makeing openshift provisioning bulletproof