Red Hat OpenShift 4.20 Enhances Security of the Modern Application Platform to Unite Enterprise IT, from Virtual Machines to AI

Red Hat, the world’s leading provider of open source solutions, announced the general availability of Red Hat OpenShift 4.20, the latest version of the industry’s leading hybrid cloud application platform powered by Kubernetes. Red Hat OpenShift 4.20 introduces capabilities for accelerating AI workloads, strengthening core platform security and enhancing virtualization strategies consistently from the datacenter, to public clouds, and the edge.

Also Read: AiThority Interview Featuring: Pranav Nambiar, Senior Vice President of AI/ML and PaaS at DigitalOcean

As organizations navigate increasing complexity and expanding regulatory requirements, they need a more consistent and reliable platform to bridge diverse applications and services across their entire IT footprint. There is also a growing need for capabilities that support digital sovereignty, which requires organizations to maintain expansive control over their cloud destiny – deciding precisely which applications and data must run in-house and which exist outside that domain. Red Hat OpenShift 4.20 provides a unified and more efficient foundation, built with systems security front and center, enabling sovereign deployments and accelerating the development and deployment of applications and AI workloads across hybrid cloud environments.

Strengthened platform security and enhanced core manageability

This latest release significantly strengthens the platform’s security posture, addressing both immediate threats and the complex, evolving security needs of enterprise IT. By hardening the platform for the unique requirements of sovereignty, Red Hat OpenShift 4.20 helps secure the main traffic between control plane components with initial support for post-quantum cryptography (PQC) algorithms for mTLS, to deliver long-term cryptographic protection for critical communications.

This release also brings greater operational flexibility to the core platform and strengthens security capabilities for Red Hat OpenShift Platform Plus customers. This includes the general availability of Red Hat Advanced Cluster Security 4.9 and enhancements to Red Hat Trusted Artifact Signer and Red Hat Trusted Profile Analyzer to help customers more easily manage and analyze security data. Additionally, the zero trust workload identity manager is scheduled for release later this year, delivering identity attestation for machines and humans alike across federated infrastructure.

Additional features focused on control and identity include:

• Gain identity management flexibility and control: Bring-your-own OpenID Connect enables customers to use their existing OpenID Connect (OIDC) infrastructure, providing greater control over user data.
• Significantly lower cost pod-to-pod mTLS encryption, identity-based traffic policies, observability and more with “sidecar-less” ambient mode with Red Hat OpenShift Service Mesh, helping reduce infrastructure costs, operational complexity, and resource overhead.
• Simplify external secret management with a cluster-wide service: The External Secrets Operator (ESO) provides lifecycle management for secrets fetched from external secret management systems, helping improve security.
• Reduce infrastructure costs with high availability on smaller footprints: Two-node OpenShift with arbiter enables a new high-availability form factor, reducing infrastructure costs without sacrificing resiliency.
• Enhance network integration and performance for on-premises deployments: Border Gateway Protocol (BGP) in OVN-Kubernetes delivers new networking capabilities to on-premises environments by providing continuous route exchange between OpenShift and external network fabrics, which means faster adaptation to network changes, VM migration or failover events.

Scaling AI from experimentation to production

Red Hat OpenShift 4.20 helps accelerate AI projects to run in production faster, more reliably, and with more confidence. New capabilities are designed to streamline the deployment and management of complex AI workloads, making them easier to scale and manage. For instance, the LeaderWorkerSet (LWS) API for AI workloads simplifies the management of large, distributed AI workloads with automated orchestration and scaling. Deployment time is dramatically reduced using Image volume source for AI workloads, which allows new models to be integrated in minutes without rebuilding application containers. Together, these features provide functionality for Red Hat OpenShift AI or other AI platforms to help customers move more easily from experimentation to production. Additionally, Model Context Protocol (DP) enables cluster management via developer tools like Visual Studio Code.

Production-ready virtualization

Red Hat continues to optimize Red Hat OpenShift Virtualization, enabling customers to manage virtual machines (VMs) alongside containers and cloud-native applications from a single platform. The addition of CPU load-aware rebalancing and Arm support improves performance and resource utilization for virtualized workloads, while expanded hybrid cloud support extends Red Hat OpenShift Virtualization to bare-metal deployments on Oracle Cloud, giving organizations more control over their infrastructure and the placement of their data. With enhanced storage offloading functionality, the migration toolkit for virtualization significantly accelerates VM migration from legacy virtualization solutions to OpenShift Virtualization through existing storage resources.

Also Read: The End Of Serendipity: What Happens When AI Predicts Every Choice?