OpenShift-only tracker
BRAC POC OpenShift operating wiki
This wiki tracks the OCP side of the BRAC POC: cluster roles, current platform state, GitOps ownership, DR gates, service mesh readiness, and the planned Java/JBoss application path. Non-OpenShift systems appear here only when they directly support OpenShift operations, such as external Vault for secrets or MinIO for backup and observability storage.
Fleet snapshot
Current operating view
The management DC side is active through hub-dc. The
restore hub hub-dr is passive. spoke-dc is the
active workload cluster, while spoke-dr is platform-ready
standby. External Secrets Operator now has a validated smoke path to
external Vault on all four clusters. The immediate operational queue is
hub image pre-pull completion, durable image mirroring, backup alert
validation, app onboarding, and OSSM 3 workload onboarding.
Pages
Detailed sections
TopologyCluster roles, management model, and current DR semantics.
DiagramsVisual catalogue for topology, DR, GitOps, traffic, and app onboarding flows.
GitOps modelRepository boundaries, Argo CD flow, and validation rules.
hub-dcActive hub state, ACM backup, storage-light posture, and risks.
hub-drPassive restore hub readiness, blockers, and activation constraints.
spoke-dcActive workload cluster details and app onboarding status.
spoke-drStandby workload cluster details and RHOAI platform state.
Platform servicesStorage, identity, ACM Observability, AI, OADP, and metrics.
Secrets and VaultExternal Vault, ESO SecretStore wiring, and app onboarding guardrails.
Backup and DROADP status, ACM backup gates, restore hub gates, and validation commands.
Service meshOSSM 3 live state and workload onboarding checklist.
App onboardingJava/JBoss deployment path, namespace model, secrets, mesh, and DR posture.
Manual CI/CDStep-by-step Jenkins, Nexus, GitOps, and OpenShift delivery runbook.
Production readinessOfficial Red Hat guidance mapped into local analysis and implementation gates.
RoadmapImmediate gates, later work, and done criteria.
Operating rulesSecret handling, live-change discipline, and session memory rules.
Current risk posture
Items to watch
- Backup health: OADP and ACM backup Prometheus rules now exist, but alert behavior still needs validation before a drill.
- Image readiness: a hub pre-pull DaemonSet is warming selected recovery images; a durable mirror/IDMS remains required.
- Vault/ESO: the fleet smoke path is working, but real workloads still need namespace-specific Vault policies and roles.
- OSSM 3 usage: both spokes have healthy OSSM 3 control planes, but no application workload is currently onboarded.
- ACM Observability storage: both hubs are Ready with larger PVC requests, but still use lab-local LVMS rather than resilient production storage.
- spoke-dr semantics: current posture is platform standby, not a full hot workload mirror.
- Production readiness: official OpenShift and Red Hat guidance is now mapped into local gates for analysis, implementation, and evidence capture.
Tracking
GitHub operations queue
Operational work is tracked in the same GitHub repository as this wiki: issues hold bounded tasks, decisions, and drills, while the project board tracks status across the current OpenShift backlog in BRAC POC OpenShift Operations. GitOps repositories remain the desired-state source of truth.