Self-Service Identity Provider Configuration for ROKS HCP: Provide an ibmcloud oc CLI command (and Terraform resource parameter) to configure OpenID Connect identity providers on ROKS Hosted Control Plane clusters
ROKS clusters using the Hosted Control Plane (HyperShift) architecture manage authentication through the HostedCluster object on IBM's management plane. The OpenShift OAuth CR on the data plane is read-only — a ValidatingAdmissionPolicy blocks all...
Provide an ibmcloud oc CLI command (and Terraform resource parameter) to configure a custom trusted CA bundle on ROKS Hosted Control Plane clusters
ROKS clusters using the Hosted Control Plane (HyperShift) architecture manage the cluster proxy configuration through the HostedCluster object on IBM's management plane. The Proxy CR on the data plane is read-only — a ValidatingAdmissionPolicy blo...
Request to increase etcd storage size from 6 GB to 8 GB for ROKS cluster
Problem Statement: The etcd storage limit on Red Hat OpenShift on IBM Cloud (ROKS) is capped at 6 GB. For certain deployments with high resource density, this limit is insufficient.Proposed Solution: Allow increasing the etcd storage to at least 8...
On HyperShift (ROKS) clusters, the KubeletConfig CRD is not available on the data plane. The Machine Config Operator runs in the hosted control plane, and kubelet configuration is managed through NodePool settings rather than KubeletConfig resourc...
Expand the supported version skew between the control plane and worker nodes.
Upgrading worker node versions in ROKS requires substantial operational effort.OpenShift supports an N-2 version skew, and we would like IBM Cloud ROKS to support the same level of version skew. (IBM Cloud ROKS supports only an N‑1 version skew no...
Headlamp add-on compatibility with IBM Cloud Managed Istio as an ingress path
With Headlamp add-on replacing the legacy 'kubernetes-dashboard' it would be benefit for the 'Headlamp add-on' to support integration via IBM Cloud Managed Istio Ingress, in addition to IBM-managed nginx and Traefik. Within our account our IKS clu...
Officially support and document existing feature to protect LBs from auto deletion by service annotation
We got following response from support: "As far as creating a new annotation to disable deletion of the associated VPC LB resource, that support has already been done. There is an undocumented annotation that has already been created. This annotat...
Allow Customers to Pin Minor Fixpack Version in Openshift in IBM Cloud Satellite
When you upgrade Openshift in IBM Cloud Satellite, the latest fixpack is always applied and the customer has no way to 'pin' or specify the minor fixpack version fixpack version. This could be a problem for us because we generally upgrade our nonp...
I would like to extend the support period for the ICOS Plugin
The following supporting case exchange suggests this idea. https://cloud.ibm.com/unifiedsupport/cases/manage/CS4139921?accountId=c8915e8b106f436a8a1cdcf9ff40ac6a We are using ICOS Plugin on Red Hat OpenShift on IBM Cloud as our container PV. The c...
Today, CodeEngine works with "un-signed" images. It would be very helpful if Code Engine could understand signed images and be able to work with it by verifying. For now, we can consider "skopeo" as a signing utility. Users could provide the publi...