Configure the Cluster¶

After the cluster is installed, complete storage and registry configuration before running workloads. Networking day-2 steps depend on your topology:

NMState Operator — Required when you need bonds, VLANs, or OVS bridges after install (skip if install-time static networking / single NIC is enough)
Configure Networking — NNCPs, OVS bridges, CUDNs, and underlay networking (when using NMState)
Network Policy and Microsegmentation — NetworkPolicy for pods; MultiNetworkPolicy for secondary networks and VMs
Storage — Install your CSI driver and create StorageClasses
Registry — Configure persistent storage for the internal image registry

Additional Configuration¶

Workload Availability — Node health checks, automatic remediation, and workload rebalancing
OpenShift Virtualization — Install and configure KubeVirt for running VMs
Migration Toolkit for Virtualization — Migrate VMs from VMware vSphere, RHV, or OpenStack
OADP (Backup & Restore) — Backup and restore for applications and virtual machines

Monitoring and Alerting — Built-in Prometheus stack, user workload monitoring, and Alertmanager
Logging — Log collection and storage with Loki and OpenShift Logging
Network Observability — eBPF flow collection, topology, and Network Traffic console
MultiCluster Observability — Centralized monitoring across managed clusters (fleet management only)

Identity Providers — LDAP, OIDC, or other authentication (recommended before demo day)
OpenShift GitOps — ArgoCD for GitOps workflows
External Secrets Operator — Integrate external secret management (Vault, AWS, etc.)
Certificate Management — Install cert-manager, replace ingress and API certificates, and issue certs for workloads
Service Mesh — Istio ambient mode (out of POC baseline unless explicitly in scope)
Operators from Artifactory — Install operators from a private Artifactory registry