Articles from Source: Red-Hat-Developer-Blog

Optimize OpenShift workloads with software-defined memory

2026-07-23 07:01
Organizations are facing memory limitations as they deploy advanced AI and analytics workloads. Traditional methods of increasing memory often lead to higher costs and complexity. Kove:SDM offers a solution by disaggregating memory from compute resources in OpenShift, allowing idle memory to be pooled and dynamically allocated without changing application code. Recent tests with the WASP Electronic Warfare pipeline validated this architecture, showing stable performance even under heavy...
Source: Red Hat Developer Blog
Chris Janiszewski, Ata Mufti

Why your AI agent needs two sandboxes: Benchmark data

2026-07-23 07:01
Discover the importance of layered sandboxing for AI agents! πŸ›‘οΈ The article discusses how using both NVIDIA OpenShell and Red Hat OpenShift sandboxed containers enhances security. While OpenShell prevents data exfiltration, it can't stop kernel exploits. Conversely, OpenShift isolates kernel exploits but lacks network traffic filtering. Testing revealed that combining the two provides comprehensive protection against a wider range of threats. Explore how this dual approach can strengthen your...
Source: Red Hat Developer Blog
Eitan Geiger

Migration toolkit for applications 8.2: Modernize your applications and clusters

2026-07-22 12:05
πŸš€ Red Hat has launched Migration Toolkit for Applications 8.2, designed to modernize applications and streamline cluster migrations. This version introduces the mta-ops CLI for stateless OpenShift workloads, ensuring a safe migration process without altering source or target clusters. It follows a strict five-stage pipeline: Export β†’ Transform β†’ Apply β†’ Validate β†’ Deploy. Additionally, a built-in Hub OpenID Connect provider simplifies user management and reduces infrastructure requirements....
Source: Red Hat Developer Blog
Syed M Shaaf, Ramon Roman Nissen

Stop chunking tables: How we built an agentic GraphRAG for financial disclosures with Docling

2026-07-22 07:01
πŸš€ Exciting advancements in financial data retrieval! A recent article explores the development of an agentic GraphRAG designed to enhance question-answering over SEC filings. Traditional methods often struggle with structured data like XBRL and HTML, leading to inaccuracies. The new approach utilizes Docling to create aligned knowledge graphs, improving navigation and synthesis of information. This multi-stage framework enhances the accuracy of answers while providing clearer insights into...
Source: Red Hat Developer Blog
Vincent Caldeira

Push images to Quay without a password

2026-07-22 03:01
πŸš€ Push container images to Quay without using passwords! You can enhance your GitHub Actions workflow by utilizing OpenID Connect (OIDC) for keyless authentication. This approach allows for secure, ephemeral tokens, reducing the need for long-lived secrets. πŸ”‘ In three simple steps: 1. Create a robot account in Quay. 2. Configure robot federation with GitHub's OIDC. 3. Use the OIDC token in your GitHub Actions workflow. This method streamlines your software shipping process and improves...
Source: Red Hat Developer Blog
Ken Dreyer

Simplify GitOps workflows with MCP in OpenShift Lightspeed

2026-07-21 07:16
Simplifying GitOps workflows is now easier with MCP in OpenShift Lightspeed! πŸš€ By integrating GitHub and incident detection MCP servers, developers can monitor workloads, detect issues, and push fixes seamlessly. This unified approach reduces the need to switch between tools, enhancing efficiency. The article outlines steps to set up these MCP servers and how they streamline incident management through AI. Learn more about transforming your workflow! πŸ’»πŸ”§ #GitOps #OpenShift #DevOps #MCP #AI
Source: Red Hat Developer Blog
Diego Alvarez Ponce

Operationalize AI agents with OpenShift and Kubernetes primitives

2026-07-21 07:16
Unlock the potential of AI agents with Red Hat OpenShift and Kubernetes! 🌐 In the latest article, key strategies on operationalizing agentic AI in production-ready AIOps systems are discussed. This includes swapping models, updating prompts, and injecting institutional knowledge without downtime. Kubernetes primitives like ConfigMaps and PersistentVolumeClaims help streamline operations, allowing for quick updates and zero-downtime rollouts. Discover how to enhance your AI infrastructure...
Source: Red Hat Developer Blog
Tony Kay, Ishu Verma

Architect an open blueprint for cloud-native AI agents

2026-07-20 07:01
Explore the architecture for cloud-native AI agents! This article outlines a blueprint for safe and efficient operation of autonomous agents, focusing on their distinct components and deployment patterns. Key aspects include the separation of lifecycles, security requirements, and the role of Red Hat AI in hosting these agents. The solution emphasizes open interfaces and interchangeable components to enhance flexibility and security. πŸ”πŸ’»πŸŒ #AI #CloudComputing #RedHat #TechInnovation...
Source: Red Hat Developer Blog
Fatih E. Nar, Sally O'Malley, Adel Zaalouk

Computer use: How AI agents can automate almost anything

2026-07-20 07:01
πŸš€ Discover the power of computer use with AI agents! This technology allows AI to interact with software like a human, automating tasks such as data management and application control without manual input. Learn how to set up local models and use open-source tools like Hermes to keep your data secure and efficient. Explore the potential of AI in your daily tasks! πŸŒŸπŸ’» #AI #Automation #TechInnovation #OpenSource #ComputerUse
Source: Red Hat Developer Blog
Cedric Clyburn

PyTorch distributed is changing and TorchComms is why

2026-07-20 03:16
πŸš€ PyTorch is evolving with the introduction of TorchComms, a new backend layer designed to replace the old c10d. This change aims to enhance training and inference systems by providing a communicator-centric architecture. πŸ”„ Users can transition without rewriting existing code, allowing for a smoother migration path while maintaining core functionalities like ProcessGroup and DeviceMesh. πŸ“Š Initial results show significant improvements in startup times and inference efficiency, particularly at...
Source: Red Hat Developer Blog
Arkadip Maitra

What 429 chaos experiments taught us about Kubernetes operator resilience

2026-07-20 03:16
πŸš€ In the latest chaos experiments on Kubernetes operators, 429 tests were conducted across 22 operators. Most operators passed standard tests like PodKill, but deeper tests like DeploymentScaleZero revealed critical gaps in resilience. Some operators failed to recover from network partitions and other failures, indicating issues with their reconciliation logic. In addition, SDK-level testing uncovered bugs that CLI tests missed, highlighting the importance of comprehensive testing strategies....
Source: Red Hat Developer Blog
Ugo Giordano

Benchmark Red Hat Data Grid in OpenShift 4 using Hyperfoil

2026-07-17 07:15
πŸš€ Discover how to benchmark Red Hat Data Grid in OpenShift 4 with Hyperfoil! This article explains the process of benchmarking using the Red Hat Data Grid operator and Helm charts. Hyperfoil is an open-source tool designed for distributed performance testing, allowing users to measure memory footprint, latency, and throughput. Learn how to install the Hyperfoil operator and create custom benchmarking resources. Adjust JVM settings to enhance performance and manage your cluster effectively....
Source: Red Hat Developer Blog
Francisco De Melo Junior, Alexander Barbosa Ayala

Layered sandboxing for AI agents: OpenShift and OpenShell

2026-07-16 07:01
AI coding agents require capabilities that can expose them to various security risks. Red Hat OpenShift and NVIDIA OpenShell are two solutions that address these challenges by providing layered sandboxing. OpenShell wraps agents in a policy-enforced sandbox, controlling outbound connections and enforcing file system isolation. Meanwhile, OpenShift sandboxed containers use lightweight VMs to isolate workloads, protecting the host from kernel exploits. Together, they mitigate different threat...
Source: Red Hat Developer Blog
Eitan Geiger

How obs-mcp boosts AI-native OpenShift observability

2026-07-16 07:01
Unlock the future of observability with the Model Context Protocol (MCP) for Red Hat OpenShift! πŸš€ The obs-mcp component enables AI models to access diverse data sources, enhancing decision-making in complex environments. It automates data correlations, reducing manual workflows for engineers during incidents. Key features include: - Structured interfaces for efficient querying. - Toolsets for metrics, logs, and traces. - Guardrails for safe data access. Explore how obs-mcp transforms...
Source: Red Hat Developer Blog
Vanessa Martini, Ivan Necas, Saswata Mukherjee

Red Hat build of Agent Sandbox: Isolated workload management with Kubernetes

2026-07-15 07:01
πŸš€ The Red Hat build of Agent Sandbox simplifies workload management in isolated environments. Developers can request sandboxes without needing to understand the underlying technology, allowing them to focus on application development. Key features include lifecycle management, hardware-assisted isolation with Kata Containers, and near-instant provisioning through warm pools. This system is not limited to AI workloads and supports various applications requiring complete isolation. #RedHat...
Source: Red Hat Developer Blog
Emanuele Giuseppe Esposito, Jens Freimann

Run Claude Code locally with vLLM and OpenShift AI

2026-07-15 07:01
Unlock the potential of AI coding assistants by running Claude Code locally with vLLM and OpenShift AI! πŸš€ This setup allows developers to maintain privacy and avoid token limits while leveraging open-source models. With Red Hat's validated models, you can easily benchmark performance tailored to your needs. Learn how to deploy your model and connect it to Claude Code for a seamless coding experience. #AI #Coding #OpenSource #DevTools #RedHat
Source: Red Hat Developer Blog
Cedric Clyburn

Verified boot in automotive with AutoSD

2026-07-15 03:15
πŸ” The article discusses the Automotive Stream Distribution (AutoSD) and its focus on verified boot for Linux in vehicles. πŸ”‘ Verified boot ensures only authorized code runs during the boot process, preventing unauthorized tampering. βš™οΈ Two main boot methods are supported: Android Verified Boot (aboot) and UEFI, each with unique processes for validation and execution. πŸ“„ The article also outlines tools and workflows for signing and sealing boot images, which enhance security. Read more to...
Source: Red Hat Developer Blog
Alexander Larsson

Red Hat OpenShift 4.22: What dynamic plugin developers need to know

2026-07-14 13:03
πŸš€ Red Hat OpenShift 4.22 is here! Dynamic plugin developers must migrate to new dependencies to ensure compatibility with the updated web console. Key changes include updates to React, React Router, and Redux versions. Refer to the release notes for migration examples and use the Claude skill for assistance. Explore more resources to ease your transition! #RedHat #OpenShift #WebDevelopment #DynamicPlugins #SoftwareUpdate
Source: Red Hat Developer Blog
Jackson Lee

What's new for developers in Red Hat OpenShift 4.22

2026-07-14 13:03
πŸš€ Red Hat OpenShift 4.22 is now available, featuring key updates for developers! πŸ› οΈ New enhancements in OpenShift Dev Spaces include the VS Code Remote-SSH feature and OpenID Connect support for Azure DevOps. πŸ“¦ The Red Hat build of Podman Desktop introduces Project Hummingbird for secure images and improved accessibility features. πŸ” Updates also bring significant improvements to the Red Hat Developer Hub, Trusted Artifact Signer, and more! Learn more in the release notes! #RedHat #OpenShift...
Source: Red Hat Developer Blog
Shannon Madden

Simplify your performance monitoring with the pmlogger PUSH model

2026-07-14 03:01
Red Hat Enterprise Linux (RHEL) 10.2 introduces the pmlogger PUSH model, making performance monitoring simpler. With the new PUSH model, remote clients can send data to a central collector system without additional configuration, streamlining the process for users. πŸ“ˆ The Performance Co-Pilot (PCP) and Grafana continue to support data collection and visualization, enhancing system monitoring capabilities. For more details, check out the full article. πŸ“ŠπŸ’» #RedHat #PerformanceMonitoring #RHEL10...
Source: Red Hat Developer Blog
Christian Horn

Efficiently manage host content with Red Hat Satellite's multi-CV

2026-07-13 07:01
πŸš€ Red Hat Satellite introduces the multi-CV feature, streamlining host content management for system administrators. This update allows direct assignment of multiple content views (CVs) to hosts, reducing the complexity of traditional composite content views (CCVs). By simplifying the publication process, it enhances efficiency and flexibility in software distribution. Explore how multi-CV can transform your management approach! πŸ“Šβœ¨ #RedHat #SystemAdministration #ContentManagement #TechUpdate...
Source: Red Hat Developer Blog
Matthew Yee

New features in Python 3.14

2026-07-11 03:01
πŸš€ Python 3.14 is here, bringing significant enhancements for parallelism, string handling, and typing workflows! This release is supported across various Red Hat platforms, including Fedora, RHEL, and OpenShift. Key features include deferred evaluation of annotations, t-strings for safer string processing, and the introduction of free-threading for improved performance. Explore how to integrate Python 3.14 into your projects and the impact on your work environment. #Python314 #RedHat...
Source: Red Hat Developer Blog
Louis Imershein, Bronce McClain

Why killing pods is not enough: Testing operator reconciliation with operator-chaos

2026-07-11 03:01
πŸ” Exploring operator-chaos: An open-source framework for testing Kubernetes operators. This article highlights limitations of traditional chaos tools that focus mainly on pod recovery. Operator-chaos addresses critical gaps by testing operator reconciliation through 20 failure injection types across four categories. Key features include: - Four injection modes from CLI to action interceptors. - Knowledge models for tailored failure testing. - Structured verdicts to assess operator behavior...
Source: Red Hat Developer Blog
Ugo Giordano

Troubleshoot Red Hat OpenShift Virtualization localnet with the netobserv command

2026-07-10 03:01
πŸš€ Troubleshooting network visibility in Red Hat OpenShift Virtualization is vital for VMs communicating over localnet. The article discusses using the `oc netobserv` command-line tool to troubleshoot four scenarios, focusing on VLANs, DHCP issues, MTU, and dropped packets. Key points include how to confirm VM VLAN placement, diagnose DHCP lease problems, and analyze MTU mismatches. For detailed insights and practical scenarios, check out the full article! πŸ“ŠπŸ–₯️ #OpenShift #Virtualization...
Source: Red Hat Developer Blog
Moyo Oyegunle

EvalHub: Capability and safety benchmarking for AI models

2026-07-09 07:01
EvalHub is a new service for evaluating large language models (LLMs) on Red Hat AI. It streamlines testing by running multiple benchmarks through scalable Kubernetes jobs. This service assesses models on three key aspects: capability, safety, and performance. By using a unified collection of benchmarks from various providers, it offers a comprehensive evaluation with a single submission. Key features include tracking experiment lineage and maintaining performance metrics as OCI artifacts....
Source: Red Hat Developer Blog
William Caban Babilonia

Tune and troubleshoot Red Hat Data Grid cross-site replication

2026-07-09 07:01
πŸš€ Red Hat Data Grid enables efficient in-memory caching and cross-site replication across OpenShift clusters. The Data Grid operator facilitates this by deploying clusters and caches through user-configurable resources. By utilizing multi-site installations, data is safeguarded during outages in various locations. Key configurations include Route types and load-balancer services for secure communication. For detailed insights on deployment and troubleshooting, check the full article! #RedHat...
Source: Red Hat Developer Blog
Francisco De Melo Junior, Alexander Barbosa Ayala

How NetworkManager uses eBPF to support CLAT and IPv6-mostly

2026-07-08 07:16
πŸš€ IPv6 is still not widely adopted, with only about 50% of Google users accessing it. The dual-stack model prolongs IPv4 reliance, but a new strategy called "IPv6-mostly" is emerging. 🌐 This approach allows IPv6-only clients to coexist with legacy IPv4 systems, easing the transition to an IPv6-only environment. NetworkManager 1.58 in Red Hat Enterprise Linux 10.3 utilizes customer-side translator (CLAT) and eBPF to implement this effectively. πŸ” Key features include DHCPv4 option 108, DNS64,...
Source: Red Hat Developer Blog
Beniamino Galvani

Running database workloads on Red Hat OpenShift Virtualization

2026-07-08 07:16
πŸš€ This guide outlines how to run database performance tests using HammerDB on MariaDB, PostgreSQL, and Microsoft SQL Server within Red Hat OpenShift Virtualization. πŸ” Key prerequisites include having an operational OpenShift cluster, appropriate virtualization settings, and a functional storage backend. πŸ–₯️ It provides steps for creating test virtual machines, ensuring dedicated storage, and enabling passwordless SSH for automated access. πŸ“Š The article details the deployment methodology and...
Source: Red Hat Developer Blog
Elvir Kuric

Demystify the architecture of OpenShift hosted control planes

2026-07-08 07:16
Explore the final part of our series on Red Hat OpenShift's hosted control planes (HCP). This article delves into essential architectural considerations for effective HCP adoption. Key topics include infrastructure requirements, the role of the Multicluster Engine (MCE) Operator, and the importance of storage performance for etcd. Understanding load balancing and DNS strategies is crucial, especially for bare metal deployments. For a detailed overview, check the full article! πŸŒπŸ”§ #OpenShift...
Source: Red Hat Developer Blog
Giovanni Fontana

Visualize your cluster: Manage observability with Red Hat build of Perses

2026-07-07 07:01
Red Hat's build of Perses is transforming observability management in the OpenShift ecosystem. 🌐 As a unified visualization engine, it consolidates observability tools into a Kubernetes-native experience. Key features include native Kubernetes integration, unified signal correlation, and GitOps readiness, allowing for efficient data management. πŸ“Š Perses enhances user workflows and supports multiple data sources, making it easier for engineers to navigate observability assets. πŸ” For more...
Source: Red Hat Developer Blog
Vanessa Martini, Gabriel Bernal, Jenny Zhu, Peter Yurkovich, Evelyn Tanigawa Murasaki

Why your RBAC linter misses privilege escalation chains (and how to fix it)

2026-07-07 07:01
If you use kube-linter for Kubernetes RBAC setups, be aware it may miss indirect privilege escalation through binding chains. Kube-linter checks resources independently but doesn't analyze connections between them. This can lead to vulnerabilities, allowing attackers to escalate privileges without special tools. The new tool, kube-chainsaw, addresses this by building permission graphs from static manifests, identifying critical issues that kube-linter overlooks. It scans for risky permissions...
Source: Red Hat Developer Blog
Ugo Giordano

Dependency analytics 1.0: AI coding with supply chain security

2026-07-07 07:01
πŸš€ AI coding tools are transforming software development, allowing developers to generate code rapidly. However, there's a significant concern: 45% of AI-generated code has security flaws. πŸ” Introducing Dependency Analytics 1.0, a free extension for editors like VS Code. It scans project dependencies in real-time for known vulnerabilities, enhancing supply chain security without disrupting workflow. πŸ’» With over three million installs, it supports various ecosystems and provides immediate...
Source: Red Hat Developer Blog
Petr Toman

Smarter data generation for faster Speculator training

2026-07-06 13:06
πŸš€ Large language models face a challenge in generating text efficiently due to the per-token processing cost. Speculative decoding offers a solution, improving throughput by 2-3 times with no loss in output quality. A smaller "speculator" model proposes tokens, while a larger "verifier" model validates them, enhancing speed and lowering latency. Training a good speculator quickly relies on high-quality data. Researchers explored using outputs from different models to cut costs and found that...
Source: Red Hat Developer Blog
Shubhra Pandit, Alexandre Marques

5 anti-patterns that cause Kubernetes operator vulnerabilities

2026-07-06 07:01
🚨 Understand the vulnerabilities in your Kubernetes operators! A recent article identifies five anti-patterns that can lead to operator vulnerabilities, including issues with unfiltered informers in ConfigMaps and Secrets. These patterns can cause out-of-memory errors and impact performance. Key points include: 1️⃣ Misunderstanding predicates as cache filters. 2️⃣ The limitations of the DisableFor option. 3️⃣ Implicit informers created by client.Get() calls. Learn how to audit your operators...
Source: Red Hat Developer Blog
Ugo Giordano, Rishabh Singh

Track model usage with the OpenShift AI 3.4 usage dashboard

2026-07-06 07:01
πŸ“Š Red Hat OpenShift AI 3.4 introduces a new usage dashboard to enhance visibility into model consumption for organizations scaling their AI initiatives. This dashboard allows administrators to track API calls, token usage, and more, aiding in effective cost attribution and capacity planning. Key features include granular usage data, time-based filtering, and an export function for financial analysis. Currently in technology preview, the dashboard faces some limitations, primarily related to...
Source: Red Hat Developer Blog
Arik Hadas, Tal Gitelman, liel bondy

Red Hat build of Quarkus 3.33: Stability and performance advancements for enterprise Java

2026-07-03 07:16
πŸš€ Red Hat has announced the general availability of Quarkus 3.33, establishing a new Long-Term Support (LTS) release focused on enterprise stability. This version combines key updates from 3.28 to 3.33, offering enhanced security, performance, and tooling improvements all at once. Key features include: - Modernized data access with Hibernate ORM 7.2 and updated clients for better efficiency. - Enhanced security controls for OpenID Connect, allowing for more precise token handling. - Full...
Source: Red Hat Developer Blog
Jeff Beck

Batch inference on OpenShift AI with llm-d: Architecture, integration, and workflows

2026-07-02 07:01
Explore the capabilities of batch inference with the llm-d batch gateway on Red Hat OpenShift AI. πŸ” This Kubernetes-native service optimizes high-volume offline tasks like model evaluations and dataset scoring, allowing efficient use of GPU resources. πŸš€ It seamlessly integrates with existing LLMInferenceService backends, supporting OpenAI-compatible operations. Learn more about its architecture and workflows for effective batch processing. #OpenShiftAI #BatchInference #Kubernetes #LLM...
Source: Red Hat Developer Blog
Lior Aronovich, Raymond Zhao, Jooyeon Mok

Upgrade RHEL with leapp

2026-07-02 07:01
Upgrade your Red Hat Enterprise Linux (RHEL) with leapp! πŸš€ Leapp allows for in-place system upgrades while retaining your configurations and subscriptions. However, it faces challenges with disk encryption via LUKS. To overcome this, administrators can use the TPM2 module to bypass encryption temporarily during the upgrade process. Before starting, ensure backups are in place and check your system's configurations for a smooth transition from RHEL 8 to RHEL 9. #RHEL #Leapp #Linux...
Source: Red Hat Developer Blog
Ted Brunell

Build a multi-agent supervisor pattern on OpenShift

2026-07-01 07:16
πŸš€ Explore the multi-agent supervisor pattern on OpenShift! This approach enhances security during incident investigations by isolating agents. Each agent handles specific tasks with its own sandbox, reducing risks of credential mixing and data exposure. Learn how the architecture separates data handling and orchestration for improved security. #OpenShift #CyberSecurity #AI #IncidentManagement #CloudComputing
Source: Red Hat Developer Blog
Adel Zaalouk, Derek Carr, Mrunal Patel

Build a multi-agent supervisor pattern on Red Hat AI

2026-07-01 07:16
🚨 When a checkout system goes down, troubleshooting can be overwhelming. Imagine AI agents handling metrics, logs, and runbooks for you. However, this poses a security riskβ€”one compromised agent can expose multiple systems. The solution? Implementing a multi-agent supervisor pattern with isolated sandboxes enhances security by ensuring each agent operates within its own restricted environment. This method minimizes credential exposure and data cross-contamination, making incident...
Source: Red Hat Developer Blog
Adel Zaalouk, Derek Carr, Mrunal Patel