# OpenShift 产品系列专题 · 日跟踪 · 2026-09-16

> 日期：2026-09-16（Asia/Shanghai）。专题正文：`intel/topics/openshift.md`。原料：`/workspace/intel/archive/2026-09-16/`；对照 2026-09-15 日跟踪。

## 摘要（规划含义）

- **新稿 · Azure Red Hat OpenShift（ARO）with hosted control planes = public preview：** 控制面迁出客户 Azure 订阅、改由 RH 托管 Azure service account（基于 HyperShift）；客户侧最小 footprint **2 worker 而非 6 节点（含 3 master）**；控制面可独立于 worker 升级；公开预览仅 CLI，门户体验待 GA。属 **ARO/托管 OpenShift** 架构增量，勿写成 OCP/OVE 新小版本。
- **厂商自称经济学（须降权）：** 云基础设施开支「平均最高约 **4×**」节省（**2026 RH 内部研究**）；供应时间「最高约 **55%**」缩短——**非独立第三方审计**；见 cost。
- **新稿 · OpenShift AI agentic profiling（OpenClaw ± OpenShell）：** Part 1/3；IBM Cloud 上 OpenShift AI、8×A100、Qwen3-8B；结论 sandbox 安全「廉价」——warm pool 下 sandbox readiness 约占 E2E **4.3%**，C=10 时 sandbox init **<5%** E2E；整栈 10 sandbox ≈ **120 millicores / 242 MiB**——**厂商基准，未独立核实**；**OpenShell 仍为 DP**，本文是性能旁证非 GA。
- **新稿交叉 · confidential containers + quantum-safe networking（Arqit）：** 跑在 OpenShift 上的机密容器验证模式 + 混合 TLS（ECDH+ML-KEM）——见 confidential。
- **续档 · AutoRAG TP / Speculator training 未 GA / SQL→Virt 三路径 / neocloud·AI Factory / OpenShell DP / OVE 首年免费 / MTV 2.12 / VDDK / Virt FAQ（含 ROSA 金属）。**
- **规划一句：** 今日主抬升是 **ARO HCP = public preview**（托管控制面经济学 + 安全姿态）；AI 线增量是 **agentic 剖析**（旁证 OpenShell 开销可控）——仍与 AutoRAG=TP、OpenShell=DP、Speculator=未发布 **分档**。

## 原文摘录

### ARO · Hosted Control Planes public preview

- 归档：`redhat/azure-red-hat-openshift-with-hosted-control-planes-is-now-available-in-296c8bfa.txt`
- URL：https://www.redhat.com/en/blog/azure-red-hat-openshift-hosted-control-planes-now-available-public-preview
- 文面日期：September 15, 2026（本日 archive 首入档主信号）

> Azure Red Hat OpenShift with hosted control planes is now in public preview. This new architecture can improve operational efficiency, increase cost savings, and accelerate deployment by having the control plane managed in an Azure account for your Azure Red Hat OpenShift service rather than your own Azure account.  
> Hosted control planes, based on the HyperShift project, is a new deployment model… you no longer need to host the control plane within your individual Azure account. Rather, the control plane is hosted and managed in a dedicated Azure service account…  
> With a smaller footprint (minimum of 2 nodes instead of 6), Azure Red Hat OpenShift with hosted control planes can significantly reduce cloud infrastructure expenses on your Azure bill up to 4x on average (based on a 2026 Red Hat internal study).  
> The decoupled control plane architecture reduces cluster provisioning times by up to 55%… In public preview, users can deploy an Azure Red Hat OpenShift with hosted control planes cluster from the CLI. We are currently working on making the Azure portal experience available upon general availability.  
> … hosted control planes will only support managed identities and workload identities instead of Service Principals…

### Agentic profiling · OpenClaw + OpenShell（OpenShift AI）

- 归档：`redhat/opening-the-black-box-profiling-a-secured-agentic-pipeline-on-red-hat--2f370b3e.txt`
- URL：https://www.redhat.com/en/blog/opening-black-box-profiling-secured-agentic-pipeline-red-hat-openshift-ai

> … sandbox security adds negligible overhead—minimal resource consumption and under 5% of end-to-end latency —making isolation a default-on decision rather than a performance trade-off.  
> … even at 10 concurrent sandboxes, the entire OpenShell stack (gateway, supervisor, and active sandboxes) fits within 120 millicores and 242 MiB.  
> With warm pools enabled, OpenShell delivers sub-300 ms sandbox readiness—just 4.3% of the end-to-end request latency (E2E) measured at C=1.  
> Sandbox security is cheap. Enable it by default. … sandbox initialization adds just 2.2% to end-to-end latency at C=1 (P50) and under 5% at C=10.

### Confidential containers on OpenShift · 交叉

- `redhat/achieving-data-sovereignty-for-saas-with-confidential-containers-and-q-e4069356.txt`  
  > Arqit uses the Red Hat validated pattern for confidential containers as a base. It runs on Red Hat OpenShift with hardware that supports confidential computing.

### 续档指针

- AutoRAG TP / Speculator / SQL→Virt / neocloud：见 2026-09-15 openshift 日跟踪与本日 `redhat/autorag-…`、`…speculator-train-…`、`…sql-server…`、`…gpu-cloud…` 再抓。
- OpenShell = **DP**；ARO HCP = **public preview**（非 GA）。

## 检索与抓取缺口

- ARO HCP / agentic profiling / confidential containers 为本日 redhat/ 主新信号；AutoRAG/Speculator/SQL/neocloud/FAQ 为再抓续档。
- `docs.redhat.com` / Microsoft Learn 部署页未在本环境二次核验；以博客与本地 archive 为准。