openshift/origin
Origin
OpenShift Origin is a Kubernetes distribution platform that extends Kubernetes with integrated security, multi-tenancy, and application lifecycle management for enterprise container orchestration. It functions as a multi-tenant container orchestrator that enforces per-project security policies, resource quotas, and SELinux isolation for shared cluster environments.
The platform includes a Source-to-Image builder that creates container images directly from application source code using Dockerfiles or buildpacks without external build servers, and an Operator Lifecycle Manager that installs and manages platform operators from a curated catalog. It provides an OpenShift Conformance Test Suite that validates Kubernetes and OpenShift API compliance across cluster deployments and upgrades.
The system supports building container images from source, managing image lifecycles with streams, deploying Kubernetes clusters, running local development clusters, and installing operators from a catalog. It includes capabilities for monitoring cluster and application health, provisioning isolated projects with predefined controls, exposing services via public routes, controlling container privileges with security contexts, and enforcing multi-tenant security policies.
Features
- Kubernetes Platforms - Extends Kubernetes with integrated security, multi-tenancy, and application lifecycle management for enterprise container orchestration.
- Application Lifecycle Management - Provides full lifecycle management for containerized applications across development and production environments.
- Kubernetes Operator Catalogs - Provides an Operator Lifecycle Manager that installs and manages platform operators from a curated catalog.
- Container Build Orchestrators - Builds container images directly from source code using Dockerfiles or buildpacks without a separate server.
- Source-to-Image Builders - Transforms application source code directly into runnable container images using builder images.
- Multi-Tenant Orchestrators - Enforces per-project security policies, resource quotas, and SELinux isolation for shared cluster environments.
- Operator-Based Lifecycles - Uses Kubernetes operators to automate installation, upgrade, and management of platform components.
- Kubernetes Cluster Provisioning - Provisions multi-node Kubernetes clusters on infrastructure with a single CLI command.
- Local Kubernetes Clusters - Ships a CLI command to spin up a minimal OpenShift cluster on a laptop for local development.
- Multi-tenant Security - Runs containers as non-root users with SELinux labels, resource limits, and per-project quotas to isolate workloads.
- Per-Project Security Controllers - Enforces per-project security policies through admission controllers that apply SELinux and quotas at creation.
- Container Workload Isolators - Enforces per-project SELinux labels, resource quotas, and security boundaries to isolate container workloads across tenants.
- Multi-Tenant Security - Extends Kubernetes with integrated security concepts to isolate and protect workloads across multiple tenants.
- Kubernetes API Aggregations - Extends the Kubernetes API server with custom resources and controllers for OpenShift-specific objects.
- Workload Isolation with Projects - Creates new projects that automatically include roles, resource quotas, and security boundaries for fair multi-tenant access.
- Image Stream Lifecycles - Manages image lifecycles through streams that automatically trigger builds and deployments on tag updates.
- Image Stream Triggers - Implements an image stream trigger system that enables continuous delivery pipelines from registry updates.
- Ingress Controllers - Implements a custom HAProxy-based ingress controller with TLS termination and path-based routing.
- Conformance Test Suites - Ships a conformance test suite that validates Kubernetes and OpenShift API compliance across cluster deployments and upgrades.
- Public Service Exposure - Maps external DNS names to internal Kubernetes services using HAProxy with TLS termination and path-based routing.
- Container Security Hardening - Configures security contexts and pod permissions to restrict container privileges and enforce fine-grained security per project.
- Plugin Catalog Installers - Installs platform extensions from a curated catalog of community operators that run on the cluster.
- Cluster Health Monitoring - Collects metrics from configured targets, evaluates rules, and triggers alerts for cluster and application health.
- Cluster Monitoring Dashboards - Ships a preconfigured Prometheus, Alertmanager, and Grafana stack for cluster health monitoring.
- Container Management - Containerized software platform.
- Dashboards And Portals - Enterprise-ready Kubernetes distribution for developers.
- Orchestration and Management - Platform for building and managing containerized applications.
