Chapter 1. OpenShift Lightspeed release notes
The release notes highlight what is new and what has changed with each Red Hat OpenShift Lightspeed release.
Red Hat OpenShift Lightspeed is designed for Federal Information Processing Standards (FIPS). When running on OpenShift Container Platform in FIPS mode, it uses the Red Hat Enterprise Linux cryptographic libraries submitted (or planned to be submitted) to NIST for FIPS validation on only the x86_64, ppc64le, and s390X architectures. For more information about the NIST validation program, see Cryptographic Module Validation Program. For the latest NIST status of the individual versions of Red Hat Enterprise Linux cryptographic libraries that have been submitted for validation, see Product compliance.
1.1. OpenShift Lightspeed version 1.1.5
Red Hat OpenShift Lightspeed 1.1.5 addresses security vulnerabilities, fixes software bugs, and improves stability. This release helps ensure continued support and stability for clusters running OpenShift Container Platform 4.16 and later.
1.1.1. Enhancements
Red Hat OpenShift Lightspeed 1.1.5 remediates the get_alerts tool functionality by updating the Alertmanager port used by the OpenShift Container Platform Model Context Protocol (MCP) server.
Red Hat OpenShift Lightspeed 1.1.5 includes the following enhancements:
-
With this update, the OpenShift Container Platform Model Context Protocol (MCP) server connects to Alertmanager on the correct port,
9094, to align with the OpenShift Container Platform monitoring stack. This ensures that questions that require theget_alertstool work as expected.
1.1.2. Fixed security issues
You can view the security issues fixed in Red Hat OpenShift Lightspeed at Red Hat Security Updates.
For 1.1.5, see the following CVEs:
- CVE-2026-107716
- CVE-2026-104873
- CVE-2026-104851
- CVE-2026-103000
- CVE-2026-102999
- CVE-2026-102998
- CVE-2026-102997
- CVE-2026-102996
- CVE-2026-102994
- CVE-2026-102938
- CVE-2026-102930
- CVE-2026-102925
- CVE-2026-102422
- CVE-2026-102273
- CVE-2026-96760
- CVE-2026-93749
- CVE-2026-90711
- CVE-2026-84782
- CVE-2026-81727
- CVE-2026-81724
- CVE-2026-81722
- CVE-2026-79675
- CVE-2026-79674
- CVE-2026-79657
- CVE-2026-78683
- CVE-2026-78682
- CVE-2026-72818
- CVE-2026-71513
- CVE-2026-63374
- CVE-2026-62384
1.1.3. Known issues
Red Hat OpenShift Lightspeed 1.1.5 contains a known issue where tool-result inspection can fail at the tool call step for certain models.
Tool-result inspection can fail at the tool call step for certain models
Tool-result inspection might fail at the tool call step for certain models across the supported providers. When this issue occurs, the tool call does not complete successfully.
Workaround: Disable the tool-result inspection flag in your Red Hat OpenShift Lightspeed configuration custom resource (CR).
1.2. OpenShift Lightspeed version 1.1.4
Red Hat OpenShift Lightspeed 1.1.4 addresses security vulnerabilities, adds enhancements, and improves stability. This release helps ensure continued support and stability for clusters running OpenShift Container Platform 4.16 and later.
1.2.1. Enhancements
Red Hat OpenShift Lightspeed 1.1.4 updates the Red Hat Offline Knowledge Portal (RHOKP) that provides OpenShift Container Platform documentation for retrieval-augmented generation (RAG), and updates how the OpenShift Container Platform Model Context Protocol (MCP) server is delivered.
Red Hat OpenShift Lightspeed 1.1.4 includes the following enhancements:
- With this update, OpenShift Lightspeed includes Red Hat Offline Knowledge Portal (RHOKP) version 1.2.12, which refreshes the OpenShift Container Platform product documentation in the RAG knowledge base and expands coverage to the most recent seven OpenShift Container Platform versions. For more information, see RHBA-2026:62194.
- With this update, OpenShift Lightspeed uses the image published by the OpenShift MCP team to deliver the OpenShift Container Platform Model Context Protocol (MCP) server. As a result, you receive the latest MCP server updates through Red Hat OpenShift Lightspeed.
- With this update, OpenShift Lightspeed includes an OpenTelemetry (OTel) collector for logging. You can use it to collect and forward Red Hat OpenShift Lightspeed logs.
1.2.2. Fixed security issues
You can view the security issues fixed in Red Hat OpenShift Lightspeed at Red Hat Security Updates.
For 1.1.4, see the following CVEs:
- CVE-2026-87776
- CVE-2026-84445
- CVE-2026-84394
- CVE-2026-84375
- CVE-2026-84292
- CVE-2026-82417
- CVE-2026-80205
- CVE-2026-79675
- CVE-2026-78682
- CVE-2026-76172
- CVE-2026-75975
- CVE-2026-75931
- CVE-2026-75899
- CVE-2026-71235
- CVE-2026-67214
- CVE-2026-67213
- CVE-2026-59886
- CVE-2026-59885
- CVE-2026-59879
- CVE-2026-59869
- CVE-2026-59205
- CVE-2026-59204
- CVE-2026-59200
- CVE-2026-59199
- CVE-2026-59197
- CVE-2026-56862
- CVE-2026-56860
- CVE-2026-56859
- CVE-2026-56858
- CVE-2026-56853
- CVE-2026-55380
- CVE-2026-55379
- CVE-2026-54293
- CVE-2026-54283
- CVE-2026-54060
- CVE-2026-54058
- CVE-2026-48779
- CVE-2026-48746
- CVE-2026-48526
- CVE-2026-46625
- CVE-2026-45820
- CVE-2026-45736
- CVE-2026-45134
- CVE-2026-44843
- CVE-2026-44431
- CVE-2026-42504
- CVE-2026-42499
- CVE-2026-42311
- CVE-2026-42306
- CVE-2026-42154
- CVE-2026-41567
- CVE-2026-39821
- CVE-2026-39820
- CVE-2026-34993
- CVE-2026-33818
- CVE-2026-33811
- CVE-2026-32282
- CVE-2026-27145
- CVE-2026-27136
- CVE-2026-25681
- CVE-2026-13676
- CVE-2026-13149
- CVE-2026-12252
- CVE-2026-12243
- CVE-2026-9595
- CVE-2026-9277
- CVE-2026-6322
1.2.3. Known issues
Red Hat OpenShift Lightspeed 1.1.4 contains a known issue where questions that require the get_alerts tool time out.
Questions that require the
get_alertstool time outAny question that requires the
get_alertstool times out and does not return a response. This issue does not affect test or evaluation workflows.Workaround: There is currently no workaround for this issue.
1.3. OpenShift Lightspeed version 1.1.3
Red Hat OpenShift Lightspeed 1.1.3 addresses security vulnerabilities and improves stability. This release helps ensure continued support and stability for clusters running OpenShift Container Platform 4.16 and later.
1.3.1. Fixed security issues
You can view the security issues fixed in Red Hat OpenShift Lightspeed at Red Hat Security Updates.
1.3.2. Known issues
Red Hat OpenShift Lightspeed 1.1.3 contains known issues regarding incorrect documentation version references in the Red Hat Offline Knowledge Portal (RHOKP) RAG source and missing branding logos in the console interface.
Incorrect documentation version referenced by the RHOKP RAG source
When you use the RHOKP RAG source on OpenShift Container Platform 4.16 and 4.17 clusters, OpenShift Lightspeed references OpenShift Container Platform 4.18 documentation instead of the matching cluster version. As a result, responses generated from product documentation might reflect behavior or features that do not apply to your cluster version.
Workaround: There is currently no workaround for this issue.
Missing branding logos in the OpenShift Lightspeed console interface
Branding logos and visual identity markers do not render in the assistant panel when you open OpenShift Lightspeed in the OpenShift Container Platform web console. Only the panel text and standard console icons remain visible. This is a visual issue and does not affect assistant capabilities, prompts, or navigation.
Workaround: There is currently no workaround required, as core functionality is unaffected.
1.4. OpenShift Lightspeed version 1.1.2
Red Hat OpenShift Lightspeed 1.1.2 addresses security vulnerabilities, fixes software bugs, and improves stability. This release helps ensure continued support and stability for clusters running OpenShift Container Platform 4.16 and later.
1.4.1. Enhancements
Red Hat OpenShift Lightspeed 1.1.2 introduces support for the Amazon Web Services (AWS) Bedrock model provider and replaces the custom RAG implementation with the Offline Knowledge Portal (OKP) for OpenShift Container Platform documentation retrieval. This release also adds support for OpenShift Container Platform 4.22 and ROSA-aware documentation retrieval.
Red Hat OpenShift Lightspeed 1.1.2 includes the following enhancements:
-
With this update, cluster administrators can configure AWS Bedrock as a large language model (LLM) provider in the
OLSConfigcustom resource (CR).
With this update, OpenShift Lightspeed replaces the previous custom OLS RAG implementation with OKP for serving OpenShift Container Platform product documentation. The Operator deploys a Red Hat Offline Knowledge Portal (RHOKP) sidecar on the app-server pod and configures Solr hybrid retrieval for the cluster’s OpenShift Container Platform version.
Cluster administrators can tune RHOKP sidecar CPU, memory, and ephemeral storage (disk) by using
spec.ols.deployment.rhokpon theOLSConfigcustom resource (CR). RHOKP requires substantial disk space for Solr data; the Operator’s recommended default request is 75 GiB ephemeral storage, along with 2 CPU and 2 GiB memory.The initial setup of the OKP RAG system might take some time while the documentation corpus is indexed. During this period, OpenShift Lightspeed might not return documentation-grounded answers.
- With this update, OpenShift Lightspeed adds support for OpenShift Container Platform 4.22.
- With this update, OpenShift Lightspeed automatically detects Red Hat OpenShift Service on AWS (ROSA) clusters and includes ROSA-specific documentation alongside OpenShift Container Platform documentation. On OpenShift clusters, behavior remains unchanged.
1.4.2. Known issues
Red Hat OpenShift Lightspeed 1.1.2 contains a known issue where the initial installation and pod startup for the OKP RAG system takes additional time to complete indexing when upgrading from version 1.1.1 to 1.1.2.
The following issues are identified with Red Hat OpenShift Lightspeed 1.1.2:
Initial installation delay for the OKP RAG system
When you upgrade from version 1.1.1 to 1.1.2, the initial installation and pod startup for the OKP RAG system takes additional time to complete indexing. Standard restarts take less time.
During this initial setup, OpenShift Lightspeed is temporarily unavailable. You must wait for the indexing process to finish before expecting full RAG functionality.
Workaround: None.
1.5. OpenShift Lightspeed version 1.1.1
Red Hat OpenShift Lightspeed 1.1.1 addresses security vulnerabilities, fixes software bugs, and improves stability. This release helps ensure continued support and stability for clusters running OpenShift Container Platform 4.16 and later.
1.5.1. Fixed security issues
You can view the security issues fixed in Red Hat OpenShift Lightspeed at Red Hat Security Updates.
For 1.1.1, see the following CVEs:
1.6. OpenShift Lightspeed version 1.1
Red Hat OpenShift Lightspeed 1.1 provides maintenance updates, security fixes, and feature enhancements. This release helps ensure continued support and stability for clusters running OpenShift Container Platform 4.16 and later.
1.6.1. Enhancements
Red Hat OpenShift Lightspeed 1.1 introduces security enhancements for secret handling, updated component management, and support for modern AI software development kits.
Red Hat OpenShift Lightspeed 1.1 includes the following enhancements:
- Previously, copying a response from OpenShift Lightspeed only included raw markdown text. With this update, copying a response from OpenShift Lightspeed to the clipboard preserves formatting when you paste it into applications that support rich text, such as Google Docs.
-
With this update, the
introspectionEnabledfield in theOLSConfigcustom resource (CR) istrueby default. You do not have to specify this field to use the Kubernetes Model Context Protocol (MCP) server. To disable the Kubernetes MCP server, you must set this field tofalse. -
With this update, the Kubernetes MCP server supports both read and write operations. Because human-in-the-loop (HITL) support is enabled by default, you must approve any non-read operation, such as an update or delete, in the user interface before OpenShift Lightspeed executes the action. This behavior is controlled by the
toolsApprovalConfig.approvalTypefield in theOLSConfigcustom resource (CR), which defaults totool_annotations.
- With this update, you can expand code blocks to view more content and collapse them to return to their original size.
- With this update, OpenShift Lightspeed supports only the strong ciphers and Transport Layer Security (TLS) profiles recommended by Red Hat Product Security. This enhancement prevents the use of weak signature algorithms to ensure that your cluster remains protected and compliant with security standards.
-
With this update, you can attach Prometheus alerting rules and
Alertmanagersilences to a prompt directly from their details pages.
-
With this update, OpenShift Lightspeed supports Google Vertex AI as an LLM provider. You can configure Google-native models, such as Gemini, by using the
google_vertexprovider type. You can also configure Anthropic models, such as Claude hosted on Vertex AI, by using thegoogle_vertex_anthropicprovider type. Both provider types authenticate by using a Google Cloud Platform (GCP) service account JSON key stored within a Kubernetes Secret.
1.7. OpenShift Lightspeed version 1.0
Red Hat OpenShift Lightspeed version 1.0 provides an AI-driven virtual assistant that helps users troubleshoot and manage OpenShift clusters. This release introduces support for OpenShift Container Platform 4.15 and later.
1.7.1. Enhancements
Red Hat OpenShift Lightspeed 1.0 introduces general availability support for OpenShift Container Platform 4.15 and later. This release includes new AI-driven cluster interaction capabilities, security updates, and several Technology Preview features.
The following enhancements are made with Red Hat OpenShift Lightspeed 1.0:
- Cluster interaction
- PostgreSQL persistence
- Token quota
Technology Preview features are not supported with Red Hat production service level agreements (SLAs) and might not be functionally complete. Red Hat does not recommend using them in production. These features provide early access to upcoming product features, enabling customers to test functionality and provide feedback during the development process.
For more information about the support scope of Red Hat Technology Preview features, see Technology Preview Features Support Scope.
1.7.2. Known issues
Red Hat OpenShift Lightspeed 1.0 includes known issues related to web console interface visibility, quota configuration updates, and database connectivity. Use the provided workarounds to resolve these issues and maintain service availability in your OpenShift cluster.
The following issues are identified with Red Hat OpenShift Lightspeed 1.0:
For OpenShift Container Platform 4.17 and later, the OpenShift Lightspeed icon disappears when you click Create Namespace or Create Project from one of the following locations in the OpenShift Container Platform web console:
-
Administration
Namespaces -
Home
Projects Create Project - The Project drop-down menu located at the top of most pages
Workaround: Refresh the web browser and the OpenShift Lightspeed icon appears. OLS-1815.
-
Administration
Changing the value of the
quotaparameter in thespec.ols.quotaHandlersConfig.limitersConfigspecification of theOLSConfigcustom resource file does not take effect until the currently defined quota period expires.Workaround: Delete the OpenShift Lightspeed Operator. Ensure that any operand pods that the OpenShift Lightspeed Operator manages, and the Persistent Volume Claim
lightspeed-postgres-pvcassociated with thepostgrespod are also deleted. Then, install the OpenShift Lightspeed Operator again. OLS-1826After restarting the
postgrespod, the OpenShift Lightspeed service pod fails to connect to thepostgrespod.Workaround: Restart the OpenShift Lightspeed service pod so that the service pod connects to the
postgrespod. OLS-1835.
'%20d='M201.5%20305.5c-13.8%200-24.9-11.1-24.9-24.6%200-13.8%2011.1-24.9%2024.9-24.9%2013.6%200%2024.6%2011.1%2024.6%2024.9%200%2013.6-11.1%2024.6-24.6%2024.6zM504%20256c0%20137-111%20248-248%20248S8%20393%208%20256%20119%208%20256%208s248%20111%20248%20248zm-132.3-41.2c-9.4%200-17.7%203.9-23.8%2010-22.4-15.5-52.6-25.5-86.1-26.6l17.4-78.3%2055.4%2012.5c0%2013.6%2011.1%2024.6%2024.6%2024.6%2013.8%200%2024.9-11.3%2024.9-24.9s-11.1-24.9-24.9-24.9c-9.7%200-18%205.8-22.1%2013.8l-61.2-13.6c-3-.8-6.1%201.4-6.9%204.4l-19.1%2086.4c-33.2%201.4-63.1%2011.3-85.5%2026.8-6.1-6.4-14.7-10.2-24.1-10.2-34.9%200-46.3%2046.9-14.4%2062.8-1.1%205-1.7%2010.2-1.7%2015.5%200%2052.6%2059.2%2095.2%20132%2095.2%2073.1%200%20132.3-42.6%20132.3-95.2%200-5.3-.6-10.8-1.9-15.8%2031.3-16%2019.8-62.5-14.9-62.5zM302.8%20331c-18.2%2018.2-76.1%2017.9-93.6%200-2.2-2.2-6.1-2.2-8.3%200-2.5%202.5-2.5%206.4%200%208.6%2022.8%2022.8%2087.3%2022.8%20110.2%200%202.5-2.2%202.5-6.1%200-8.6-2.2-2.2-6.1-2.2-8.3%200zm7.7-75c-13.6%200-24.6%2011.1-24.6%2024.9%200%2013.6%2011.1%2024.6%2024.6%2024.6%2013.8%200%2024.9-11.1%2024.9-24.6%200-13.8-11-24.9-24.9-24.9z'/%3e%3c/svg%3e){kind=small}