vania-janet/multiturn-rag-retrieval-data huggingface dataset:
[Red Hat OpenShift on IBM Cloud cluster architecture](https://cloud.ibm.com/docs-content/v1/content/bce0f0917a9eea684d1b4b704ac6343a1f65f446/openshift//images/cs_org_ov_both_ses_roks4.png)

Figure 1. Red Hat OpenShift version 4 master components



 Red Hat OpenShift version 4 master components 

Review the following components in the IBM-managed master of your Red Hat OpenShift on IBM Cloud cluster.

You can't modify these components. IBM manages the components and automatically updates them during master patch updates.

In OpenShift Container Platform 4, many components are configured by a corresponding operator for ease of management. The following table discusses these operators and components together, to focus on the main functionality the component provides to the cluster.

Single tenancy
: The master and all master components are dedicated only to you, and are not shared with other IBM customers.

Replicas
: Master components, including the Red Hat OpenShift API server and etcd data store have three replicas and, if located in a multizone metro, are spread across zones for even higher availability. The master components are backed up every 8 hours.

cloud-controller-manager
: The cloud controller manager manages cloud provider-specific components such as the IBM Cloud load balancer.

cluster-health
: The cluster health component monitors the health of the cluster and integrates with IBM Cloud monitoring and metrics for the service.

cluster-policy-controller
: The [cluster-policy-controller](https://github.com/openshift/cluster-policy-controller) maintains policy resources that are required to create pods within the cluster.

cluster-version-operator
: The cluster version operator (CVO) installs and updates other operators that run in the cluster. For more information, see the [GitHub project](https://github.com/openshift/cluster-version-operator).

control-plane-operator
: The control plane operator manages the installation and update of control plane components in the master.
Deployment Journey Overview 

Red Hat OpenShift on IBM Cloud is a managed offering to create your own Red Hat OpenShift cluster of compute hosts to deploy and manage containerized apps on IBM Cloud. Red Hat OpenShift on IBM Cloud provides intelligent scheduling, self-healing, horizontal scaling, service discovery and load balancing, automated rollouts and rollbacks, and secret and configuration management for your apps. Combined with an intuitive user experience, built-in security and isolation, and advanced tools to secure, manage, and monitor your cluster workloads, you can rapidly deliver highly available and secure containerized apps in the public cloud.

Welcome to the Deployment Journey for Cloud Native on IBM Cloud! Use the sidebar on the left to navigate between the journey points.



 Journey Map 

![Architecture](https://cloud.ibm.com/docs-content/v1/content/b7b9235ce6abd45b66931867c388cf107d38e15b/cloud-native-journey/roks-on-vpc/images/overview/journey-map.png)





 Assumptions 

This deployment guide will be assuming the following points. Please note that while your circumstance may not be exactly identical, you will still benefit from the overall journey steps and concepts covered in this guide.



* You are already familar with the concepts introduced in the "Tour IBM Cloud" videos available on the [Getting Started with IBM Cloud](https://cloud.ibm.com/cloud/get-started) page.
* Access groups will need to be defined so only certain users have the ability to create and manage the VPC network settings (i.e. CIDR ranges, Subnet ACLs rules, etc.).
* When you create your cluster, you must choose a VPC networking setup so that certain cluster components can communicate with each other and with networks or services outside of the cluster.



* Worker-to-worker communication: All worker nodes must be able to communicate with each other on the private network through VPC subnets.
* Worker-to-master and user-to-master communication: Your worker nodes and your authorized cluster users can communicate with the Kubernetes master securely over virtual private endpoints or cloud service endpoints.
Red Hat OpenShift on IBM Cloud toolkit 4.5.0+20201210 4.5.0+20210112 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.5.0+20210112). 







 Change log for worker node fix pack 4.5.24_1526_openshift, released 18 January 2021 

The following table shows the changes that are in the worker node fix pack 4.5.24_1526_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 4.5.22_1524_openshift

 Component Previous Current Description 

 Red Hat OpenShift 4.5.22 4.5.24 See the [Red Hat OpenShift release notes](https://docs.openshift.com/container-platform/4.5/release_notes/ocp-4-5-release-notes.htmlocp-4-5-24). 
 RHEL 7 Packages N/A N/A Updated worker node image with package updates. 







 Change log for master fix pack 4.5.24_1525_openshift, released 6 January 2021 

The following table shows the changes that are in the master fix pack patch update 4.5.24_1525_openshift. Master patch updates are applied automatically.



Changes since version 4.5.18_1523_openshift

 Component Previous Current Description 

 IBM Calico extension 538 556 Updated image to include the ip command. 
 IBM Cloud Block Storage driver and plug-in 1.17.2 v2.0.0 Updated to use the universal base image (UBI), to use Go version 1.15.5, to run with a least privileged security context, and to improve logging. Updated image to implement additional IBM security controls. 
 IBM Cloud Controller Manager v1.18.13-1 v1.18.14-1 Updated to support the Kubernetes 1.18.14 release.
Red Hat OpenShift on IBM Cloud Metrics Server v4.11.0-20221205 v4.11.0-20230123 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.11.0+20230123). 
 Red Hat OpenShift on IBM Cloud toolkit 4.11.0+20221205 4.11.0+20230123 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.11.0+20230123). 







 Change log for worker node fix pack 4.11.25_1541_openshift, released 30 January 2023 

The following table shows the changes that are in the worker node fix pack 4.11.25_1541_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 4.11.22_1538_openshift

 Component Previous Current Description 

 RHEL 8 Packages N/A N/A Worker node kernel & package updates for [CVE-2022-40303](https://nvd.nist.gov/vuln/detail/CVE-2022-40303), [CVE-2022-40304](https://nvd.nist.gov/vuln/detail/CVE-2022-40304), [CVE-2023-22809](https://nvd.nist.gov/vuln/detail/CVE-2023-22809). 
 Red Hat OpenShift on IBM Cloud. 4.11.22 4.11.25 For more information, see the [change log](https://docs.openshift.com/container-platform/4.11/release_notes/ocp-4-11-release-notes.htmlocp-4-11-25).
Red Hat OpenShift 4.9.21 4.9.25 See the [Red Hat OpenShift release notes](https://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.htmlocp-4-9-25) 
 Red hat OpenShift Control Plane Operator v4.9.0-20220222 v4.9.0-20220322 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.9.0+20220322). 
 Red Hat OpenShift on IBM Cloud Metrics Server v4.9.0-20220222 v4.9.0-20220322 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.9.0+20220322). 
 Red Hat OpenShift on IBM Cloud toolkit 4.9.0+20220222 4.9.0+20220322 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.9.0+20220322). 
 OpenVPN client 2.5.4-r0-IKS-556 2.5.4-r0-IKS-579 Updated Go to version 1.16.15. 
 OpenVPN server 2.5.4-r0-IKS-562 2.5.4-r0-IKS-578 Updated Go to version 1.16.15. 
 OpenVPN Operator image v1.4.1 v1.4.2 Updated ansible operator base image to version v1.18.0 to resolve CVEs.
: For more information, see [Cluster autoscaler add-on change log](https://cloud.ibm.com/docs/openshift?topic=openshift-ca_changelog).





 5 October 2022 

Red Hat Enterprise Linux version 8 is available for Red Hat OpenShift on IBM Cloud 4.9 and 4.10 clusters
: You can now create Red Hat OpenShift on IBM Cloud 4.9 and 4.10 clusters using Red Hat Enterprise Linux version 8 worker nodes. To review the migration guide, see [Migrating to a new Red Hat Enterprise Linux version](https://cloud.ibm.com/docs/openshift?topic=openshift-rhel_migrate). To review operating system support by cluster version, see [Red Hat OpenShift on IBM Cloud version information](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift_versions).





 3 October 2022 

CLI change log update
: The [CLI change log](https://cloud.ibm.com/docs/openshift?topic=openshift-cs_cli_changelog) is updated for version 1.0.454.







 September 2022 



 30 September 2022 

New! Enabling Flow logs for VPC components
: Flow logs gather information about the traffic entering or leaving your VPC cluster worker nodes. For more information, see [Enabling Flow Logs for VPC cluster components](https://cloud.ibm.com/docs/openshift?topic=openshift-vpc-flow-log).





 26 September 2022 

Worker node fix pack
Red Hat OpenShift on IBM Cloud toolkit 4.7.0+20220222 4.7.0+20220308 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.7.0+20220308). 







 Change log for worker node pack 4.7.45_1557_openshift, released 28 March 2022 



Changes since version 4.7.44_1554_openshift

 Component Previous Current Description 

 RHEL 7 Packages N/A N/A N/A 
 HA proxy 15198f b40c07 [CVE-2021-45960](https://nvd.nist.gov/vuln/detail/CVE-2021-45960), [CVE-2021-46143](https://nvd.nist.gov/vuln/detail/CVE-2021-46143), [CVE-2022-22822](https://nvd.nist.gov/vuln/detail/CVE-2022-22822), [CVE-2022-22823](https://nvd.nist.gov/vuln/detail/CVE-2022-22823), [CVE-2022-22824](https://nvd.nist.gov/vuln/detail/CVE-2022-22824), [CVE-2022-22825](https://nvd.nist.gov/vuln/detail/CVE-2022-22825), [CVE-2022-22826](https://nvd.nist.gov/vuln/detail/CVE-2022-22826), [CVE-2022-22827](https://nvd.nist.gov/vuln/detail/CVE-2022-22827), [CVE-2022-23852
Getting started with Red Hat OpenShift for HPC 

Red Hat® OpenShift® for HPC enables you to deploy [Red Hat OpenShift clusters on IBM Cloud®](https://cloud.ibm.com/docs/openshift?topic=openshift-getting-started) infrastructure for running HPC workloads. The deployment is performed by using Terraform and IBM Cloud Schematics as automation frameworks. The following steps outline the high-level flow of events that are performed:



1. Create a workspace with the Terraform code from IBM Cloud Schematics. This step defines the set of configuration properties that are used to perform the automation.
2. Generate a plan to confirm whether the configuration properties are valid, so that when you run the Terraform code, all of the resources are provisioned correctly. If the validation fails, fix the configuration properties and try again.
3. Apply a plan triggers the actual deployment of the IBM Cloud resources to have an HPC cluster up and running by the time the deployment completes. If the deployment fails, identify the reason for failure, fix the problem, and try again. If a change is needed to the configuration properties, it might be better to generate a plan again.



Before you can deploy your Red Hat OpenShift cluster, you need to create or gather some information. To get started, complete the following steps.



 Step 1: Check your permissions for IBM Cloud services 

You need to make sure that you have the appropriate permissions for the IBM Cloud services that are used by the offering to create and manage cluster resources. For more information, see the following links:



* [Granting user permissions for VPC resources](https://cloud.ibm.com/docs/vpc?topic=vpc-managing-user-permissions-for-vpc-resources)
* [Managing user access for Schematics](https://cloud.ibm.com/docs/schematics?topic=schematics-access)
* [Assigning access to Secrets Manager](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-assign-access)
* [Security information for Red Hat OpenShift clusters](https://cloud.ibm.com/docs/openshift?topic=openshift-security).
* [Accessing clusters](https://cloud.ibm.com/docs/openshift?topic=openshift-access_cluster).
* [App networking options](https://cloud.ibm.com/docs/openshift?topic=openshift-cs_network_planning) with comparisons of routes, NodePort, load balancers, and Ingress.
* [Common app modification scenarios](https://cloud.ibm.com/docs/openshift?topic=openshift-plan_deployopenshift_move_apps_scenarios) for moving apps from community Kubernetes to Red Hat OpenShift.
* Updated [pricing FAQ](https://cloud.ibm.com/docs/openshift?topic=openshift-faqscharges) to explain the monthly license in more detail.
* [Resizing and externally exposing the internal registry](https://cloud.ibm.com/docs/openshift?topic=openshift-registryopenshift_internal_registry).
* Tutorial overview with links to tutorials.
* [Using the internal registry in Red Hat OpenShift](https://cloud.ibm.com/docs/openshift?topic=openshift-registryopenshift_internal_registry).



Entitled software
: If you have licensed products from your [MyIBM.com](https://myibm.ibm.com) container software library, you can [set up your cluster to pull images from the entitled registry](https://cloud.ibm.com/docs/openshift?topic=openshift-registrysecret_entitled_software).

script update command
: Red Hat OpenShift [4.5.15_1518_openshift](https://cloud.ibm.com/docs/openshift?topic=openshift-changelog_archive4515_1518), [4.4.27_1523_openshift](https://cloud.ibm.com/docs/openshift?topic=openshift-changelog_archive4427_1523), [4.3.38_1544_openshift](https://cloud.ibm.com/docs/openshift?topic=openshift-changelog_archive4338_1544), and [3.11.286_1571_openshift](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift_changelog_311311286_1571).

Worker node versions
: Worker node fix pack update change log documentation is available.
: Red Hat OpenShift [4.5.15_1518_openshift](https://cloud.ibm.com/docs/openshift?topic=openshift-changelog_archive4515_1518_worker), [4.4.27_1523_openshift](https://cloud.ibm.com/docs/openshift?topic=openshift-changelog_archive4427_1523_worker), [4.3.40_1544_openshift](https://cloud.ibm.com/docs/openshift?topic=openshift-changelog_archive4340_1544), and [3.11.306_1571_openshift](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift_changelog_311311306_1571).





 22 October 2020 

API key
: Added more information about [how the Red Hat OpenShift on IBM Cloud API key is used](https://cloud.ibm.com/docs/openshift?topic=openshift-access-credsapi_key_about).
Red Hat OpenShift on IBM Cloud Control Plane Operator v4.7.0-20220411 v4.7.0-20220509 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.7.0+20220509). 
 Red Hat OpenShift on IBM Cloud Metrics Server v4.7.0-20220411 v4.7.0-20220509 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.7.0+20220509). 
 Red Hat OpenShift on IBM Cloud toolkit 4.7.0+20220411 4.7.0+20220509 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.7.0+20220509). 







 Change log for worker node fix pack 4.7.50_1564_openshift, released 23 May 2022 

The following table shows the changes that are in the worker node fix pack 4.7.50_1564_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 4.7.49_1566_openshift

 Component Previous Current Description 

 Red Hat OpenShift on IBM Cloud. 4.7.49 4.7.50 For more information, see the [change log](https://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-release-notes.htmlocp-4-7-50).
1.2.23 Red Hat OpenShift on IBM Cloud can optionally [enable Kubernetes API server auditing](https://cloud.ibm.com/docs/openshift?topic=openshift-health-audit). 
 1.2.24 Red Hat OpenShift on IBM Cloud can optionally [enable Kubernetes API server auditing](https://cloud.ibm.com/docs/openshift?topic=openshift-health-audit). 
 1.2.25 Red Hat OpenShift on IBM Cloud can optionally [enable Kubernetes API server auditing](https://cloud.ibm.com/docs/openshift?topic=openshift-health-audit). 
 1.2.33 Red Hat OpenShift on IBM Cloud can optionally [enable a Kubernetes Key Management Service (KMS) provider](https://cloud.ibm.com/docs/openshift?topic=openshift-encryptionkms). 
 1.2.34 Red Hat OpenShift on IBM Cloud can optionally [enable a Kubernetes Key Management Service (KMS) provider](https://cloud.ibm.com/docs/openshift?topic=openshift-encryptionkms). 
 3.2.1 Red Hat OpenShift on IBM Cloud can optionally [enable Kubernetes API server auditing](https://cloud.ibm.com/docs/openshift?topic=openshift-health-audit). 
 3.2.2 Red Hat OpenShift on IBM Cloud can optionally [enable Kubernetes API server auditing](https://cloud.ibm.com/docs/openshift?topic=openshift-health-audit). 
 4.2.6 Red Hat OpenShift on IBM Cloud does not protect kernel defaults to allow customers to tune kernel parameters. 
 4.2.8 Red Hat OpenShift on IBM Cloud ensures that the hostname matches the name issued by the infrastructure. 
 5.1.2 Red Hat OpenShift on IBM Cloud deploys some system components that could have their Kubernetes secret access further restricted.
Red Hat OpenShift on IBM Cloud Control Plane Operator v4.9.0-20221205 v4.9.0-20230123 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.9.0+20230123). 
 Red Hat OpenShift on IBM Cloud. 4.9.52 4.9.54 See the [Red Hat OpenShift on IBM Cloud Release Notes](https://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.htmlocp-4-9-54). 
 Red Hat OpenShift on IBM Cloud Metrics Server v4.9.0-20221205 v4.9.0-20230123 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.9.0+20230123). 
 Red Hat OpenShift on IBM Cloud toolkit 4.9.0+20221205 4.9.0+20230123 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.9.0+20230123). 







 Change log for worker node fix pack 4.9.54_1574_openshift, released 30 January 2023 

The following table shows the changes that are in the worker node fix pack 4.9.54_1574_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 4.9.54_1571_openshift

 Component Previous Current Description
1.2.34 Red Hat OpenShift on IBM Cloud can optionally enable a Kubernetes Key Management Service (KMS) provider. 
 2.7 Red Hat OpenShift on IBM Cloud configures a unique certificate authority for etcd. 
 5.2.8 Red Hat OpenShift on IBM Cloud installs custom SCCs. 
 5.3.1 Review the [issue in GitHub](https://github.com/ComplianceAsCode/content/issues/9047). 
 5.3.2 Red Hat OpenShift on IBM Cloud defines a set of default Calico network policies defined and additional network policies can optionally be added.
Red Hat OpenShift on IBM Cloud Control Plane Operator v4.9.0-20221104 v4.9.0-20221205 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.9.0+20221205). 
 Red Hat OpenShift on IBM Cloud. 4.9.51 4.9.52 See the [Red Hat OpenShift on IBM Cloud Release Notes](https://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.htmlocp-4-9-52). 
 Red Hat OpenShift on IBM Cloud Metrics Server and toolkit v4.9.0-20221104 v4.9.0-20221205 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.9.0+20221205). 







 Change log for worker node fix pack 4.9.52_1567_openshift, released 05 December 2022 

The following table shows the changes that are in the worker node fix pack 4.9.52_1567_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 4.9.51_1566_openshift

 Component Previous Current Description 

 RHEL 7 Packages N/A N/A Worker node package updates for [CVE-2022-42898](https://nvd.nist.gov/vuln/detail/CVE-2022-42898). 
 RHEL 8 Packages N/A N/A Worker node package updates for [CVE-2022-42898](https://nvd.nist.gov/vuln/detail/CVE-2022-42898). 
 Red Hat OpenShift on IBM Cloud.
Red Hat OpenShift on IBM Cloud Control Plane Operator v4.10.0-20221104 v4.10.0-20221205 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.10.0+20221205). 
 Red Hat OpenShift on IBM Cloud. 4.10.39 4.10.43 See the [Red Hat OpenShift on IBM Cloud Release Notes](https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.htmlocp-4-10-43). 
 Red Hat OpenShift on IBM Cloud Metrics Server and toolkit v4.10.0-20221104 v4.10.0-20221205 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.10.0+20221205). 







 Change log for worker node fix pack 4.10.43_1547_openshift, released 05 December 2022 

The following table shows the changes that are in the worker node fix pack 4.10.43_1547_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 4.10.41_1546_openshift

 Component Previous Current Description 

 RHEL 7 Packages N/A N/A Worker node package updates for [CVE-2022-42898](https://nvd.nist.gov/vuln/detail/CVE-2022-42898). 
 RHEL 8 Packages N/A N/A Worker node package updates for [CVE-2022-42898](https://nvd.nist.gov/vuln/detail/CVE-2022-42898). 
 Red Hat OpenShift on IBM Cloud.
1.2.25 Red Hat OpenShift on IBM Cloud can optionally [enable Kubernetes API server auditing](https://cloud.ibm.com/docs/openshift?topic=openshift-health-audit). 
 1.2.33 Red Hat OpenShift on IBM Cloud can optionally [enable a Kubernetes Key Management Service (KMS) provider](https://cloud.ibm.com/docs/openshift?topic=openshift-encryptionkms). 
 1.2.34 Red Hat OpenShift on IBM Cloud can optionally [enable a Kubernetes Key Management Service (KMS) provider](https://cloud.ibm.com/docs/openshift?topic=openshift-encryptionkms). 
 3.2.1 Red Hat OpenShift on IBM Cloud can optionally [enable Kubernetes API server auditing](https://cloud.ibm.com/docs/openshift?topic=openshift-health-audit). 
 3.2.2 Red Hat OpenShift on IBM Cloud can optionally [enable Kubernetes API server auditing](https://cloud.ibm.com/docs/openshift?topic=openshift-health-audit). 
 4.2.6 Red Hat OpenShift on IBM Cloud does not protect kernel defaults to allow customers to tune kernel parameters. 
 4.2.8 Red Hat OpenShift on IBM Cloud ensures that the hostname matches the name issued by the infrastructure. 
 5.1.2 Red Hat OpenShift on IBM Cloud deploys some system components that could have their Kubernetes secret access further restricted. 
 5.1.3 Red Hat OpenShift on IBM Cloud deploys some system components that could have their Kubernetes resource access further restricted. 
 5.1.5 Red Hat OpenShift on IBM Cloud does not set automountServiceAccountToken: false for each default service account. 
 5.1.6 Red Hat OpenShift on IBM Cloud deploys some system components that could set automountServiceAccountToken: false.