Configure the Cluster¶
Post-installation configuration
After the cluster is installed, complete the following to prepare it for workloads. Items are grouped by purpose — complete the Required section first, then add capabilities based on your POC scope.
Required¶
These must be completed before deploying any workloads:
- NMState Operator — Required for advanced networking (bonds, VLANs, OVS bridges)
- Storage — Install your CSI driver and create StorageClasses
- Registry — Configure persistent storage for the internal image registry
You can run workloads with kubeadmin at this point. Configure an identity provider before demo day, and keep kubeadmin until at least one IdP user has cluster-admin.
Workload Availability¶
Install this before Virtualization if you will test node-loss or live migration:
- Descheduler & Affinity — Node health checks, automatic remediation, and workload rebalancing
- OADP (Backup & Restore) — Backup and restore for applications and virtual machines
Virtualization & Migration¶
Run and migrate virtual machines on OpenShift:
- OpenShift Virtualization — Install and configure KubeVirt for running VMs
- Migration Toolkit for Virtualization — Migrate VMs from VMware vSphere, RHV, or OpenStack
Observability¶
Centralized logging, metrics, and network visibility:
- Logging — Log collection and storage with Loki and OpenShift Logging
- Network Observability — eBPF flow collection, topology, and Network Traffic console
- MultiCluster Observability — Centralized monitoring across managed clusters (fleet management only)
Optional¶
Install based on your POC scope:
- Identity Providers — LDAP, OIDC, or other authentication (recommended before demo day)
- Networking — NNCPs, OVS bridges, CUDNs, and underlay networking
- OpenShift GitOps — ArgoCD for GitOps workflows
- External Secrets Operator — Integrate external secret management (Vault, AWS, etc.)
- Service Mesh — Istio ambient mode (out of POC baseline unless explicitly in scope)
- Web Terminal — Embedded CLI terminal in the web console
- Operators from Artifactory — Install operators from a private Artifactory registry
- POC Banner — Mark the web console as a POC environment