---|---|---|
| Compute | Red Hat OpenShift Container Platform | Container execution |
| Storage | IBM Cloud Object Storage | Registry backup for Red Hat OpenShift |
| Networking | * VPC Load Balancer \n * Public Gateway \n * Transit Gateway | * Load balancing for cluster workloads (automatically created by Red Hat OpenShift service for multi-zone cluster) \n * Cluster access to the internet \n * Private network connectivity between management and workload VPCs |
| Security | * IAM \n * Key Protect | * IBM Cloud Identity and Access Management \n * Management of encryption keys used by Red Hat OpenShift Container Platform |
{: caption="Components" caption-side="bottom"}