×

As of 27 April 2020, Red Hat has decided to rename Red Hat OpenShift Container Engine to Red Hat OpenShift Kubernetes Engine in order to better communicate what value the product offering delivers.

Red Hat OpenShift Kubernetes Engine

Red Hat OpenShift Kubernetes Engine is a product offering from Red Hat that lets you use an enterprise class Kubernetes platform as a production platform for launching containers. You download and install OpenShift Kubernetes Engine the same way as OpenShift Container Platform as they are the same binary distribution, but OpenShift Kubernetes Engine offers a subset of the features that OpenShift Container Platform offers.

Similarities and differences

You can see the similarities and differences between OpenShift Kubernetes Engine and OpenShift Container Platform in the following table:

Table 1. Product comparison for OpenShift Kubernetes Engine and OpenShift Container Platform
OpenShift Kubernetes Engine OpenShift Container Platform

Fully Automated Installers

X

X

Over the Air Smart Upgrades

X

X

Enterprise Secured Kubernetes

X

X

Kubectl and oc automated command line

X

X

Operator Lifecycle Manager (OLM)

X

X

Administrator Web console

X

X

OpenShift Virtualization (CNV)

X

X

User Workload Monitoring

X

Metering and Cost Management SaaS Service

X

Platform Logging

X

Developer Web Console

X

Developer Application Catalog

X

Source to Image and Builder Automation (Tekton)

X

OpenShift Service Mesh (Kiali, Jaeger, and OpenTracing)

X

OpenShift Serverless (Knative)

X

OpenShift Pipelines (Jenkins and Tekton)

X

Embedded Component of IBM Cloud Pak and RHT MW Bundles

X

Core Kubernetes and container orchestration

OpenShift Kubernetes Engine offers full access to an enterprise-ready Kubernetes environment that is easy to install and offers an extensive compatibility test matrix with many of the software elements that you might use in your data center.

OpenShift Kubernetes Engine offers the same service level agreements, bug fixes, and common vulnerabilities and errors protection as OpenShift Container Platform. OpenShift Kubernetes Engine includes a Red Hat Enterprise Linux Virtual Datacenter and Red Hat CoreOS entitlement that allows you to use an integrated Linux operating system with container runtime from the same technology provider.

OpenShift Kubernetes Engine is subscription compatible with Windows Containers from Microsoft.

Enterprise-ready configurations

OpenShift Kubernetes Engine uses the same security options and default settings as the OpenShift Container Platform. Default security context constraints, pod security policies, best practice network and storage settings, service account configuration, SELinux integration, HAproxy edge routing configuration, and all other standard protections that OpenShift Container Platform offers are available in OpenShift Kubernetes Engine. OpenShift Kubernetes Engine offers full access to the integrated monitoring solution that OpenShift Container Platform uses, which is based on Prometheus and offers deep coverage and alerting for common Kubernetes issues.

OpenShift Kubernetes Engine uses the same installation and upgrade automation as OpenShift Container Platform.

Standard infrastructure services

With an OpenShift Kubernetes Engine subscription, you receive support for all storage plug-ins that OpenShift Container Platform supports.

In terms of networking, OpenShift Kubernetes Engine offers full and supported access to the Kubernetes Container Network Interface (CNI) and therefore allows you to use any third-party SDN that supports OpenShift Container Platform. It also allows you to use the included Open vSwitch software defined network to its fullest extent. OpenShift Kubernetes Engine allows you to take full advantage of the OVN Kubernetes overlay, Multus, and Multus plug-ins that are supported on OpenShift Container Platform. OpenShift Kubernetes Engine allows customers to use a Kubernetes Network Policy to create microsegmentation between deployed application services on the cluster.

You can also use the Route API objects that are found in OpenShift Container Platform, including its sophisticated integration with the HAproxy edge routing layer as an out of the box Kubernetes ingress controller.

Core user experience

OpenShift Kubernetes Engine users have full access to Kubernetes Operators, pod deployment strategies, Helm, and OpenShift Container Platform templates. OpenShift Kubernetes Engine users can use both the oc and kubectl command line interfaces. OpenShift Kubernetes Engine also offers an administrator web-based console that shows all aspects of the deployed container services and offers a container-as-a service experience. OpenShift Kubernetes Engine grants access to the Operator Life Cycle Manager that helps you control access to content on the cluster and life cycle operator-enabled services that you use. With an OpenShift Kubernetes Engine subscription, you receive access to the Kubernetes namespace, the OpenShift Project API object, and cluster-level Prometheus monitoring metrics and events.

Maintained and curated content

With an OpenShift Kubernetes Engine subscription, you receive access to the OpenShift Container Platform content from the Red Hat Container Catalog and Red Hat Connect ISV marketplace. You can access all maintained and curated content that the OpenShift Container Platform eco-system offers.

OpenShift Container Storage compatible

OpenShift Kubernetes Engine is compatible and supported with your purchase of OpenShift Container Storage.

Red Hat Middleware compatible

OpenShift Kubernetes Engine is compatible and supported with individual Red Hat Middleware product solutions. Red Hat Middleware Bundles that include OpenShift embedded in them only contain OpenShift Container Platform.

OpenShift Serverless

OpenShift Kubernetes Engine does not include OpenShift Serverless support. Please use OpenShift Container Platform for this support.

Quay Integration compatible

OpenShift Kubernetes Engine is compatible and supported with a Red Hat Quay purchase.

OpenShift Virtualization (CNV)

OpenShift Kubernetes Engine includes support for the Red Hat product offerings derived from the kubevirt.io open source project.

Advanced cluster management

OpenShift Kubernetes Engine is compatible with your additional purchase of Red Hat Advanced Cluster Manager for Kubernetes. An OpenShift Kubernetes Engine subscription does not offer a cluster-wide log aggregation solution or support Elasticsearch, Fluentd, or Kibana based logging solutions. Similarly, the chargeback features found in OpenShift Container Platform or the cloud.redhat.com Cost Management SaaS service are not supported with OpenShift Kubernetes Engine. Red Hat Service Mesh capabilities derived from the open source istio.io and kiali.io projects that offer OpenTracing observability for containerized services on OpenShift Container Platform are not supported in OpenShift Kubernetes Engine.

Advanced networking

The standard networking solutions in OpenShift Container Platform are supported with an OpenShift Kubernetes Engine subscription. OpenShift Container Platform’s Kubernetes CNI plug-in for automation of multi-tenant network segmentation between OpenShift Container Platform projects is entitled for use with OpenShift Kubernetes Engine. OpenShift Kubernetes Engine offers all the granular control of the source IP addresses that are used by application services on the cluster. Those egress IP address controls are entitled for use with OpenShift Kubernetes Engine. OpenShift Container Platform offers ingress routing to on cluster services that use non-standard ports when no public cloud provider is in use via the VIP pods found in OpenShift Container Platform. That ingress solution is supported in OpenShift Kubernetes Engine. OpenShift Kubernetes Engine users are supported for the Kubernetes ingress control object, which offers integrations with public cloud providers. Red Hat Service Mesh, which is derived from the istio.io open source project, is not supported in OpenShift Kubernetes Engine. Also, the Kourier ingress controller found in OpenShift Serverless is not supported on OpenShift Kubernetes Engine.

Developer experience

With OpenShift Kubernetes Engine, the following capabilities are not supported:

  • The CodeReady developer experience utilities and tools, such as CodeReady Workspaces.

  • OpenShift Container Platform’s pipeline feature that integrates a streamlined, Kubernetes-enabled Jenkins and Tekton experience in the user’s project space.

  • The OpenShift Container Platform’s source-to-image feature, which allows you to easily deploy source code, dockerfiles, or container images across the cluster.

  • Build strategies, builder pods, or Tekton for end user container deployments.

  • The odo developer command line.

  • The developer persona in the OpenShift Container Platform web console.

Feature summary

The following table is a summary of the feature availability in OpenShift Kubernetes Engine and OpenShift Container Platform.

Table 2. Features in OpenShift Kubernetes Engine and OpenShift Container Platform
OpenShift Kubernetes Engine OpenShift Container Platform

Life Cycle and Kubernetes

Fully Automated Installers (IPI)

X

X

Customizable Installers (UPI)

X

X

Disconnect Installation

X

X

RHEL or CoreOS entitlement

X

X

Automated Operating System Management (CoreOS)

X

X

Existing RHEL manual attach to cluster (BYO)

X

X

CRIO Runtime

X

X

OpenShift Virtualization (CNV)

X

X

Enterprise Secured Kubernetes

X

X

Auth Integrations, RBAC, SCC, Multi-Tenancy Admission Controller

X

X

Kubectl and oc automated command line

X

X

Day 2 Management

Operator Enabled Platform (CVO)

X

X

Operator Lifecycle Manager (OLM)

X

X

Cluster Monitoring (Prometheus)

X

X

User Workload Monitoring

X

Device Manager (i.e., GPU)

X

X

EFK Logging (ElasticSearch and Kibana)

X

Log Pipelines (fluentd forwarding)

X

X

Administrator Web Console

X

X

Service Mesh (Kiali, Jaeger, and OpenTracing)

X

Over the Air Smart Upgrades

X

X

Telemeter and Insights Connected Experience

X

X

Metering and Cost Management SaaS Service

X

OCM SaaS Service

X

X

Network and Storage

OVS and OVN SDN

X

X

HAProxy Ingress Controller

X

X

Kourier Ingress Controller

X

OpenStack Kuryr Integration

X

X

Ingress Cluster-wide Firewall

X

X

Egress Pod and Namespace Granular Control

X

X

Ingress Non-Standard Ports

X

X

Service Mesh (Istio and Envoy)

X

Multus and Available Multus Plugins

X

X

Network Policies

X

X

IPv6 Single and Dual Stack (primary interface)

IPv6 Single and Dual Stack (Multus secondary interfaces)

X

X

CNI Plugin ISV Compatibility

X

X

OpenShift Container Storage Sub Compatibility (not included in OCP or OpenShift Kubernetes Engine)

X

X

CSI Plugin ISV Compatibility

X

X

Application Services

RHT Middleware Bundles Sub Compatibility (not included in OCP)

X

IBM Cloud Pak Sub Compatibility (not included in OCP)

X

RHT and IBM middleware a la carte purchases (not included in OCP)

X

X

ISV or Partner Operator and Container Compatibility (not included in OCP or OpenShift Kubernetes Engine)

X

X

Embedded OperatorHub

X

X

Embedded Marketplace

X

X

Developer Application Catalog

X

Quay Compatibility (not included)

X

X

RHEL Software Collections and RHT SSO Common Service (included)

X

X

OpenShift Serverless

X

Developer Experience

Embedded Registry

X

X

CodeReady Containers

X

CodeReady Workspaces

X

Developer Web Console

X

Helm

X

X

OpenShift Pipelines (Jenkins and Tekton)

X

odo

X

Source to Image and Tekton Builders

X

OpenShift Serverless FaaS

X

IDE Integrations

X

Subscription Limitations

OpenShift Kubernetes Engine is a subscription offering that provides OpenShift Container Platform with a limited set of supported features at a lower list price. OpenShift Kubernetes Engine and OpenShift Container Platform are the same product and, therefore, all software and features are delivered in both. There is only one download, OpenShift Container Platform. OpenShift Kubernetes Engine uses the OpenShift Container Platform documentation and support services and bug errata for this reason.