# OpenShift 产品系列专题日跟踪 · 2026-09-10

> 日期：2026-09-10（Asia/Shanghai）。专题正文：`intel/topics/openshift.md`。原料：`archive/2026-09-10/redhat/`、`archive/2026-09-10/industry/`，并对照 `tracking/vendors/redhat/2026-09-09.md`、`2026-09-10.md` 与 2026-09-08 OSV/VDDK 续档。`docs.redhat.com` Virt/MTV 页本环境仍常 403/404。

## 摘要（规划含义）

- **最强信号 · Red Hat AI 3.5（博客日 2026-09-09）：** 生产 Agent 的信任/控制/构建/计量；EvalHub GA、priority-aware serving / controlled deployments GA、HCP **on OpenShift Virtualization**、llm-d 多云（CKS/AKS GA、EKS TP）、Responses API + built-in RAG GA、Agent templates GA、MaaS showback TP、GPU-as-a-Service dashboard GA。属 **OpenShift AI / agent-hosting** 产品族演进，**不是** OVE/OCP 新小版本叙事。
- **最强信号 · OpenShell Agent sandboxing（OpenShift AI 3.5 Developer Preview）：** Landlock + seccomp + network namespace + OPA L4/L7；厂商博客写「ships … as a Developer Preview」。须标 **DP，未 GA**。文内「77% organizations…」「Shadow AI +$670,000」为引用/IDC 口径——**未独立核实**。
- **Rafay×RH Sovereign AI Cloud as a Service 联合参考架构：** OpenShift + ACM Hosted Control Planes + OSV/Virt + RH AI + Rafay SKU Studio / Self-Service / Token Factory；电信/主权云/NeoCloud 商业化蓝图，**非新 OpenShift SKU**。
- **续档仍有效（对 Virt 替换权重更高）：** RHV **2026-08-31 EOL**；**OSV 首年订阅免费**（SDxCentral 09-02，卖方激励）；**MTV×VDDK**（TechTarget 09-09 Broadcom 确认公开下载收紧，RH 称不能再分发）；BlueField GA on OpenShift AI Factory；Context wall / vLLM offload；Secrets console TP（4.22）。
- **规划一句：** 短线 VMware/RHV 替换看 OVE 入口价 + MTV/VDDK 风险 + 首年免费促销；长线业务/AI 承载看 OCP→AI 3.5 升级轨与 OpenShell/MCP Gateway 的 DP/TP 降权。

## 原文摘录

### [Red Hat AI 3.5: Scaling and governing AI agents in production](https://www.redhat.com/en/blog/red-hat-ai-35-scaling-and-governing-ai-agents-production) · 厂商博客（博客日 2026-09-09）

- 归档：`archive/2026-09-10/redhat/red-hat-ai-3-5-scaling-and-governing-ai-agents-in-production-0f281ed9.txt`
- URL：https://www.redhat.com/en/blog/red-hat-ai-35-scaling-and-governing-ai-agents-production

> Moving beyond isolated development sandboxes requires answering 4 questions before scaling: Can we trust it? Can we control it? Can we build on it? Can we measure it? Red Hat AI 3.5 provides the tools to answer all 4.
> For organizations that require stronger isolation between tenants, Red Hat AI now officially supports running hosted control planes on Red Hat OpenShift Virtualization…
> … distributed inference reaches GA on CoreWeave CKS and Microsoft Azure AKS, while Amazon EKS joins in technology preview.

### [Beyond container boundaries: Kernel-level agent security in Red Hat OpenShift AI 3.5](https://www.redhat.com/en/blog/beyond-container-boundaries-kernel-level-agent-security-red-hat-openshift-ai-35) · 厂商博客

- 归档：`archive/2026-09-10/redhat/beyond-container-boundaries-kernel-level-agent-security-in-red-hat-ope-42e5502f.txt`
- URL：https://www.redhat.com/en/blog/beyond-container-boundaries-kernel-level-agent-security-red-hat-openshift-ai-35

> Today, Red Hat OpenShift AI 3.5 ships OpenShell agent sandboxing as a Developer Preview…
> Layer 0 — Kernel isolation: OpenShell sandboxing. Three independent enforcement layers—Landlock LSM, seccomp filters, and network namespace isolation—are each backed by the Linux kernel.
> 77% of organizations now have AI agents running in production.… Shadow AI incidents cost, on average, $670,000 more than standard security incidents.（引用口径，**未独立核实**）

### [Rafay and Red Hat publish joint reference architecture for sovereign AI cloud as a service](https://www.redhat.com/en/blog/rafay-and-red-hat-publish-joint-reference-architecture-sovereign-ai-cloud-service) · 厂商博客

- 归档：`archive/2026-09-10/redhat/rafay-and-red-hat-publish-joint-reference-architecture-for-sovereign-a-a699b154.txt`
- URL：https://www.redhat.com/en/blog/rafay-and-red-hat-publish-joint-reference-architecture-sovereign-ai-cloud-service

> Red Hat has published Sovereign AI Cloud as a Service, a joint reference architecture built with Rafay for telecommunications providers, sovereign cloud operators, and NeoClouds…
> Where containers alone are not sufficient, Red Hat OpenShift Virtualization delivers a full virtual machine (VM) boundary on the same platform…
> Rafay Token Factory adds a metered, multi-tenant billing and API layer on top of Red Hat AI's vLLM and llm-d capabilities…

### [NVIDIA BlueField… on the Red Hat AI Factory](https://www.redhat.com/en/blog/nvidia-bluefield-security-and-acceleration-arrive-red-hat-ai-factory-nvidia-and-red-hat-o) · 续档（厂商博客）

- 归档：`archive/2026-09-10/redhat/nvidia-bluefield-security-and-acceleration-arrive-on-the-red-hat-ai-fa-00a66235.txt`

> … yet up to 30% of host CPU power is wasted simply routing packets and enforcing security policies.（**厂商自称**）
> Red Hat OpenShift now offers general availability support for NVIDIA BlueField…

### OSV 首年免费 · SDxCentral（续档，卖方激励）

- 归档：`archive/2026-09-08/industry/red-hat-offers-virtualization-subscriptions-free-for-one-year-sdxcentral.txt`
- URL：https://www.sdxcentral.com/news/red-hat-offers-virtualization-subscriptions-free-for-one-year/

> Red Hat is offering qualifying customers the first year of OpenShift Virtualization subscriptions free… The promotion eschews OpenShift Virtualization subscription fees for year one of a three-year agreement, with Red Hat customers still paying for existing infrastructure, hardware, migration work, training, and deployment.

### MTV × VDDK · TechTarget 确认（续档，迁移墙）

- 归档：`archive/2026-09-10/industry/broadcom-confirms-vddk-techtarget-2026-09-09.txt`
- URL：https://www.techtarget.com/it-infrastructure/news/366648768/Broadcom-confirms-change-in-VMware-migration-tool-access

> Broadcom recently revoked public access to a VMware software library widely used by other vendors to facilitate migrations… including … Red Hat's Migration Toolkit…
> Red Hat's support website said it didn't yet have a direct replacement for VDDKs as a workaround because the software is proprietary…

### [Why the virtualization decision keeps getting deferred](https://www.redhat.com/en/blog/why-virtualization-decision-keeps-getting-deferred) · 续档对读

- 归档：`archive/2026-09-08/redhat/why-the-virtualization-decision-keeps-getting-deferred-989d9267.txt`

> If double-paying during a platform transition is stalling your virtualization migration, removing that first-year cost overlap can get your project moving again.

## 检索与抓取缺口

- `docs.redhat.com` OpenShift Virtualization / MTV planning 页：本环境 WebFetch 常见 **403/404**；本日未以 docs 正文核版本矩阵，改用 redhat.com 博客、订阅指南、access 方案文与本地 archive。
- Reddit `r/openshift` 等社区抓取近期多为 blocked/空，无额外买方 VoC 写入。