Red Hat Products
This platform composes multiple Red Hat operators and patterns. Each child page answers what problem it solves, what ships here, what signals tell an operator it has reconciled, and how workloads join inventory (CRDs vs annotations vs explicit registrations).
Keep Discover workloads consistently in mind as context — namespaces rarely manage ACM fleets directly; charts declare APIs operators reconcile against Git.
Overview
| Product | Role in platform | Git path |
|---|---|---|
| Advanced Cluster Management | Fleet lifecycle, policy, placement, GitOps integration | charts/all/acm-hub-spoke/ |
| Developer Hub | Internal developer portal (Backstage) | charts/all/developer-hub/ |
| Advanced Cluster Security | Vulnerability management, runtime risk | charts/all/acs-secured-cluster/ |
| OpenShift GitOps | Declarative continuous delivery (Argo CD) | charts/all/openshift-gitops/ |
| OpenShift Service Mesh 3 | Ambient mesh, ztunnel, waypoints | charts/all/servicemeshoperator3/ |
| Connectivity Link | RHCL / Gateway API (hub + spoke gateway screenshots) | charts/all/rhcl-operator/ |
| Service Interconnect | Skupper VAN for cross-cluster connectivity | charts/all/service-interconnect/ |
| OpenShift AI | DataScienceCluster, model serving | charts/all/openshift-ai/ |
| NeuroFace | Workshop face/object AI + MaaS chat | charts/all/neuroface/ |
| AMQ Streams | Kafka for telemetry pipelines | charts/all/industrial-edge-*/ |
| Apache Camel / Camel K | Integrations (MQTT, S3, Kafka) | charts/all/camel-k/ |
| OpenShift Pipelines | Tekton CI/CD for Industrial Edge | charts/all/industrial-edge-pipelines/ |
| Quay Registry | Hub container registry, workshop org | charts/all/quay-registry/ |
| Dev Spaces | Spoke IDEs (Kaoto + Continue AI) | charts/all/devspaces/ |
| OpenShift Virtualization | Workshop VM + CNV template | charts/all/cnv-example/ |
| Gitea | Hub Git for scaffolder repos | charts/all/gitea/ |
| HashiCorp Vault & External Secrets | Central secrets store + ESO sync to K8s | charts/all/hashicorp-vault/, vault-demo-auth/, openshift-external-secrets/ |
| Kafka Console | Hub UI for spoke Kafka clusters | charts/all/kafka-console/ |
Operator discovery — annotations & registrations at a glance
Most visibility comes from CRDs, but namespaces carry mesh/policy hints when controllers reconcile selectively:
| Product | Where workloads surface | Typical annotation / label / CR binding |
|---|---|---|
| ACM | Fleet hub inventory | ManagedCluster, Placement — spokes inherit ACM labels during import (no Git annotation magic). |
| Developer Hub | Catalog / plugins / Topology | Backstage CR + app-config-*; OCM + Kubernetes (hub/east/west via MSA tokens); catalog annotation backstage.io/kubernetes-cluster. |
| ACS | Central clusters UI | SecuredCluster in each cluster’s stackrox namespace + TLS Secrets from init bundles. |
| GitOps | Argo CD Applications | Application / ApplicationSet — paths/branches define drift detection targets. |
| Service Mesh | Ambient dataplane | Namespace istio.io/dataplane-mode: ambient (see charts/all/namespaces); exceptions stackrox, gitea, industrial-edge-data-lake, … stay off mesh. |
| Connectivity Link | Gateway exposure | Gateway API Gateway / HTTPRoute CRDs Kuadrant/DNS controllers reconcile (explicit refs). |
| OpenShift AI | DS pipelines / serving | DataScienceCluster operator provisioning — namespaces created/managed by operator CRs. |
| AMQ Streams | Kafka Console UI | This repo: Console CR (kafkaClusters[].namespace + bootstrap URL). Strimzi Kafka CRs live in those namespaces. |
| Camel K | Integrations | IntegrationPlatform (per-operator scope) selects Camel runtime profile for that namespace set. |
| Pipelines | Tekton controllers | TektonConfig cluster-wide / operator-managed — namespaces enabled by operator policy. |
| Quay | Image registry (hub) | QuayRegistry CR + org setup Job — catalog uses quay.io/repository-slug annotation. |
| Dev Spaces | Spoke dev environments | CheCluster on east/west — catalog entity links to devfile URL on spoke domain. |
| CNV | Virtual machines | VirtualMachine CRs — catalog backstage.io/kubernetes-* on hub. |
| Gitea | Source repos (hub) | PostSync org Job — scaffolder backstage.io/source-location URLs. |
| Kafka Console | Fleet Kafka UI | Console CR spec.kafkaClusters[] — explicit bootstrap list. |
| Service Interconnect | Cross-cluster Services | Site, Listener, Connector Skupper CRs — not workload Deployment annotations. |
Details and YAML snippets live on each product page under Operator discovery.
For the complete list of every Kubernetes label and annotation that activates a feature — namespace enrollment, monitoring selectors, gateway hints, ConfigMap syncing — see Annotations & Labels Reference.
Next: pick your deployment lane — mesh labels (Service Mesh), fleet placement (ACM), or Kafka plumbing (AMQ Streams).