| --- |
| schema_version: "1.0" |
| type: eem |
| project_name: openshift-expert |
| domain: |
| - openshift |
| - kubernetes |
| - container-platform |
| - cloud-infrastructure |
| license: mit |
| base_network: null |
| source_repos: [] |
| beliefs_total: 3820 |
| beliefs_in: 3820 |
| beliefs_out: 0 |
| premises: 3670 |
| derived: 150 |
| nogoods: 0 |
| generator: ftl-reasons/0.41.0 |
| --- |
| |
| # OpenShift Expert |
|
|
| Expert knowledge base for **OpenShift Container Platform** architecture, operations, and deployment patterns. Contains 3,820 justified beliefs covering the operator-driven platform model, networking, virtualization, security, edge deployments, and 50+ subsystems. |
|
|
| ## What is this? |
|
|
| This is an **External Epistemic Memory** (EEM) — a model-agnostic knowledge base that any LLM can use via the `reasons` CLI or tool calling. Unlike a LoRA or fine-tune, this knowledge is not baked into model weights. It is external, inspectable, correctable, and works with any model. |
|
|
| ## Stats |
|
|
| | Metric | Value | |
| |--------|-------| |
| | Total beliefs | 3,820 | |
| | Status | 3,820 IN / 0 OUT | |
| | Premises (observations) | 3,670 | |
| | Derived (justified conclusions) | 150 | |
| | Nogoods (contradictions) | 0 | |
| | Retraction rate | 0% | |
| | Max derivation depth | 7 | |
|
|
| ## Top Topics |
|
|
| | Topic | Beliefs | |
| |-------|---------| |
| | ocp | 560 | |
| | default | 312 | |
| | api | 224 | |
| | cluster | 192 | |
| | operator | 192 | |
| | openshift | 159 | |
| | namespace | 124 | |
| | node | 120 | |
| | hcp | 110 | |
| | config | 108 | |
| | network | 99 | |
| | image | 91 | |
| | virt | 91 | |
| | install | 85 | |
| | supported | 74 | |
| | policy | 72 | |
|
|
| ## Domain Coverage |
|
|
| - **OCP Core Platform**: operator-driven immutable model, cluster versioning, install-time constraints, platform topology variants (511 beliefs) |
| - **Hosted Control Planes (HCP)**: multi-tenant control planes, NodePool management, hosted cluster lifecycle (107 beliefs) |
| - **CLI & API**: `oc` commands, API resources, resource management, debugging (63 beliefs) |
| - **OpenShift Virtualization (CNV)**: VM lifecycle, live migration, virtual networking, storage for VMs (82 beliefs) |
| - **Networking — OVN-Kubernetes**: default CNI, pod networking, service routing, hybrid overlay (27 beliefs) |
| - **Networking — Policy & Firewalls**: network policies, egress firewalls, admin network policies, user-defined networks (40 beliefs) |
| - **Networking — SR-IOV**: hardware-accelerated networking, VF management, node policies (28 beliefs) |
| - **Networking — Ingress & Routes**: HAProxy ingress controller, route configuration, TLS termination (34 beliefs) |
| - **Networking — IPsec & Encryption**: IPsec tunnel configuration, node-to-node encryption (12 beliefs) |
| - **Operators & OLM**: Operator Lifecycle Manager, OperatorHub, File-Based Catalogs, bundle management (87 beliefs) |
| - **Etcd**: cluster database, backup/restore, performance tuning, defragmentation (37 beliefs) |
| - **Security — SCCs & RBAC**: Security Context Constraints, role-based access control, project isolation (28 beliefs) |
| - **Security — OAuth & Authentication**: OAuth server, identity providers, token management (24 beliefs) |
| - **Security — Webhook Admission**: validating/mutating webhooks, enforcement model (16 beliefs) |
| - **Builds & Images**: S2I builds, Shipwright, image streams, image registry, samples operator (70 beliefs) |
| - **CI/CD & GitOps**: Jenkins pipelines, OpenShift GitOps (ArgoCD), deployment strategies (36 beliefs) |
| - **Edge — ZTP & SNO**: Zero Touch Provisioning, Single Node OpenShift, TALM upgrades, vDU workloads (53 beliefs) |
| - **Node Management**: MachineConfig Operator, machine sets, autoscaling, health checks, tuned profiles (57 beliefs) |
| - **Observability**: monitoring stack, logging, Network Observability (NetObserv), flow collection (54 beliefs) |
| - **Console**: web console, console plugins, developer/admin perspectives (43 beliefs) |
| - **Storage**: CSI drivers, dynamic provisioning, persistent volumes (10 beliefs) |
| - **Backup & DR**: OADP, etcd backup, cluster restore (13 beliefs) |
| - **Platform Variants**: Nutanix, IBM Cloud, IBM Power, bare metal, ROSA, OCI (101 beliefs) |
| - **RHCOS & Node OS**: Red Hat CoreOS, immutable OS, ignition, ostree updates (13 beliefs) |
| - **Additional topics**: NMState, MetalLB, templates, jobs, probes, ConfigMaps, HPA, PDB, scheduler, RHOSO, RHOAI (remaining beliefs) |
|
|
| ## How to Use |
|
|
| ### Import into a reasons database |
|
|
| ```bash |
| reasons init |
| reasons import-json network.json |
| ``` |
|
|
| ### Query beliefs |
|
|
| ```bash |
| reasons search "operator lifecycle" |
| reasons explain operator-driven-immutable-platform-model |
| reasons show install-time-irreversible-constraints |
| ``` |
|
|
| ### Use as an MCP tool or CLI |
|
|
| Any LLM agent that can call `reasons search`, `reasons show`, and `reasons explain` can use this knowledge base. The agent does not need to be told it is an expert — the knowledge base speaks for itself. |
|
|
| ## Key Beliefs |
|
|
| | Node | Summary | |
| |------|---------| |
| | `operator-driven-immutable-platform-model` | The entire OpenShift platform operates through an operator-driven model with immutable infrastructure | |
| | `install-time-irreversible-constraints` | Multiple cluster-defining decisions are permanently locked at install time and cannot be changed | |
| | `observability-follows-platform-enablement-pattern` | OpenShift observability is a specific instance of the platform-wide multi-component enablement pattern | |
| | `edge-fleet-management-pipeline` | Edge cluster lifecycle follows a managed pipeline: ZTP + GitOps provisions, TALM orchestrates upgrades | |
| | `multi-cni-network-architecture` | OpenShift uses a layered CNI architecture: OVN-Kubernetes primary, Multus for additional networks | |
| | `webhook-admission-enforcement-model` | Webhook admission follows a constrained enforcement model with TLS requirements | |
| | `node-config-immutable-delivery-pipeline` | Node configuration follows an immutable delivery pipeline via MachineConfig Operator | |
| | `complete-software-delivery-from-build-to-console` | OpenShift provides a unified software delivery model covering application and operator lifecycles | |
| | `platform-model-with-topology-variants` | Single operator-driven platform model recognizing two sanctioned topology variants | |
| | `consoleplugin-compat-level-1` | ConsolePlugin has Compatibility Level 1: stable for at least 12 months or 3 minor releases | |
|
|
| ## Sources |
|
|
| Built from exploration of OpenShift Container Platform documentation, API references, and operational experience across networking, virtualization, security, edge, and platform management subsystems. |
|
|
| ## Files |
|
|
| | File | Description | |
| |------|-------------| |
| | `network.json` | Full belief network (machine-readable, portable) | |
| | `reasons.db` | SQLite database (gitignored, regenerate with `reasons import-json network.json`) | |
| | `CLAUDE.md` | Agent instructions for using this knowledge base | |
| | `entries/` | 904 exploration entries — raw observations behind the premises | |
|
|
| ## Quality |
|
|
| - All 3,820 beliefs are IN (none retracted) |
| - 3,670 premises grounded in direct observations of OpenShift behavior and documentation |
| - 150 derived beliefs justified from premises via SL justifications |
| - 0 nogoods — no contradictions detected |
| - Max derivation depth of 7, indicating multi-step reasoning chains |
| - Built and reviewed using ftl-reasons derive and review-beliefs pipeline |
|
|
| ## Limitations |
|
|
| - Focused on OpenShift Container Platform as of mid-2026 |
| - OpenShift evolves across minor releases; some beliefs may become stale |
| - Heavier coverage of networking, virtualization, and operators than storage or serverless |
| - Platform variant coverage (Nutanix, IBM, bare metal) varies in depth |
| - No ATMS or assumption-based beliefs (single-context TMS only) |
|
|
| ## Authors |
|
|
| - Ben Thomasson ([@benthomasson](https://github.com/benthomasson)) |
|
|
| ## License |
|
|
| mit |
|
|
