Red Hat OpenShift

Red Hat's Kubernetes platform with OVN-Kubernetes networking, security context constraints and an integrated registry.

Provider: default
Kind: Container orchestrator
Category: Compute
Official docs: https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html/authentication_and_authorization/using-rbac
Also known as: OCP

Properties · 4 set by this component

property	type	values	required	kind default	this component
autoscaling	boolean	—	no	false	▸ false
integratedRegistry · component property	boolean	—	no	true	inherited
machineAutoscaler · component property	boolean	—	no	false	inherited
managed	boolean	—	no	false	▸ false
networkPlugin · component property	enum	ovn-kubernetes \| openshift-sdn	no	ovn-kubernetes	inherited
networkPolicy	boolean	—	no	—	▸ true
nodeCount	integer	—	no	—	inherited
privateControlPlane	boolean	—	no	—	inherited
rbac	boolean	—	no	—	▸ true
securityContextConstraints · component property	boolean	—	no	true	inherited
version	string	—	no	—	inherited

Rules that apply · 1

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

Stateful node without zone redundancyerror

stateful-node-without-zone-redundancy

A stateful compute node pinned to exactly one availability zone disappears with that zone, and its state goes with it. Nodes inside a cell are exempt, because there the cell is deliberately single-zone and redundancy comes from the other cells.

— all of these hold:
— the node's `stateless` is false
— the node sits inside exactly 1 availability-zone group
— this does not hold:
— the node sits inside at least one cell group

Use it in a design

nodes:
  - { id: "openshift", component: "openshift" }

Other Container orchestrator products · 35

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# Red Hat OpenShift Container Platform. Per "Using RBAC to define and apply permissions" RBAC with default
3# cluster and local roles governs every action, and per the networking guide OVN-Kubernetes is the default
4# network plugin, so NetworkPolicy is enforced as soon as a policy is written.
5schemaVersion: "1"
6type: "component"
7id: "openshift"
8kind: "container-orchestrator"
9provider: "default"
10docs: "https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html/authentication_and_authorization/using-rbac"
11aliases: ["OCP"]
12defaults:
13  managed: false
14  autoscaling: false
15  rbac: true
16  networkPolicy: true
17properties:
18  networkPlugin:
19    type: "enum"
20    values: ["ovn-kubernetes", "openshift-sdn"]
21    default: "ovn-kubernetes"
22  securityContextConstraints:
23    type: "boolean"
24    default: true
25  integratedRegistry:
26    type: "boolean"
27    default: true
28  machineAutoscaler:
29    type: "boolean"
30    default: false

The same page as markdown, for an agent: /catalogue/components/openshift.md