Chapter 1. What's new with OpenShift Dedicated With its foundation in Kubernetes, OpenShift Dedicated is a complete OpenShift Container Platform cluster provided as a cloud service, configured for high availability, and dedicated to a single customer. OpenShift Dedicated is professionally managed by Red Hat and hosted on Google Cloud Platform (GCP) or Amazon Web Services (AWS). Each OpenShift Dedicated cluster includes a fully managed control plane (Control and Infrastructure nodes), application nodes, installation and management by Red Hat Site Reliability Engineers (SRE), premium Red Hat Support, and cluster services such as logging, metrics, monitoring, notifications portal, and a cluster portal. OpenShift Dedicated clusters are available on the Hybrid Cloud Console . With the Red Hat OpenShift Cluster Manager application, you can deploy OpenShift Dedicated clusters to either on-premises or cloud environments. 1.1. New changes and updates 1.1.1. Q1 2025 New version of OpenShift Dedicated available. OpenShift Dedicated on Google Cloud Platform (GCP) and OpenShift Dedicated on Amazon Web Services (AWS) versions 4.18 are now available. For more information about upgrading to this latest version, see Red Hat OpenShift Dedicated cluster upgrades . Support for assigning newly created machine pools to specific availability zones within a Multi-AZ cluster. OpenShift Dedicated on Google Cloud Platform (GCP) users can now assign machine pools to specific availability zones using the OpenShift Cluster Manager CLI ( ocm ). For more information, see Deploying a machine pool in a single availability zone within a Multi-AZ cluster . Support for specifying OpenShift Dedicated versions when creating or updating a Workload Identity Federation (WIF) configuration. OpenShift Dedicated on Google Cloud Platform (GCP) users can now specify minor versions when creating or updating a WIF configuration. For more information, see Creating a Workload Identity Federation cluster using the OCM CLI . Cluster node limit update. OpenShift Dedicated clusters versions 4.14.14 and greater can now scale to 249 worker nodes. This is an increase from the limit of 180 nodes. For more information, see limits and scalability . Initiate live migration from OpenShift SDN to OVN-Kubernetes. As part of the OpenShift Dedicated move to OVN-Kubernetes as the only supported network plugin starting with OpenShift Dedicated version 4.17, users can now initiate live migration from the OpenShift SDN network plugin to the OVN-Kubernetes network plugin. If your cluster uses the OpenShift SDN network plugin, you cannot upgrade to future major versions of OpenShift Dedicated without migrating to OVN-Kubernetes. For more information about migrating to OVN-Kubernetes, see Migrating from OpenShift SDN network plugin to OVN-Kubernetes network plugin . Red Hat SRE log-based alerting endpoints have been updated. OpenShift Dedicated customers who are using a firewall to control egress traffic can now remove all references to *.osdsecuritylogs.splunkcloud.com:9997 from your firewall allowlist. OpenShift Dedicated clusters still require the http-inputs-osdsecuritylogs.splunkcloud.com:443 log-based alerting endpoint to be accessible from the cluster. 1.1.2. Q4 2024 Workload Identity Federation (WIF) authentication type is now available. OpenShift Dedicated on Google Cloud Platform (GCP) customers can now use WIF as an authentication type when creating a cluster. WIF is a GCP Identity and Access Management (IAM) feature that provides third parties a secure method to access resources on a customer's cloud account. WIF is Google Cloud's preferred method for credential authentication. For more information, see Creating a cluster on GCP with Workload Identity Federation authentication . Private Service Connect (PSC) networking feature is now available. You can now create a private OpenShift Dedicated cluster on Google Cloud Platform (GCP) using Google Cloud's security-enhanced networking feature Private Service Connect (PSC). PSC is a capability of Google Cloud networking that enables private communication between services across different GCP projects or organizations. Implementing PSC as part of your network connectivity allows you to deploy OpenShift Dedicated clusters in a private and secured environment within GCP without using any public-facing cloud resources. For more information, see Private Service Connect overview . Support for GCP A3 instances with NVIDIA H100 80GB GPUs. OpenShift Dedicated on Google Cloud Platform (GCP) now supports A3 instance types with NVIDIA H100 80GB GPUs. The GCP A3 instance type is available in all three zones of a GCP region, which is a prerequisite for multi-AZ deployment. For more information, see Google Cloud compute types . 1.1.3. Q3 2024 Support for GCP A2 instance types with A100 80GB GPUs. OpenShift Dedicated on Google Cloud Platform (GCP) now supports A2 instance types with A100 80GB GPUs. These instance types meet the specific requirements listed by IBM Watsonx.ai. For more information, see Google Cloud compute types . Expanded support for GCP standard instance types. OpenShift Dedicated on Google Cloud Platform (GCP) now supports standard instance types for control plane and infrastructure nodes. For more information, see Control plane and infrastructure node sizing and scaling . OpenShift Dedicated regions added. OpenShift Dedicated on Google Cloud Platform (GCP) is now available in the following additional regions: Melbourne ( australia-southeast2 ) Milan ( europe-west8 ) Turin ( europe-west12 ) Madrid ( europe-southwest1 ) Santiago ( southamerica-west1 ) Doha ( me-central1 ) Dammam ( me-central2 ) For more information about region availabilities, see Regions and availability zones . 1.1.4. Q2 2024 Cluster delete protection. OpenShift Dedicated on Google Cloud Platform (GCP) users can now enable the cluster delete protection option, which helps to prevent users from accidentally deleting a cluster. CSI Operator update. OpenShift Dedicated is capable of provisioning persistent volumes (PVs) using the Container Storage Interface (CSI) driver for Google Compute Platform (GCP) Filestore Storage. For more information, see Google Compute Platform Filestore CSI Driver Operator . Support for new GCP instances. OpenShift Dedicated now supports more worker node types and sizes on Google Cloud Platform. For more information, see Google Cloud compute types . 1.1.5. Q1 2024 OpenShift Dedicated regions added. OpenShift Dedicated on Google Cloud Platform (GCP) is now available in the Delhi, India ( asia-south2 ) region. For more information on region availabilities, see Regions and availability zones . Policy constraint update. OpenShift Dedicated on Google Cloud Platform (GCP) users are now allowed to deploy clusters with the constraints/iam.allowedPolicyMemberDomains constraint in place. This feature allows users to restrict the set of identities that are allowed to be used in Identity and Access Management policies, further enhancing overall security for their resources. 1.1.6. Q4 2023 Policy constraint update. OpenShift Dedicated on Google Cloud Platform (GCP) users can now enable UEFISecureBoot during cluster installation, as required by the GCP ShieldVM policy. This new feature adds further protection from boot or kernel-level malware or rootkits. Cluster install update. OpenShift Dedicated clusters can now be installed on Google Cloud Platform (GCP) shared VPCs. OpenShift Dedicated on Google Cloud Marketplace availability. When creating an OpenShift Dedicated (OSD) cluster on Google Cloud through the Hybrid Cloud Console, customers can now select Google Cloud Marketplace as their preferred billing model. This billing model allows Red Hat customers to take advantage of their Google Committed Use Discounts (CUD) towards OpenShift Dedicated purchased through the Google Cloud Marketplace. 1.2. Known issues OpenShift Container Platform 4.14 introduced an updated HAProxy image from 2.2 to 2.6. This update created a change in behavior enforcing strict RFC 7230 compliance, rejecting requests with multiple Transfer-Encoding headers. This may cause exposed pods in OpenShift Dedicated 4.14 clusters sending multiple Transfer-Encoding headers to respond with a 502 Bad Gateway or 400 Bad Request error . To avoid this issue, ensure that your applications are not sending multiple Transfer-Encoding headers. For more information, see Red Hat Knowledgebase article . ( OCPBUGS-43095 )

Commands: