Red Hat adds agentic AI operations, stronger security in OpenShift 5 and RHEL updates
Red Hat Inc. today announced a major update to its OpenShift Kubernetes-based application development platform that adds artificial intelligence-powered troubleshooting, stronger security controls and simplified upgrades as the company seeks to make its hybrid cloud infrastructure easier to manage.
The company also announced new versions of Red Hat Enterprise Linux with enhanced protection against software tampering, AI-assisted system administration and post-quantum cryptography.
The releases, unveiled at KubeCon + CloudNativeCon North America in Salt Lake City, reflect Red Hat’s continuing initiatives to embed AI into enterprise infrastructure management while strengthening security across increasingly distributed environments.
Red Hat OpenShift 5, the first major version upgrade in seven years, extends the platform’s ability to manage containers, virtual machines and AI workloads within a common environment. It also broadens the OpenShift Lightspeed generative AI assistant into an agent capable of investigating operational problems and recommending corrective actions.
“It’s infusing intelligence into the platform with agent-based troubleshooting through a simple interface with Lightspeed and natural language,” said Chris Wright, Red Hat’s chief technology officer and senior vice president of global engineering.
The updated Lightspeed interface allows administrators to generate visualizations of system performance using natural-language requests. For example, an administrator can ask for central processing unit utilization over the previous week, add memory consumption and overlay application errors. The resulting charts can be saved to dashboards that update continuously.
More significantly, OpenShift 5 introduces agentic troubleshooting that automatically investigates cluster events. When problems occur, the system can examine related information, reason through possible causes and propose remediation steps. Administrators retain control over whether the recommended actions are executed.
The platform also includes an AI-driven upgrade planner that examines application dependencies, Kubernetes application programming interfaces and optional operators to identify potential compatibility problems before updates begin.
“It is easy to upgrade Kubernetes,” said Mike Barrett, Red Hat’s vice president and general manager of hybrid cloud platforms. “What is difficult is navigating all the things you’re running on top of Kubernetes.”
Security and simpler upgrades
Security enhancements include hardened multitenancy, more extensive network isolation, automated certificate management and post-quantum cryptography for control-plane communications. The capabilities are aimed in part at sovereign cloud providers and regulated organizations that must maintain strict separation between tenants and demonstrate compliance with security requirements.
OpenShift 5 also supports automated graphics processing unit resource allocation across AI inference and traditional enterprise workloads, potentially improving utilization of that expensive computing infrastructure.
Unlike previous major platform transitions, OpenShift 5 can be installed as an in-place update from OpenShift 4, avoiding the need to reinstall software or migrate workloads, Red Hat said. A revised lifecycle approach provides greater predictability for customers operating long-lived enterprise applications and virtualized infrastructure.
“We are no longer asking you to reinstall or migrate to use more of our product,” Barrett said. “This is a simple upgrade.”
The company is emphasizing virtualization as an increasingly important part of its business. Barrett said OpenShift Virtualization has grown to an $800 million business as customers seek alternatives to traditional virtualization platforms.
It said NASA’s laboratory migrated approximately 2,400 virtual machines to OpenShift Virtualization, while Gates Corp. moved more than 1,300 virtual machines and reported a 50% increase in available compute capacity.
Linux security enhancements
The forthcoming Red Hat Enterprise Linux 10.3 and 9.9 releases extend the company’s security strategy to the operating system.
A principal addition in RHEL 10.3 is support for sealed images, which use customer-controlled cryptographic keys to verify operating system integrity from the boot through the kernel and root file system. The technology is designed to prevent unauthorized modifications and block compromised software components from running.
Red Hat is also introducing a Model Context Protocol server that allows compatible AI assistants to investigate live Linux systems while maintaining access controls. Integration with Performance Co-Pilot, an open-source toolkit for monitoring, recording, analyzing, and controlling infrastructure, enables agents to examine historical performance information alongside current system conditions to identify the causes of operational problems.
A self-managed version of the RHEL command-line assistant, available in developer preview, lets organizations run AI inference locally. The capability is intended for disconnected, air-gapped and regulated environments where sending operational information outside the organization may be prohibited.
The releases also introduce post-quantum cryptography support for applications built using the Go programming language, including integration of the post-quantum Module-Lattice-Based Key-Encapsulation Mechanism encryption algorithm with the language’s Transport Layer Security implementation. Additional enhancements include updated developer toolchains and support for newer processor architectures.
Developer Hub adds AI governance
Red Hat separately announced Developer Hub 2.1, an update to its enterprise developer portal that gives AI coding agents governed access to organizational information, approved software components and standardized development workflows. Through MCP integration, agents can discover existing services, follow established development procedures and perform authorized actions using enterprise tooling.
The update also introduces expanded AI asset cataloging, a context-aware assistant and a longer support lifecycle, increasing the release support window from six to 10 months. Developer Hub 2.1 is generally available, as is OpenShift 5, while the new RHEL versions are expected in the coming weeks.
Image: SiliconANGLE/Red Hat/ChatGPT
Support our mission to keep content open and free by engaging with theCUBE community. Join theCUBE’s Alumni Trust Network, where technology leaders connect, share intelligence and create opportunities.
- 15M+ viewers of theCUBE videos , powering conversations across AI, cloud, cybersecurity and more
- 11.4k+ theCUBE alumni — Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network
Are you an AWS customer? Support SiliconANGLE financially by buying your AWS services from our Marketplace portal page and links: https://siliconangle.com/aws-marketplace/
About SiliconANGLE Media
theCUBE AIand theCUBE SuperStudios — with flagship locations in Silicon Valley and the New York Stock Exchange — SiliconANGLE Media operates at the intersection of media, technology and AI.
Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.