Tech Radar & Intelligence Watch
Continuous technology watch, architecture deep-dives, and production engineering insights across Linux, OpenShift, Kubernetes, and enterprise AI.
Docling, Granite & OpenShift AI: Multimodal Ingestion, Guided Decoding, and Structured RAG Extraction
Document ingestion with Docling layout vision models, vLLM guided decoding vs defensive guardrails with IBM Granite on Red Hat OpenShift AI (RHOAI).
ODF & Metro-DR: Multi-Cluster RPO=0 Resilience and Synchronous Storage on OpenShift
OpenShift Data Foundation Metro-DR architecture: synchronous Rook-Ceph RBD mirroring, RamenDR and RHACM declarative orchestration for RPO=0 resilience on stateful and AI workloads.
OpenShift Data Foundation: Rook-Ceph, CSI and Per-Tenant Encryption
ANALYSIS — OpenShift Data Foundation (Rook-Ceph): operator + Ceph daemons + CSI drivers, ceph-rbd / cephfs StorageClasses, cluster-wide or per-StorageClass encryption with HashiCorp Vault as KMS, and namespace-level multi-tenant isolation.
Container Security: Why Your Non-Root Container Drops Its Capabilities (SCC, CRI-O, Kernel)
ANALYSIS — Why CAP_NET_RAW is missing in a non-root container: the SCC → CRI-O → kernel pipeline, the five capability sets (Bnd/Prm/Eff/Inh/Amb), the UID 0 → non-root transition and the real fixes (file capabilities, KEP 2763 ambient capabilities).
llm-d & Distributed Inference on OpenShift: Prefill / Decode Disaggregation and Cache-Aware Routing
llm-d architecture on Red Hat OpenShift and vLLM: Prefill/Decode disaggregation, RDMA KV-cache transfer, and intelligent Gateway API routing for enterprise LLM workloads.
Weekly Tech Radar: AMD ROCm, Argo CD 4.0, Kyverno Guardrails, OpenClaw Enterprise & AI-Augmented CI
Weekly intelligence briefing: LLM inference on AMD GPUs (ROCm) with rootless Podman, the Argo CD 4.0 vision, Kubernetes policy as a guardrail, an open control plane for enterprise agents, and bounded AI in CI.
Event-Driven Ansible: Closed-Loop Remediation and Self-Healing on OpenShift
Source/rule/action rulebooks, ansible.eda and Decision Environments, closed-loop Prometheus/Alertmanager remediation on OpenShift, and the arrival of the MCP server in Ansible Automation Platform 2.7: reactive automation as a platform engineering skill.
Software Supply Chain Security on OpenShift: Tekton Chains, Sigstore (RHTAS) and SBOM/VEX
SLSA provenance signed by Tekton Chains, keyless Sigstore signing (Red Hat Trusted Artifact Signer), SBOM/VEX with Trusted Profile Analyzer, and Enterprise Contract (Conforma) release policy: the OpenShift build chain as the trust boundary.
Kubeflow Pipelines v2 & Data Science Pipelines on RHOAI: Declarative Orchestration and MLOps Reproducibility
Discover enterprise MLOps orchestration with Kubeflow Pipelines v2 (KFP) and Data Science Pipelines on Red Hat OpenShift AI: containerized workflows, S3 artifact lineage tracking, and automated model lifecycles.
RHACM Governance as Code: Declarative Zero-Trust Policies and Multi-Cluster Remediation
Explore the Policy Framework in Red Hat Advanced Cluster Management (RHACM): declarative governance, continuous compliance auditing, and proactive Zero-Trust auto-remediation across heterogeneous Kubernetes fleets.