OpenShift

OpenShift
Name	OpenShift
Developer	Red Hat
Released	2011
Programming language	Go, Java, Ruby, Python
Operating system	Linux
License	Proprietary and open source components

OpenShift is a family of containerization and application platform products developed by Red Hat that provide orchestration, runtime, and developer tooling for cloud-native applications. It integrates technologies from Kubernetes, Docker, and CRI-O to deliver a platform for building, deploying, and managing containers across on-premises and public cloud environments such as Amazon Web Services, Microsoft Azure, and Google Cloud Platform. OpenShift targets teams using continuous integration and continuous delivery practices linked to systems like Jenkins and GitLab CI, and organizations operating under frameworks exemplified by DevOps and Site Reliability Engineering.

Overview

OpenShift combines container orchestration from Kubernetes with developer workflows influenced by Heroku and platform services similar to Cloud Foundry and Pivotal Software. The project leverages upstream components including CRI-O, etcd, Flannel, and Prometheus while integrating enterprise tooling from Red Hat Enterprise Linux and Ansible. OpenShift supports application runtimes that include Java, Node.js, Python, Ruby, and .NET workloads on compatible hosts such as CentOS historically and Red Hat Enterprise Linux (RHEL) in commercial offerings. Adoption patterns mirror usage in sectors guided by standards from NIST and regulatory regimes like GDPR and HIPAA.

Architecture

The architecture is built on a control plane and worker topology originating from Kubernetes masters and nodes, incorporating components such as the API server, controller manager, scheduler, and kubelet agents. The control plane persists cluster state in etcd and exposes REST endpoints used by tools like kubectl and oc CLI clients. Networking integrates with projects including Open vSwitch, Calico, and Flannel to provide container network interfaces (CNI) and routing supported by HAProxy or Envoy proxies. Storage relies on integrations with Ceph, GlusterFS, and cloud provider block storage like Amazon EBS and Azure Disk. Observability is achieved through telemetry stacks adopting Prometheus, Grafana, Elasticsearch, and Jaeger for tracing.

Deployment and Installation

Installation methods range from automated installers to operator-based provisioning and infrastructure-as-code patterns using Terraform and Ansible. Operators follow the Operator pattern popularized by CoreOS and codified through the Operator Framework, enabling lifecycle management of operators delivered in the OperatorHub.io catalog. Deployments target bare metal, virtualization platforms such as VMware vSphere, and public clouds including AWS, Azure, and Google Cloud Platform with integrations for identity providers like LDAP and Active Directory. Bootstrap and scaling processes interact with provisioning tools from Ironic and automation suites used within CI/CD pipelines tied to Jenkins or Tekton.

Features and Components

OpenShift packages include an integrated container registry, image build system, routing layer, and developer console. Build and deployment mechanisms use strategies influenced by Buildah and S2I (Source-to-Image), while CI pipelines often integrate with Jenkins and GitHub Actions. The platform provides service meshes through Istio integrations, API management compatible with Kong or 3scale, and serverless capabilities via Knative. Logging and monitoring draw from Elasticsearch, Fluentd, and Prometheus. The developer experience includes web consoles and CLIs analogous to Heroku dashboards and kubectl, with template and Helm chart support from Helm for package management.

Security and Compliance

Security features align with container best practices advocated by CIS benchmarks and supply-chain standards from OWASP and SLSA. OpenShift enforces security contexts, Pod Security Standards, and role-based access control modeled on RBAC and integrates with identity solutions including OAuth2, LDAP, and Active Directory. Image security leverages scanners influenced by Clair and Quay image scanning, while compliance reporting maps to audit frameworks used by NIST and regulation regimes such as GDPR and HIPAA. Network policy enforcement uses NetworkPolicy APIs and integrations with providers like Calico and Cilium for eBPF-based tooling.

Licensing and Editions

Editions include enterprise subscriptions from Red Hat with commercial support and upstream community distributions aligned with projects from Kubernetes and OKD. Licensing models combine open source components under licenses such as Apache License and MIT License with proprietary subscription terms for supported offerings. Customers obtain support and certifications (including FIPS and Common Criteria where applicable) through vendor agreements and ecosystem partners like IBM and VMware.

Community and Ecosystem

The OpenShift ecosystem spans contributors from Red Hat, cloud providers like Amazon Web Services, Microsoft, and Google, and open source communities from Kubernetes, Cloud Native Computing Foundation, and Operator Framework. Third-party integrations are available through marketplaces run by Red Hat Marketplace and partner catalogs such as AWS Marketplace and Azure Marketplace. The community interacts through venues including GitHub, Stack Overflow, conferences like KubeCon and Red Hat Summit, and working groups associated with CNCF SIGs. Major adopters and contributors have included organizations such as Comcast, T-Mobile, Airbus, and SAP.

Category:Container orchestration