live wire
▸PLATFORM · Quay.io push and pull operations hit intermittent 500 errors during maintenanceRed Hat status▸INTEGRATION · Apache Camel exposes incident and web search as parallel tools for a local agentApache Camel▸AI · Red Hat makes confidential GPU AI GA and previews VM-isolated Agent Sandbox (Aug. 4)Red Hat Blog▸SECURITY · Red Hat fixes Important MariaDB GIS memory-corruption flaw in Hardened ImagesRed Hat Product Security▸SECURITY · Red Hat restores CVE pages after a CWE dependency outage; monitoring continuesRed Hat status▸PLATFORM · Red Hat implements a fix for docs.redhat.com degradation and begins monitoringRed Hat status▸AI · vLLM combines PCP, DCP and host-memory offload to serve 1M-token GLM-5.3 contextsvLLM▸AI · vLLM ships day-zero MiniMax-M3.1-Flash support across NVIDIA and AMD GPUsvLLM▸SECURITY · Red Hat revokes compromised eMudhra certificates across RHEL and OpenShift trust storesRed Hat Product Security▸SECURITY · Red Hat rates PHP2Shell request-handling flaws Important; fixes are rolling outRed Hat Product Security▸AI · IBM maps GPU observability and FinOps controls across OpenShift clustersIBM Community▸IDENTITY · Red Hat shows Data Grid authentication through Keycloak 26 on OpenShiftRed Hat Developer▸AI · Red Hat layers tenant isolation, tool authorization and rate limits onto MCP gatewaysRed Hat Developer▸DATA · Red Hat maps direct LDAP and LDAPS authentication for Data Grid on OpenShiftRed Hat Developer▸PLATFORM · Quay.io push and pull operations hit intermittent 500 errors during maintenanceRed Hat status▸INTEGRATION · Apache Camel exposes incident and web search as parallel tools for a local agentApache Camel▸AI · Red Hat makes confidential GPU AI GA and previews VM-isolated Agent Sandbox (Aug. 4)Red Hat Blog▸SECURITY · Red Hat fixes Important MariaDB GIS memory-corruption flaw in Hardened ImagesRed Hat Product Security▸SECURITY · Red Hat restores CVE pages after a CWE dependency outage; monitoring continuesRed Hat status▸PLATFORM · Red Hat implements a fix for docs.redhat.com degradation and begins monitoringRed Hat status▸AI · vLLM combines PCP, DCP and host-memory offload to serve 1M-token GLM-5.3 contextsvLLM▸AI · vLLM ships day-zero MiniMax-M3.1-Flash support across NVIDIA and AMD GPUsvLLM▸SECURITY · Red Hat revokes compromised eMudhra certificates across RHEL and OpenShift trust storesRed Hat Product Security▸SECURITY · Red Hat rates PHP2Shell request-handling flaws Important; fixes are rolling outRed Hat Product Security▸AI · IBM maps GPU observability and FinOps controls across OpenShift clustersIBM Community▸IDENTITY · Red Hat shows Data Grid authentication through Keycloak 26 on OpenShiftRed Hat Developer▸AI · Red Hat layers tenant isolation, tool authorization and rate limits onto MCP gatewaysRed Hat Developer▸DATA · Red Hat maps direct LDAP and LDAPS authentication for Data Grid on OpenShiftRed Hat Developer
upstreambeat.ai
newsAI

IBM details self-managed Bob deployment for OpenShift

The enterprise installation runs as a tenant workload on customer-managed OpenShift clusters, with customers supplying the model endpoints and operational controls.

Bob runs on customer-managed OpenShift, while customers provide models and controls.
Side by side: what changed
By The News Desk· Sep 26, 2026the quick take — two AI hosts go live when you do

IBM has published deployment documentation for running its Bob software-development assistant as a self-managed workload on Red Hat OpenShift, giving platform teams a concrete path to keep the service and its supporting data inside customer-controlled infrastructure. IBM says the on-premises edition can share an existing OpenShift cluster with other applications rather than requiring a dedicated cluster. IBM Bob overview

What IBM supports

The current requirements identify Bob on-premises 2.0.0, paired with Bob IDE 2.2.0 and Bob Shell 2.0.5. IBM lists OpenShift Container Platform 4.20, 4.21 and 4.22 as tested and supported, with 4.20 the minimum, and currently limits the workload to amd64. Mixed-architecture clusters are possible if administrators constrain Bob to amd64 nodes themselves. System requirements

IBM positions the deployment as a tenant footprint rather than a complete cluster design. Its production reference for the core stack calls for about 36.5 vCPU, 53.4 GiB of memory and roughly 50 GiB of persistent storage after scheduling headroom. Optional retrieval-augmented generation and Z Understand components add substantially to that footprint; IBM labels the Z Understand sizing as provisional while benchmark testing continues. The supported storage choices listed are managed NFS and OpenShift Data Foundation, with block storage required for PostgreSQL, OpenSearch and Redis volumes. System requirements

The platform-team work does not disappear

The installation uses an IBM release bundle, entitled container images and a bobctl utility. IBM splits cluster-scoped resources from namespace-scoped application resources so that a cluster administrator or security team can review the generated CRDs and cluster RBAC before applying them; subsequent installation work is confined to operator and operand namespaces. The prerequisites also call for cert-manager 1.14 or later, with Red Hat's cert-manager Operator recommended for OpenShift. Installation prerequisites

Customers must separately provide supported inference and guardrail model endpoints. IBM says provisioning, scaling and maintaining those models are outside the Bob core installation, as are security-event logging and the surrounding audit and monitoring controls. Installation prerequisites

That division of responsibility is the important architectural detail. Self-management gives regulated or disconnected organizations more control over residency and network boundaries, but it also makes Bob another production tenant that platform teams must capacity-plan, secure, back up and connect to model infrastructure. Teams evaluating it should start with supported OCP versions, storage latency and the model-network path rather than treating the IDE extension as the whole deployment. IBM Bob overview

sources

Filed by The News Desk. Corrections: desk@upstreambeat.ai · Our standards →

comments · 0

    Comments are moderated before they appear. Your email is used once to confirm it is you — never shown, never sold. Corrections and questions get an answer from the desk when we have one.

    more from the desk