Chapter 3. Technology Previews
This section provides a list of all Technology Previews available in OpenShift sandboxed containers 1.13.
See Technology Preview Features Support Scope for more information.
3.1. OpenShift sandboxed containers and confidential containers
- OpenShift sandboxed containers on hosted clusters managed by hosted control planes (Technology Preview)
You can deploy OpenShift sandboxed containers on hosted clusters on bare metal, Microsoft Azure, and Amazon Web Services (AWS) platforms. The OpenShift sandboxed containers Operator automatically detects the hosted control planes topology and uses
DaemonSetdeployment mode to install the Kata runtime on hosted cluster worker nodes without requiring the Machine Config Daemon (MCD).Technology Preview limitations:
- GPU passthrough is not supported. The NVIDIA GPU Operator is not compatible with hosted control planes.
- Disconnected environments are not supported.
- Only x86_64 architecture is supported, on OpenShift Container Platform 4.19.38 or later.
- Confidential containers on disconnected Azure and Azure Red Hat OpenShift clusters (Technology Preview)
With this release, you can deploy and operate confidential containers in disconnected environments on self-managed OpenShift Container Platform on Microsoft Azure and on Microsoft Azure Red Hat OpenShift clusters. You can remove all external network dependencies from the confidential containers workflow, which enables deployment in regulated environments that require full network isolation.
Confidential containers on disconnected Azure and Azure Red Hat OpenShift provide the following capabilities:
-
Operator installation from mirrored catalogs by using
oc mirrorwith ImageDigestMirrorSet (IDMS) support. On Azure Red Hat OpenShift, catalog mirroring integrates with the managed Azure Container Registry (ACR). - Offline pod VM image provisioning with a self-contained builder that has no external download dependencies.
- Lifecycle management for peer-pod virtual machines (VMs) through Azure private endpoints, with no public endpoint traffic.
- Intel® TDX attestation in a disconnected network environment uses locally provisioned DCAP collateral. It does not require external Intel services.
- Disconnected Red Hat build of Trustee for AMD SEV-SNP attestation by using Versioned Chip Endorsement Key (VCEK) caching.
- All guest components communicate exclusively with the in-cluster Red Hat build of Trustee endpoint, with no external network calls.
-
Operator installation from mirrored catalogs by using
- NVIDIA GPU compatibility with confidential containers on Azure (Technology Preview)
You can deploy GPU-accelerated confidential workloads on Microsoft Azure by using peer pods. Peer pods dynamically provision NVIDIA GPU-enabled confidential virtual machines (CVMs) with hardware-based trusted execution environment (TEE) protections extended to GPU memory and computation.
NVIDIA GPU with confidential containers on Azure provides the following capabilities:
- Confidential containers workloads can be accelerated by using NVIDIA H100 GPU.
- GPU memory encryption during computation within the Azure CVM TEE.
- Attestation and verification of GPU TEE integrity before workload deployment by using the Red Hat build of Trustee GPU verifier.
- Compatibility with AMD SEV-SNP TEE hardware.
- NVIDIA GPU compatibility with for OpenShift sandboxed containers on Azure (Technology Preview)
You can deploy GPU-accelerated sandboxed workloads on Microsoft Azure by using peer pods. Peer pods dynamically provision NVIDIA GPU-enabled virtual machines (VMs) for your sandboxed container workloads.
NVIDIA GPU with OpenShift sandboxed containers on Azure provides the following capabilities:
-
Peer pods provision
Standard_NC40ads_H100_v5instance type VMs as the basis for your pod workload. - Your workload can be accelerated by using the NVIDIA H100 GPU assigned to your pod’s containers.
-
Peer pods provision
- AWS STS authentication support for peer pods (Technology Preview)
You can now use Amazon Web Services Security Token Service (STS) authentication for peer pods. The OpenShift sandboxed containers Operator supports AWS STS authentication for peer pods on self-managed OpenShift Container Platform clusters. STS authentication uses short-lived, federated tokens for AWS API authentication instead of long-lived static credentials.
3.2. Red Hat build of Agent Sandbox
- Red Hat build of Agent Sandbox for managing isolated AI agent workloads (Technology Preview)
Red Hat build of Agent Sandbox is a Kubernetes-native platform for managing isolated, stateful workloads. It is purpose-built for AI agent runtimes, development environments, and scenarios that require long-running containers with stable identity.
Red Hat build of Agent Sandbox addresses the following challenges:
- Slow provisioning: Warm pools keep pods in a ready state, minimizing the time needed for allocation.
- Security and isolation: Runtime-agnostic isolation with OpenShift sandboxed containers, which provides hardware virtualization suitable for executing untrusted or LLM-generated code in multitenant clusters.
- State management: It provides stable host names and persistent storage that survives restarts.
- Resource efficiency: Built-in hibernation pauses idle sandboxes to save compute costs.
Known limitations
Unauthenticated sandbox router: The Red Hat build of Agent Sandbox sandbox router is deployed with
ALLOW_UNAUTHENTICATED_ROUTER=true. The router does not require authentication and accepts proxied requests without validating anAuthorization: Bearerheader. Any client that can reach the router over the network can forward HTTP traffic into sandbox workloads. This configuration is not suitable for production or multitenant clusters without additional network-level access controls.
'%20d='M201.5%20305.5c-13.8%200-24.9-11.1-24.9-24.6%200-13.8%2011.1-24.9%2024.9-24.9%2013.6%200%2024.6%2011.1%2024.6%2024.9%200%2013.6-11.1%2024.6-24.6%2024.6zM504%20256c0%20137-111%20248-248%20248S8%20393%208%20256%20119%208%20256%208s248%20111%20248%20248zm-132.3-41.2c-9.4%200-17.7%203.9-23.8%2010-22.4-15.5-52.6-25.5-86.1-26.6l17.4-78.3%2055.4%2012.5c0%2013.6%2011.1%2024.6%2024.6%2024.6%2013.8%200%2024.9-11.3%2024.9-24.9s-11.1-24.9-24.9-24.9c-9.7%200-18%205.8-22.1%2013.8l-61.2-13.6c-3-.8-6.1%201.4-6.9%204.4l-19.1%2086.4c-33.2%201.4-63.1%2011.3-85.5%2026.8-6.1-6.4-14.7-10.2-24.1-10.2-34.9%200-46.3%2046.9-14.4%2062.8-1.1%205-1.7%2010.2-1.7%2015.5%200%2052.6%2059.2%2095.2%20132%2095.2%2073.1%200%20132.3-42.6%20132.3-95.2%200-5.3-.6-10.8-1.9-15.8%2031.3-16%2019.8-62.5-14.9-62.5zM302.8%20331c-18.2%2018.2-76.1%2017.9-93.6%200-2.2-2.2-6.1-2.2-8.3%200-2.5%202.5-2.5%206.4%200%208.6%2022.8%2022.8%2087.3%2022.8%20110.2%200%202.5-2.2%202.5-6.1%200-8.6-2.2-2.2-6.1-2.2-8.3%200zm7.7-75c-13.6%200-24.6%2011.1-24.6%2024.9%200%2013.6%2011.1%2024.6%2024.6%2024.6%2013.8%200%2024.9-11.1%2024.9-24.6%200-13.8-11-24.9-24.9-24.9z'/%3e%3c/svg%3e){kind=small}