Chapter 4. Developer Preview features


Important

This section describes Developer Preview features in Red Hat OpenShift AI 3.5. Developer Preview features are not supported by Red Hat in any way and are not functionally complete or production-ready. Do not use Developer Preview features for production or business-critical workloads. Developer Preview features provide early access to functionality in advance of possible inclusion in a Red Hat product offering. Customers can use these features to test functionality and provide feedback during the development process. Developer Preview features might not have any documentation, are subject to change or removal at any time, and have received limited testing. Red Hat might provide ways to submit feedback on Developer Preview features without an associated SLA.

For more information about the support scope of Red Hat Developer Preview features, see Developer Preview Support Scope.

4.1. 3.5 GA Developer Preview features

Secure agent sandboxing and policy enforcement using OpenShell
A Developer Preview of OpenShell is available for secure agent onboarding on OpenShift. The included guide covers Helm deployment, mTLS, LLM provider setup, isolated sandboxes, and controlled network egress. This experimental preview uses upstream artifacts and is not supported for production environments. To try it out, follow the instructions in the agent-ops GitHub repository.
Agent Catalog in AI Hub for agent starter kit discovery

The Agent Catalog in AI Hub provides a centralized interface for discovering and exploring agent starter kits as a Developer Preview. You can browse available agents, view each agent’s description, and filter by framework or use text search to find agents for a specific use case. Each catalog entry displays the agent’s description, framework, and a README file with additional information about the agent.

The catalog ships pre-loaded with agent starter kits built on LangGraph, CrewAI, LlamaIndex, and other agentic frameworks.

To enable this Developer Preview feature, set the agentsCatalog feature flag to true.

To access the catalog, from the OpenShift AI dashboard, click AI hub Agents.

Configuration persistence for Gen AI Studio

You can save your Gen AI Studio Playground configuration as a named, reusable agent scoped to your project namespace. A saved agent captures model selection, inference parameters, MLflow prompt references, retrieval augmented generation (RAG) knowledge sources, and Model Context Protocol (MCP) server connections. Agents are stored as Kubernetes resources in the project namespace and are visible to all project members.

Key capabilities:

  • Save a playground configuration with a name and description.
  • Load a saved agent to restore all captured settings.
  • Use Save as new agent to create variant copies for comparison experiments.
  • Browse, rename, and delete saved agents from the Agents tab on the AI asset endpoints page.
  • Validation on load detects and reports any referenced resources that have been deleted or become unavailable.

    To enable this feature, set the agentConfigManagement dashboard configuration option to true.

Hierarchical KV Cache Tiering
Hierarchical KV cache tiering for GPU inference workloads allows platform operators to serve more concurrent users on the same GPU footprint, directly improving the cost-effectiveness of inference deployments. Cache entries are automatically placed on the tiers operators configure. This increases the effective cache size and prefix-cache reuse for multi-turn and long-context workloads. For more information, see KV Cache Offloading.
LoRA-aware request routing for Distributed Inference with llm-d
Platform operators can route requests to pods where the target LoRA adapter is already loaded, avoiding cold-load latency from on-demand adapter swaps. When no pod with the target adapter is available, requests automatically fall back to standard routing.
Latency-aware routing for Distributed Inference with llm-d
Platform operators can declare per-request latency targets for Time To First Token (TTFT) and Time Per Output Token (TPOT). The routing layer then places each request on a pod predicted to meet its specific target. This allows latency-sensitive traffic to be routed to pods with available capacity, while throughput-sensitive traffic fills pods that are already handling longer work.
External metering for per-user token usage and cost tracking

In OpenShift AI, an external metering IPP plugin and standalone metering service are available as a Developer Preview feature. This feature enables platform operators to track per-user and per-model token consumption, attribute costs, enforce quotas, and generate chargeback reports for inference requests passing through the AI Inference Gateway.

The external-metering plugin operates in the IPP plugin chain. It checks user balances before processing requests and extracts token usage details, such as input, output, cached, cache write, and reasoning tokens, from OpenAI and Anthropic provider responses. The plugin then emits CloudEvents to a standalone metering service backed by PostgreSQL. The service aggregates usage, calculates cache-aware pricing, and provides an administrative dashboard and REST API for usage queries and balance checks.

MCP Catalog administrative interface for managing entries
In OpenShift AI, administrators can manage Model Context Protocol (MCP) Catalog source configurations directly from the Settings page of the dashboard. This new interface enables you to add, edit, and remove MCP server catalog entries using YAML-based creation, eliminating the need to manually edit Kubernetes ConfigMap resources. The user experience aligns with the Model Catalog administrative interface, and access to these catalog management operations is restricted strictly to OpenShift AI administrators.
MiDojo adversarial testing execution engine
In OpenShift AI, you can use MiDojo, a man-in-the-middle adversarial testing execution engine for AI agents, available as a Developer Preview feature. MiDojo intercepts communications at the tool layer, injecting attack payloads into tool responses while forwarding legitimate calls upstream. With MiDojo, you can test agents against realistic attack scenarios without rebuilding infrastructure or modifying the agent. Using a declarative YAML format, you can author scenarios that cover environment state, tasks, and injection vectors. MiDojo executes combinations of legitimate and injection tasks to grade task completion (utility) and attack resistance (security), recording the full tool trace. Payloads can be delivered in prompts, data sources, or tool responses. This MiDojo release supports custom external suites, pluggable backends, Kubernetes-native deployment, a reference MiniBank suite, and multiple agent protocols (such as A2A, OGX, PI, OpenAI Responses API, and Simple HTTP).
External metering integration for Models-as-a-Service

You can connect Models-as-a-Service (MaaS) inference traffic to an external metering or billing system by using Backend-Based Routing (BBR) plugins. This integration enables platform operators running MaaS as a commercial AI service to capture per-request token usage and enforce token budgets through an external metering system.

The external metering integration includes two BBR plugins:

  • Post-inference token usage webhook: A BBR response plugin that asynchronously emits a structured token usage event to a configured external metering endpoint after each inference request. The event payload includes requester identity, subscription, model, input and output token counts, request ID, and timestamp. Webhook delivery does not affect inference latency.
  • Pre-inference credit check: A BBR request plugin that checks credit availability from the external metering system before allowing inference. If credit is exhausted, the next request is blocked. This design avoids adding metering system latency to the inference path.

    Both plugins are activated and deactivated per-gateway through configuration and work for both internal model inference and external model requests. Failed webhook delivery attempts are logged for alerting and recovery.

    Note

    This feature provides raw usage event emission to any HTTP endpoint. Invoice generation, cost attribution, and rate calculation are the responsibility of the external metering system.

View running agent deployments in the dashboard
In OpenShift AI, you can view a list of running agent deployments directly in the dashboard. This feature enables you to see agents that were deployed manually as OpenShell-managed Sandbox custom resources (CRs). The dashboard allows you to view the name and status of each deployed agent instance in each namespace, and includes filtering capabilities to help you manage your deployed agents.
Text-mode training for multimodal models in Training Hub
Training Hub supports text-only training ("text mode") for multimodal model architectures. This enhancement enables you to fine-tune Qwen 3.5, Qwen 3.6, Qwen 3.8, Gemma, Nemotron, and Mistral vision-language models (VLMs) by using text datasets. In this release, multimodal-capable models can be fine-tuned in text mode only.

4.2. 3.5 EA2 Developer Preview features

The remote::anthropic inference provider for OGX
The remote::anthropic inference provider is available on OGX. You can use this provider by enabling the ANTHROPIC_API_KEY environment variable in your config.yaml file.
File Processors API on OGX

The File Processors API is available on OGX. The File Processors API allows you to convert documents into vector-ready chunks using the following providers:

  • inline::auto
  • inline::docling
  • inline::markitdown
  • inline::pypdf
  • remote::docling-serve

    Note

    Some listed providers are not included in the default runtime config.yaml file and must be enabled by passing a custom config.yaml file that includes the provider definitions. For more information, see the "OGX API provider support" documentation.

The remote::gemini inference provider for OGX
The remote::gemini inference provider is available on OGX. You can use this provider by enabling the ENABLE_GEMINI environment variable in your config.yaml file.
OpenClaw agent starter kit

You can deploy and manage OpenClaw, an open-source general-purpose agent, on Red Hat OpenShift AI. The starter kit includes validated Kustomize manifests and an automated installer to manage runtime concerns and optimize workspace persistence.

The starter kit includes the following capabilities:

  • Deploy OpenClaw by using validated Kustomize manifests or the automated OpenClaw installer.
  • Connect to self-hosted models through vLLM by using the OGX inference gateway with an OpenAI-compatible API.
  • Capture model calls, tool executions, and context assembly spans in MLflow by using native OpenTelemetry tracing through the diagnostics-otel plugin.
  • Enforce browser-based access control backed by OpenShift role-based access control (RBAC) through OAuth proxy integration.
  • Maintain workspace storage across pod restarts.
  • Validate your environment by using an included model compatibility matrix and troubleshooting guide.
  • Run workloads securely under the OpenShift restricted-v2 security context constraint (SCC).

    For more information, see OpenClaw Agentic Starter Kit.

Claude Code agent starter kit

You can deploy and configure the Anthropic Claude Code agent on Red Hat OpenShift AI by using a new agentic starter kit. The kit provides a Containerfile and Kustomize deployment manifests to streamline setup in a secure environment.

The starter kit includes the following capabilities:

  • Deploy Claude Code by using a pre-configured Containerfile and Kustomize deployment manifests.
  • Choose from validated inference paths: direct Anthropic API, self-hosted models through vLLM, or vLLM through the OGX gateway, which allows you to use your own models without an Anthropic subscription.
  • Observe and track tool calls, token usage, and agent execution traces by using built-in MLflow tracing integration.
  • Inject modular skills and Model Context Protocol (MCP) server configurations at deploy time through a ConfigMap without rebuilding container images.
  • Maintain workspace storage across pod restarts.
  • Run workloads under the OpenShift restricted-v2 security context constraint (SCC) with no special security grants required.

    For more information, see Claude Code Agentic Starter Kit.

Kale JupyterLab extension for notebook-to-pipeline conversion

You can use the Kale (Kubeflow Automated pipeLines Engine) JupyterLab extension to convert annotated Jupyter notebooks into AI Pipelines without writing Kubeflow Pipelines SDK code. The Kale extension ships pre-installed but disabled by default in the following default data science Jupyter notebook images: Standard Data Science, PyTorch, TensorFlow, TrustyAI, ROCm-PyTorch, and ROCm-TensorFlow.

Note

Kale is not available in custom notebook images.

To enable the extension, run jupyter labextension enable jupyterlab-kubeflow-kale in your workbench terminal and refresh your browser. A Data Science Pipelines Application must be deployed in the same namespace as the workbench. After enabling, a green connection status indicates that KFP is connected; a yellow warning indicates that it is disconnected. Open a Jupyter notebook to activate the Enable toggle, then switch it on to use the Kale metadata editor.

For more information, see Kale documentation.

CSV export for model catalog data

You can export model catalog metadata to CSV format by using a standalone Python CLI script. The script queries the Model Catalog REST API, paginates through the full result set, and produces an RFC 4180-compliant CSV file that includes all model metadata and custom properties.

The export script requires Python 3.10+ with no additional dependencies and supports options for filtering by source with --source, limiting output count with --limit, and setting authorization headers with --header. The script writes atomically to prevent partial output on failure.

For more information about installation, authentication, and usage, see CSV Exporter for Model Catalog.

4.3. 3.4 GA Developer Preview features

AgentCard support for post-deployment agent discovery

You can discover deployed agents and their capabilities through the AgentCard custom resource. When you deploy an agent as a Kubernetes Deployment or StatefulSet with the kagenti.io/type: agent label and a protocol label such as protocol.kagenti.io/a2a, the platform automatically creates an AgentCard that advertises the agent’s capabilities, endpoints, and supported protocols. This enables machine-readable agent-to-agent discovery for multi-agent workflows. For more information, see Kagenti Operator Repository.

Note

The Kagenti capabilities described in this entry were introduced as Developer Preview features in OpenShift AI 3.4. Red Hat is no longer advancing Kagenti as the downstream solution for agent security and operationalization in OpenShift AI. Current downstream development in this area is focused on OpenShell, which is available as a Developer Preview in OpenShift AI 3.5. This change does not affect the upstream Kagenti project.

Agent deploy and runtime management

You can manage the runtime concerns of deployed agents using the AgentRuntime custom resource. Create an AgentRuntime that references your agent’s Deployment or StatefulSet via spec.targetRef, and the operator automatically injects authentication and identity sidecars into agent pods. This includes an Envoy-based AuthBridge proxy for inbound JWT validation and outbound token exchange, SPIFFE-based workload identity via a spiffe-helper sidecar, and per-agent OpenTelemetry trace configuration. Agents labeled with kagenti.io/type: agent are injected by default, but you can opt out with kagenti.io/inject: disabled. The AgentRuntime also supports per-workload overrides for SPIFFE trust domains, OTEL collector endpoints, and trace sampling rates. For more information, see Kagenti Operator Repository.

Note

The Kagenti capabilities described in this entry were introduced as Developer Preview features in OpenShift AI 3.4. Red Hat is no longer advancing Kagenti as the downstream solution for agent security and operationalization in OpenShift AI. Current downstream development in this area is focused on OpenShell, which is available as a Developer Preview in OpenShift AI 3.5. This change does not affect the upstream Kagenti project.

Existing vector stores available as RAG knowledge sources in Gen AI Studio Playground

You can surface previously-created vector stores as retrieval-augmented generation (RAG) knowledge sources in the Gen AI Studio Playground. Platform engineers define vector stores through ConfigMaps, and AI engineers can select them as knowledge sources when chatting with models in the Playground. This enables rapid RAG experimentation without writing code or re-ingesting data.

This release includes the following capabilities:

  • Platform engineers can declare vector stores through ConfigMaps with connection details, collection names, and optional metadata
  • Available vector stores appear under RAG / Knowledge Sources in the Playground
  • Users can enable or disable a vector store per chat session
  • Queries are routed through OGX RAG primitives
Note

This feature does not include document upload, ingestion, chunking, indexing, or vector store lifecycle management. Only read-only query and retrieval of pre-existing vector data is supported.

Interact with Red Hat OpenShift AI using MCP clients

Red Hat OpenShift AI provides an MCP (Model Context Protocol) server that enables MCP-compatible clients to interact with your environment through natural-language conversations. When you describe your goals, the MCP server recommends the optimal model from your model registry by matching your intent against benchmarks such as MMLU and HumanEval, with cost comparisons. You can also manage data science projects, create workbenches, and monitor pipeline runs.

When you are ready to deploy, the MCP server generates three production-ready Kubernetes manifests for model serving, auto-scaling, and observability. The MCP server works with AI coding assistants such as Claude Code, OpenCode, and Gemini CLI. For more information, see RHOAI MCP server.

MCP Catalog for enterprise management of MCP servers

The MCP Catalog provides a centralized experience for discovering, deploying, and experimenting with Model Context Protocol (MCP) servers in Red Hat OpenShift AI. AI Operators and Platform Engineers can browse available MCP servers in a catalog UI, view descriptive metadata about each server’s capabilities and tools, and deploy MCP servers into their namespace directly from the catalog. After deployment, a platform engineer can register deployed MCP servers in the gen AI studio configuration, making them available in the playground for interactive experimentation.

The MCP Catalog ships pre-loaded with MCP servers from Red Hat, technology partners, and the open source community. These servers can be deployed directly from the catalog without sourcing container images or configuring transport manually. Some additional prerequisite steps, such as mirroring images may be required for disconnected deployments or configuring server-specific credentials.

  • Red Hat MCP servers:

    • Red Hat OpenShift - Cluster management and troubleshooting
    • Red Hat Ansible Automation Platform - Playbook execution and configuration orchestration
    • Red Hat Insights - platform intelligence and remediation recommendations.
  • Technology partner MCP servers:

    • Confluent Cloud - Kafka and Flink streaming
    • EDB Postgres AI - database queries and schema management
    • HashiCorp Terraform - infrastructure as code
    • Microsoft Azure - cloud resource management
    • Dynatrace - performance monitoring and troubleshooting.
  • Other MCP servers: MongoDB (document collections and RAG workflows) and MariaDB (relational database connectivity).

The MCP Catalog relies on the following pre-requisite upstream community components:

+

  • mcp-lifecycle-operator: A Kubernetes operator that provides a declarative API to deploy, manage, and roll out MCP servers. When an MCPServer custom resource is created, the operator automatically provisions the required Deployments, Services, and cluster-internal URLs for service discovery. The MCP lifecycle operator must be installed on the cluster before deploying MCP servers from the catalog. For more information, see kubernetes-sigs/mcp-lifecycle-operator on GitHub.
  • mcp-gateway: A Kubernetes-native gateway that provides a unified runtime endpoint for accessing deployed MCP servers. The MCP Gateway aggregates tools from multiple registered MCP servers behind a single endpoint, enabling centralized access control and routing. For more information, see the mcp-gateway/docs/guides/quick-start.md on GitHub.

    The deploy action in the catalog UI is gated on the presence of the MCP lifecycle operator. If the operator is not installed, the deployment option is not available.

4.4. 3.4 EA2 Developer Preview features

Core Evaluation Stack control plane

The Evaluation Stack control plane provides an API REST routing and orchestration layer for AI evaluation, benchmarking, and profiling backends on OpenShift AI. AI engineers can deploy and manage a comprehensive evaluation platform that supports multiple frameworks and execution modes through a unified interface.

The Evaluation Stack control plane includes the following capabilities:

  • REST API endpoints for programmatic evaluation triggering from web UI interfaces and other components
  • Built-in support for LM Evaluation Harness, RAGAS, Garak, and GuideLLM evaluation frameworks
  • Custom framework integration by using container images or Python package specifications for Kubeflow Pipelines
  • Evaluation results tracked in MLflow with a standardized schema
  • Evaluation job monitoring and progress tracking through Kubernetes constructs
  • Concurrent evaluation jobs with resource isolation
  • Support for air-gapped and disconnected environments
  • Installable Python package for local development

4.5. 3.4 EA1 Developer Preview features

Automatic MLflow experiment creation in EvalHub
The EvalHub service automatically creates an MLflow experiment when you specify experiment.name in the evaluation job request. If the experiment creation fails due to missing MLflow configuration, authentication issues, or other problems, the job request returns an error.
Kubeflow Spark Operator for distributed data processing

The Kubeflow Spark Operator is available in OpenShift AI as a Developer Preview. This feature provides Apache Spark integration with OpenShift AI, enabling the full lifecycle of Spark applications on Kubernetes. This enables unified orchestration and monitoring of large-scale data processing and preparation Spark jobs alongside ML training and inference workflows.

To enable the Kubeflow Spark Operator, navigate to your dsc.yaml CR and update the kubeflowsparkoperator parameter to the Managed state.

This feature introduces the following capabilities:

  • Integration with the OpenShift AI distributed workloads ecosystem.
  • SparkApplication custom resources (CRs) for defining Spark jobs.
  • Automatic submission, monitoring and restart of Spark applications with configuration retry policies.
  • Pod customization via mutating webhooks, supporting ConfigMaps, volumes, and affinity rules.
Run evaluations for TrustyAI-OGX using LM-Eval

You can run evaluations using LM-Eval on OGX with TrustyAI as a Developer Preview feature, using the built-in LM-Eval component and advanced content moderation tools. To use this feature, ensure TrustyAI is enabled, the FMS Orchestrator and detectors are set up, and KServe RawDeployment mode is in use for full compatibility if needed. There is no manual set up required.

Then, in the DataScienceCluster custom resource for the Red Hat OpenShift AI Operator, set the spec.components.ogx.managementState field to Managed.

For more information, see the following resources on GitHub:

LLM Compressor integration

LLM Compressor capabilities are available in Red Hat OpenShift AI as a Developer Preview feature. A new workbench image with the llm-compressor library and a corresponding data science pipelines runtime image make it easier to compress and optimize your large language models (LLMs) for efficient deployment with vLLM. For more information, see llm-compressor in GitHub.

You can use LLM Compressor capabilities in two ways:

AI Available Assets integration with Model-as-a-Service (MaaS)

This feature is available as a Developer Preview.

You can access and consume Model-as-a-Service (MaaS) models directly from the AI Available Assets page in the GenAI Studio.

Administrators can configure a MaaS by enabling the toggle in the Model Deployments page. When a model is marked as a service, it becomes global and visible across all projects in the cluster.

Additional fields added to Model Deployments for AI Available Assets integration

This feature is available as a Developer Preview.

Administrators can add metadata to models during deployment so that they are automatically listed on the AI Available Assets page.

The following table describes the new metadata fields that streamline the process of making models discoverable and consumable by other teams:

Field nameField typeDescription

Use Case

Free-form text

Describes the model’s primary purpose, for example, "Customer Churn Prediction" or "Image Classification for Product Catalog."

Description

Free-form text

Provides more detailed context and functionality notes for the model.

Add to AI Assets

Checkbox

When enabled, automatically publishes the model and its metadata to the AI Available Assets page.

Compatibility of OGX remote providers and SDK with MCP HTTP streaming protocol

This feature is available as a Developer Preview.

OGX remote providers and the SDK are compatible with the Model Context Protocol (MCP) HTTP streaming protocol.

This enhancement enables developers to build fully stateless MCP servers, simplify deployment on standard OGX infrastructure (including serverless environments), and improve scalability. It also prepares for future enhancements such as connection resumption and provides a smooth transition away from Server-Sent Events (SSE).

Packaging of ITS Hub dependencies to the Red Hat–maintained Python index

This feature is available as a Developer Preview.

All Inference Time Scaling (ITS) runtime dependencies are packaged in the Red Hat-maintained Python index, allowing Red Hat AI and OpenShift AI customers to install its_hub and its dependencies directly by using pip.

This enhancement enables users to build custom inference images with ITS algorithms focused on improving model accuracy at inference time without requiring model retraining, such as:

  • Particle filtering
  • Best-of-N
  • Beam search
  • Self-consistency
  • Verifier or PRM-guided search

    For more information, see the ITS Hub on GitHub.

Dynamic hardware-aware continual training strategy

Static hardware profile support is available to help users select training methods, models, and hyperparameters based on VRAM requirements and reference benchmarks. This approach ensures predictable and reliable training workflows without dynamic hardware discovery.

The following components are included:

  • API Memory Estimator: Accepts model, training method, dataset metadata, and assumed hyperparameters as input and returns an estimated VRAM requirement for the training job. Delivered as an API within Training Hub.
  • Reference Profiles and Benchmarks: Provides end-to-end training time benchmarks for OpenShift AI Innovation (OSFT) and Performance Team (LAB SFT) baselines, delivered as static tables and documentation in Training Hub.
  • Hyperparameter Guidance: Publishes safe starting ranges for key hyperparameters such as learning rate, batch size, epochs, and LoRA rank. Integrated into example notebooks maintained by the AI Innovation team.
Important

Hardware discovery is not included in this release. Only static reference tables and guidance are provided; automated GPU or CPU detection is not yet supported.

Human-in-the-Loop (HIL) functionality in the OGX agent

Human-in-the-Loop (HIL) functionality has been added to the OGX agent to allow users to approve unread tool calls before execution.

This enhancement includes the following capabilities:

  • Users can approve or reject unread tool calls through the responses API.
  • Configuration options specify which tool calls require HIL approval.
  • Tool calls pause until user approval is received for HIL-enabled tools.
  • Tool calls that do not require HIL continue to run without interruption.
Red Hat logoGithubRedditYoutubeTwitter

Learn

Try, buy, & sell

Communities

About Red Hat

We deliver hardened solutions that make it easier for enterprises to work across platforms and environments, from the core datacenter to the network edge.

Making open source more inclusive

Red Hat is committed to replacing problematic language in our code, documentation, and web properties. For more details, see the Red Hat Blog.

About Red Hat Documentation

Legal Notice

Theme

© 2026 Red Hat
Back to top