vania-janet/multiturn-rag-retrieval-data huggingface dataset:
: Red Hat OpenShift 4.5 is now the default version for Red Hat OpenShift on IBM Cloud clusters.







 November 2020 



 25 November 2020 

New! IBM Cloud HPCS Router
: In clusters that run Red Hat OpenShift version 4.5, you can now deploy the IBM Cloud HPCS Router to encrypt routes with a private key that is stored in an IBM Cloud® Hyper Protect Crypto Services instance. This key can be used by the router in TLS session establishment and in Certificate Signing Request (CSR) signing. To get started, see [Encrypting routes with keys stored in Hyper Protect Crypto Services](https://cloud.ibm.com/docs/openshift?topic=openshift-hpcs-router-changelog).





 24 November 2020 

New! Reservations to reduce classic worker node costs
: Create a reservation with contracts for 1 or 3 year terms for classic worker nodes to lock in a reduced cost for the life of the contract. Typical savings range between 30-50% compared to worker node costs. Reservations can be created in the IBM Cloud console for classic infrastructure only. For more information, see [Reserving instances to reduce classic worker node costs](https://cloud.ibm.com/docs/openshift?topic=openshift-reservations).





 23 November 2020 

Worker node versions
: Worker node fix pack update change log documentation is available.
Red Hat OpenShift Control Plane Operator v4.4.0-20200805 v4.4.0-20200821 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.4.0+20200821). 
 Red Hat OpenShift 4.4.17 4.4.20 See the [Red Hat OpenShift release notes](https://docs.openshift.com/container-platform/4.4/release_notes/ocp-4-4-release-notes.htmlocp-4-4-20). 
 OpenVPN Operator image v1.0.7 v1.0.8 Updated image for [CVE-2020-14352](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14352). 
 Red Hat OpenShift on IBM Cloud toolkit 4.4.0+20200805 4.4.0+20200821 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.4.0+20200821). 







 Change log for worker node fix pack 4.4.20_1517_openshift, released 14 September 2020 

The following table shows the changes that are in the worker node fix pack update 4.4.20_1517_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 4.4.18_1516_openshift

 Component Previous Current Description 

 CRI-O 1.17.4 1.17.5 See the [CRI-O release notes](https://github.com/cri-o/cri-o/releases/tag/v1.17.5).
[Red Hat OpenShift on IBM Cloud classic cluster tutorial](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift_tutorial) or [Red Hat OpenShift on IBM Cloud VPC cluster tutorial](https://cloud.ibm.com/docs/openshift?topic=openshift-vpc_rh_tutorial) <br><br> * Set up your IBM Cloud and Red Hat OpenShift CLI.<br> * Deploy an app that uses an IBM Cloud service.<br><br><br> 
 [Learning path for administrators](https://cloud.ibm.com/docs/openshift?topic=openshift-learning-path-admin) See an overview of all the options in Red Hat OpenShift on IBM Cloud for administrators. 
 [Learning path for developers](https://cloud.ibm.com/docs/openshift?topic=openshift-learning-path-dev) See an overview of all the options in Red Hat OpenShift on IBM Cloud for developers. 
 [Red Hat OpenShift developer activities](https://docs.openshift.com/container-platform/4.11/welcome/index.htmldeveloper-activities) documentation Learn how to work with your apps
Red Hat OpenShift 4.3.12-x86_64 4.3.18-x86_64 See the [Red Hat OpenShift release notes](https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.html). 
 Red Hat OpenShift Console configuration N/A N/A Fixed a problem that might leave the Red Hat OpenShift Console inaccessible after a cluster master operation. 
 Red Hat OpenShift Control Plane Operator 3b3ff62 bc493d4 See the [Red Hat OpenShift HyperShift toolkit repository](https://github.com/openshift/hypershift-toolkit/commit/bc493d4b51ea7d3d8e60453dee2407baf03e1c6d). Removed incorrect notifications about available cluster updates that referred to OpenShift Container Platform versions instead of Red Hat OpenShift on IBM Cloud versions. 
 Red Hat OpenShift HyperShift toolkit 3b3ff62 bc493d4 See the [Red Hat OpenShift HyperShift toolkit repository](https://github.com/openshift/hypershift-toolkit/commit/bc493d4b51ea7d3d8e60453dee2407baf03e1c6d). Removed incorrect notifications about available cluster updates that referred to OpenShift Container Platform versions instead of Red Hat OpenShift on IBM Cloud versions. 







 Change log for worker node fix pack 4.3.14_1522_openshift, released 11 May 2020 

The following table shows the changes that are in the worker node fix pack update 4.3.13_1522_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 4.3.13_1521_openshift

 Component Previous Current Description
Red Hat OpenShift on IBM Cloud Control Plane Operator v4.8.0-20221205 v4.8.0-20230123 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.8.0+20230123). 
 Red Hat OpenShift on IBM Cloud. 4.8.54 4.8.55 See the [Red Hat OpenShift on IBM Cloud Release Notes](https://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.htmlocp-4-8-55). 
 Red Hat OpenShift on IBM Cloud Metrics Server v4.8.0-20221205 v4.8.0-20230123 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.8.0+20230123). 
 Red Hat OpenShift on IBM Cloud toolkit 4.8.0+20221205 4.8.0+20230123 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.8.0+20230123). 







 Change log for worker node fix pack 4.8.57_1588_openshift, released 30 January 2023 

The following table shows the changes that are in the worker node fix pack 4.8.57_1588_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 4.8.55_1586_openshift

 Component Previous Current Description
Red Hat OpenShift configuration N/A N/A Updated the [feature gate configuration](https://cloud.ibm.com/docs/openshift?topic=openshift-service-settingsfeature-gates). 
 Red Hat OpenShift on IBM Cloud Control Plane Operator and Metrics Server v4.12.0-20230417 v4.13.0-20230515 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.13.0+20230515). 
 Red Hat OpenShift on IBM Cloud toolkit 4.12.0+20230417 4.13.0+20230515 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.13.0+20230515).
Red Hat OpenShift 4.9.17 4.9.21 For more information, see the [change logs](https://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.htmlocp-4-9-21). 
 Red Hat OpenShift Control Plane Operator v4.9.0-20220201 v4.9.0-20220222 See the [Red Hat OpenShift toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.9.0+20220222). 
 Red Hat OpenShift Metrics Server v4.9.0-20220201 v4.9.0-20220222 See the [Red Hat OpenShift toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.9.0+20220222). 
 Red Hat OpenShift toolkit 4.9.0+20220201 4.9.0+20220222 See the [Red Hat OpenShift toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.9.0+20220222). 
 OpenVPN server 2.5.4-r0-IKS-555 2.5.4-r0-IKS-562 Turns off CRL verification in the openvpn image. 
 OpenVPN Operator image v1.4.0 v1.4.1 Turns off CRL verification in the opevpn-operator image. 







 Change log for worker node fix pack 4.9.22_1529_openshift, released 28 February 2022 



Changes since version 4.9.19_1526_openshift

 Component Previous Current Description
Red Hat OpenShift 3.11.452 3.11.462 See the [Red Hat OpenShift release notes](https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.htmlocp-3-11-462). 







 Change log for master fix pack 3.11.439_1594_openshift, released 28 June 2021 

The following table shows the changes that are in the master fix pack patch update 3.11.439_1594_openshift. Master patch updates are applied automatically.



Changes since version 3.11.420_1590_openshift

 Component Previous Current Description 

 Cluster health image v1.1.22 v1.1.23 Updated to use Go version 1.15.12. Updated image for [CVE-2021-33194](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33194). 
 IBM Cloud File Storage for Classic plug-in and monitor 392 394 Updated to use Go version 1.15.12. Updated universal base image (UBI) to version 8.4 to resolve CVEs. 
 Key Management Service provider v1.0.14 v1.0.15 Updated to use Go version 1.15.12. Updated image for [CVE-2021-33194](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33194). 
 Red Hat OpenShift 3.11.420 3.11.439 See the [Red Hat OpenShift release notes](https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.htmlocp-3-11-439). 







 Change log for worker node fix pack 3.11.452_1593_openshift, released 22 June 2021 

The following table shows the changes that are in the worker node fix pack 3.11.452_1593_openshift.
Red Hat OpenShift on IBM Cloud toolkit 4.7.0+20220712 4.7.0+20220816 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.7.0+20220816). 







 Change log for worker node fix pack 4.7.56_1578_openshift, released 29 August 2022 

The following table shows the changes that are in the worker node fix pack 4.7.56_1578_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 4.7.55_1576_openshift

 Component Previous Current Description 

 RHEL 7 Packages N/A N/A Worker node package updates for [CVE-2022-2526](https://nvd.nist.gov/vuln/detail/CVE-2022-2526). 
 Red Hat OpenShift on IBM Cloud. 4.7.55 4.7.56 For more information, see the [change log](https://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-release-notes.htmlocp-4-7-56). 
 HAPROXY 6514a2 c1634f [CVE-2022-32206](https://nvd.nist.gov/vuln/detail/CVE-2022-32206), [CVE-2022-32208](https://nvd.nist.gov/vuln/detail/CVE-2022-32208) 







 Change log for worker node fix pack 4.7.55_1576_openshift, released 16 August 2022 

The following table shows the changes that are in the worker node fix pack 4.7.55_1576_openshift.
Red Hat OpenShift on IBM Cloud toolkit 4.7.0+20211109 4.7.0+20211201 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.7.0+20211201). 







 Change log for worker node fix pack 4.7.38_1543_openshift, released 6 December 2021 

The following table shows the changes that are in the worker node fix pack patch update 4.7.38_1543_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 4.7.37_1540_openshift

 Component Previous Current Description 

 RHEL 7 Packages 3.10.0-1160.45 3.10.0-1160.49 Updated worker node images and kernel with package updates. Contains fixes for [CVE-2020-36385](https://nvd.nist.gov/vuln/detail/CVE-2020-36385), [CVE-2021-37750](https://nvd.nist.gov/vuln/detail/CVE-2021-37750), [CVE-2021-41617](https://nvd.nist.gov/vuln/detail/CVE-2021-41617), [CVE-2021-20271](https://nvd.nist.gov/vuln/detail/CVE-2021-20271). 
 OpenShift Container Platform 4.7.37 4.7.38 See [change logs](https://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-release-notes.htmlocp-4-7-38) 







 Change log for worker node fix pack 4.7.37_1540_openshift, released 22 November 2021
Red Hat OpenShift on IBM Cloud Control Plane Operator v4.8.0-20220816 v4.8.0-20220920 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.8.0+20220920). 
 Red Hat OpenShift on IBM Cloud Metrics Server v4.8.0-20220816 v4.8.0-20220920 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.8.0+20220920). 
 Red Hat OpenShift on IBM Cloud toolkit 4.8.0+20220816 4.8.0+20220920 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.8.0+20220920). 







 Change log for worker node fix pack 4.8.50_1574_openshift, released 26 September 2022 

The following table shows the changes that are in the worker node fix pack 4.8.50_1574_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 4.8.48_1572_openshift

 Component Previous Current Description 

 RHEL 7 Packages N/A N/A N/A 
 RHEL 8 Packages 4.18.0-372.19.1 4.18.0-372.26.1 N/A 
 Red Hat OpenShift on IBM Cloud. 4.8.48 4.8.50 For more information, see the [change log](https://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.htmlocp-4-8-50).
: You can now create [private Network Load Balancers for VPC](https://cloud.ibm.com/docs/openshift?topic=openshift-vpc-lbaassetup_vpc_nlb_priv) to expose apps in clusters that run version 4.6 and later.





 9 June 2021 

New! Red Hat OpenShift 4.7
: You can create or [update](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift_versions) your cluster to Red Hat OpenShift version 4.7, which includes Kubernetes 1.20. With Red Hat OpenShift 4.7, you get the latest stable enhancements from the community, as well as beta access to select features such as [API server priority](https://cloud.ibm.com/docs/openshift?topic=openshift-kubeapi-priority). You also get enhancements to the IBM Cloud product, such as a refreshed user interface experience. For more information, see the [blog announcement](https://www.ibm.com/cloud/blog/announcements/openshift-version-47-now-available-in-red-hat-openshift-on-ibm-cloud).

Deprecated Red Hat OpenShift 4.5
: With the release of Red Hat OpenShift 4.7, clusters that run version 4.5 are deprecated, with a tentative unsupported date of 10 October 2021. Update your cluster to at least [version 4.6](https://cloud.ibm.com/docs/openshift?topic=openshift-openshift_versions) as soon as possible.

Expanded Troubleshooting
: You can now find troubleshooting steps for IBM Cloud persistent storage in the following pages.



* [File Storage for Classic](https://cloud.ibm.com/docs/openshift?topic=openshift-debug_storage_file)
Red Hat OpenShift on IBM Cloud toolkit 4.7.0+20210630 4.7.0+20210816 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.7.0+20210816). 







 Change log for worker node fix pack 4.7.23_1528_openshift, released 16 August 2021 

The following table shows the changes that are in the worker node fix pack patch update 4.7.23_1528_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 4.7.23_1527_openshift

 Component Previous Current Description 

 HA proxy 68e6b3 9c98dc Updated image with fixes for [CVE-2021-27218](https://nvd.nist.gov/vuln/detail/CVE-2021-27218)
[Understanding Red Hat OpenShift on IBM Cloud](https://cloud.ibm.com/docs/openshift?topic=openshift-overviewoverview)



* [What is Red Hat OpenShift on IBM Cloud and how does it work?](https://cloud.ibm.com/docs/openshift?topic=openshift-overviewwhat-is-overview)
* [What is Kubernetes?](https://cloud.ibm.com/docs/openshift?topic=openshift-overviewwhat-is-kube-overview)
* [What are containers?](https://cloud.ibm.com/docs/openshift?topic=openshift-overviewwhat-are-containers-overview)
* [What is Red Hat OpenShift?](https://cloud.ibm.com/docs/openshift?topic=openshift-overviewwhat-is-openshift-overview)
* [What compute host infrastructure does the service offer?](https://cloud.ibm.com/docs/openshift?topic=openshift-overviewwhat-compute-infra-is-offered)
* [Related resources](https://cloud.ibm.com/docs/openshift?topic=openshift-overviewkubernetes-resources)



[Benefits and service offerings](https://cloud.ibm.com/docs/openshift?topic=openshift-cs_ovcs_ov)



* [Benefits of using the service](https://cloud.ibm.com/docs/openshift?topic=openshift-cs_ovbenefits)
* [Comparison between Red Hat OpenShift and community Kubernetes clusters](https://cloud.ibm.com/docs/openshift?topic=openshift-cs_ovopenshift_kubernetes)
OpenVPN Operator image v1.3.3 v1.3.4 Updated Ansible operator base image to version 1.8.1 to resolve CVEs. 
 Red Hat OpenShift on IBM Cloud Metrics Server v4.6.0-20210608 v4.6.0-20210630 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.6.0+20210630). 
 Red Hat OpenShift on IBM Cloud toolkit 4.6.0+20210608 4.6.0+20210630 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.6.0+20210630). 







 Change log for worker node fix pack 4.6.38_1549_openshift, released 19 July 2021 

The following table shows the changes that are in the worker node fix pack 4.6.38_1549_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 4.6.36_1548_openshift

 Component Previous Current Description 

 Red Hat OpenShift 4.6.36 4.6.38 See the [Red Hat OpenShift release notes](https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.htmlocp-4-6-38). 
 RHEL 7 Packages N/A N/A Updated worker node image with package updates. 







 Change log for worker node fix pack 4.6.36_1548_openshift, released 6 July 2021 

The following table shows the changes that are in the worker node fix pack 4.6.36_1548_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.
Red Hat OpenShift on IBM Cloud 4.7.56 4.7.59 See the [Red Hat OpenShift on IBM Cloud Release Notes](https://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-release-notes.htmlocp-4-7-59). 
 OpenVPN Operator image v1.4.8 v1.4.9 Updated ansible operator base image to v1.23.0 to resolve CVEs. 
 Red Hat OpenShift on IBM Cloud Control Plane Operator v4.7.0-20220816 v4.7.0-20220920 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.7.0+20220920). 
 Red Hat OpenShift on IBM Cloud Metrics Server v4.7.0-20220816 v4.7.0-20220920 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.7.0+20220920). 
 Red Hat OpenShift on IBM Cloud toolkit 4.7.0+20220816 4.7.0+20220920 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.7.0+20220920). 







 Change log for worker node fix pack 4.7.59_1583_openshift, released 26 September 2022 

The following table shows the changes that are in the worker node fix pack 4.7.59_1583_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 4.7.56_1581_openshift

 Component Previous Current Description
Red Hat OpenShift Control Plane Operator v4.3.0-20200615 v4.3.0-20200709 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.3.0+20200709). 
 Red Hat OpenShift 4.3.28 4.3.31 See the [Red Hat OpenShift release notes](https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.htmlocp-4-3-31). 
 Red Hat OpenShift on IBM Cloud toolkit v4.3.0+20200615 v4.3.0+20200709 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.3.0+20200709). 
 OpenVPN Operator image v1.0.6 v1.0.7 Updated image for [CVE-2020-12049](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12049). 







 Change log for worker node fix pack 4.3.31_1534_openshift, released 17 August 2020 

The following table shows the changes that are in the worker node fix pack update 4.3.31_1534_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 4.3.29_1533_openshift

 Component Previous Current Description 

 Red Hat OpenShift 4.3.29 4.3.31 See the [Red Hat OpenShift release notes](https://docs.openshift.com/container-platform/4.3/release_notes/ocp-4-3-release-notes.htmlocp-4-3-31).
Red Hat OpenShift on IBM Cloud Metrics Server v4.7.0-20210512 v4.7.0-20210608 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.7.0+20210608). 
 Red Hat OpenShift on IBM Cloud toolkit 4.7.0+20210512 4.7.0+20210608 See the [Red Hat OpenShift on IBM Cloud toolkit release notes](https://github.com/openshift/ibm-roks-toolkit/releases/tag/v4.7.0+20210608). 







 Change log for worker node fix pack 4.7.16_1522_openshift, released 22 June 2021 

The following table shows the changes that are in the worker node fix pack 4.7.16_1522_openshift. Worker node patch updates can be applied by updating, reloading (in classic infrastructure), or replacing (in VPC infrastructure) the worker node.



Changes since version 4.7.13_1521_openshift

 Component Previous Current Description
When you are authenticated, Red Hat OpenShift on IBM Cloud generates TLS certificates that encrypt the communication to and from the Red Hat OpenShift API server and etcd data store to ensure a secure end-to-end communication between the worker nodes and the Red Hat OpenShift master. These certificates are never shared across clusters or across Red Hat OpenShift master components.

Need to revoke existing certificates and create new certificates for your cluster? Check out [Rotating CA certificates in your cluster](https://cloud.ibm.com/docs/openshift?topic=openshift-securitycert-rotate).

Connectivity to worker nodes
: Although Kubernetes secures the communication between the master and worker nodes by using the https protocol, no authentication is provided on the worker node by default. To secure this communication, Red Hat OpenShift on IBM Cloud automatically sets up an Konnectivity connection between the Red Hat OpenShift master and the worker node when the cluster is created.

Fine-grained access control
: As the account administrator you can [grant access to other users for Red Hat OpenShift on IBM Cloud](https://cloud.ibm.com/docs/openshift?topic=openshift-usersusers) by using IBM Cloud Identity and Access Management (IAM). IBM Cloud IAM provides secure authentication with the IBM Cloud platform, Red Hat OpenShift on IBM Cloud, and all the resources in your account. Setting up proper user roles and permissions is key to limiting who can access your resources and to limiting the damage that a user can do when legitimate permissions are misused. You can select from the following pre-defined user roles that determine the set of actions that the user can perform:



* Platform access roles: Determine the cluster and worker node management-related actions that a user can perform in Red Hat OpenShift on IBM Cloud. Platform access roles also assign users the basic-users and self-provisioners RBAC role. With these RBAC roles, you can create a Red Hat OpenShift project in the cluster, in which you can deploy apps and other Kubernetes resources.