Building a Sovereign Cloud with Red Hat OpenShift

• Enterprise Architects who design the sovereign landing zone, control planes, and integrate sovereign controls.
• IT Security Practitioners who translate regulatory law (such as the SOV framework) into technical policy and manage cryptographic controls.
• IT Operations personnel, SREs, and System Administrators who implement, manage, and automate sovereign controls daily and ensure operational resilience.

• Defining the pillars of digital sovereignty and mapping sovereignty objectives to a multicluster OpenShift architecture.
• Deploying sovereign edge clusters in air-gapped environments.
• Architecting multitenant isolation with hosted control planes.
• Enforcing GitOps as the sovereign source of truth for infrastructure management.
• Implementing jurisdiction-aware identity and access controls.
• Establishing zero-trust workload identity with SPIFFE and SPIRE.
• Integrating external key management for cryptographic sovereignty.
• Securing data residency with network-bound disk encryption and confidential computing.
• Preparing for post-quantum cryptography threats.
• Implementing sovereign disaster recovery with in-jurisdiction backups.

• Take our free assessment to gauge whether this offering is the best fit for your skills.
• Red Hat OpenShift Administration II: Configuring a Production Cluster | DO280 or equivalent experience with managing and troubleshooting a self-managed OpenShift cluster.
• Security fundamentals: Familiarity with core security concepts, such as identity and access management (IAM), encryption, network policies, and firewalls.
• Recommended: Multicluster Management with Red Hat Advanced Cluster Management for Kubernetes | DO432 or equivalent experience with RHACM.

Introduction to Sovereign Cloud Operations

• Describe the four pillars of sovereignty, the European Union Sovereignty Objectives (SOV), and the Red Hat Advanced Cluster Management (RHACM) hub-and-spoke architecture within the context of sovereign cloud providers.

Architecting the Sovereign Boundary

• Onboard and manage new sovereign cluster-as-a-service tenant clusters by using RHACM, and enforce zero-trust isolation, operational sovereignty, and jurisdictional access controls.

Securing Sovereign Data

• Implement advanced cryptographic controls for tenant clusters and provider workloads to ensure data confidentiality at rest, in use, and during recovery.

Previous courses

Red Hat OpenShift Administration II: Configuring a Production Cluster [DO280]

Multicluster Management with Red Hat Advanced Cluster Management for Kubernetes [DO432]