Skip to main content
Red Hat
Red Hat Training

Building a Sovereign Cloud with Red Hat OpenShift

DO505LSCourseOpenShift 3 days
Download PDF

Design, build, and operate a sovereign cloud platform with multitenant isolation, jurisdiction-aware access controls, and advanced cryptographic protections by using Red Hat OpenShift.

This course is designed for enterprise architects, IT security practitioners, and operations personnel who need to meet digital sovereignty requirements by using Red Hat OpenShift Container Platform 4.20. Grounded in the European Union (EU) Cloud Sovereignty Framework, learners will gain hands-on proficiency in deploying multitenant clusters-as-a-service with hosted control planes, enforcing zero-trust isolation and jurisdiction-aware access controls, and implementing advanced cryptographic protections including external key management, network-bound disk encryption, and post-quantum cryptography.

What you'll learn

  • Defining the pillars of digital sovereignty and mapping sovereignty objectives to a multicluster OpenShift architecture.
  • Deploying sovereign edge clusters in air-gapped environments.
  • Architecting multitenant isolation with hosted control planes.
  • Enforcing GitOps as the sovereign source of truth for infrastructure management.
  • Implementing jurisdiction-aware identity and access controls.
  • Establishing zero-trust workload identity with SPIFFE and SPIRE.
  • Integrating external key management for cryptographic sovereignty.
  • Securing data residency with network-bound disk encryption and confidential computing.
  • Preparing for post-quantum cryptography threats.
  • Implementing sovereign disaster recovery with in-jurisdiction backups.

Course Outline

01Introduction to Sovereign Cloud Operations Describe the four pillars of sovereignty, the European Union Sovereignty Objectives (SOV), and the Red Hat Advanced Cluster Management (RHACM) hub-and-spoke architecture within the context of sovereign cloud providers.
02Architecting the Sovereign Boundary Onboard and manage new sovereign cluster-as-a-service tenant clusters by using RHACM, and enforce zero-trust isolation, operational sovereignty, and jurisdictional access controls.
03Securing Sovereign Data Implement advanced cryptographic controls for tenant clusters and provider workloads to ensure data confidentiality at rest, in use, and during recovery.

Prerequisites

  • ›Red Hat OpenShift Administration II: Configuring a Production Cluster | DO280 or equivalent experience with managing and troubleshooting a self-managed OpenShift cluster.
  • ›Security fundamentals: Familiarity with core security concepts, such as identity and access management (IAM), encryption, network policies, and firewalls.
  • ›Recommended: Multicluster Management with Red Hat Advanced Cluster Management for Kubernetes | DO432 or equivalent experience with RHACM.

Who should attend

  • ›Enterprise Architects who design the sovereign landing zone, control planes, and integrate sovereign controls.
  • ›IT Security Practitioners who translate regulatory law (such as the SOV framework) into technical policy and manage cryptographic controls.
  • ›I T Operations personnel, SREs, and System Administrators who implement, manage, and automate sovereign controls daily and ensure operational resilience.

Outcomes

Impact on the organisation

This course, DO505: Building a Sovereign Cloud with Red Hat OpenShift, is vital for organizations that must meet digital sovereignty requirements, such as the EU Cloud Sovereignty Framework, and operate multitenant cloud platforms. By providing deep expertise in key areas such as hosted control plane isolation, jurisdiction-aware identity and access controls, external key management, and cryptographic data protection across all three states, the course enables the organization to design and operate sovereign cloud platforms that satisfy regulatory mandates for data residency, personnel sovereignty, and cryptographic control. This expertise directly reduces the risk of regulatory noncompliance and ensures that the organization can offer sovereign clusters-as-a-service to tenants with verifiable jurisdictional guarantees.

Impact on the individual

For individuals, this course closes critical skill gaps by offering a deep, hands-on dive into building and operating sovereign cloud infrastructure on Red Hat OpenShift. Learners gain practical proficiency in deploying multitenant hosted control planes, enforcing zero-trust workload identity with SPIFFE and SPIRE, integrating external key management for cryptographic sovereignty, implementing network-bound disk encryption, and configuring jurisdiction-aware access controls. This mastery empowers the individual — whether an enterprise architect, IT security practitioner, or operations engineer — to confidently design and operate cloud platforms that meet stringent digital sovereignty requirements.

Buy Online

$2,010

R 36 175 — excl. VAT

We need it to assign your exam voucher. Don't have one yet? Leave it blank and we'll email you for it after you order.

Secure checkout via Stripe. CRS training ops will provision your access and email you within 3-5 working days.

Get 10% off with your Account Manager's code. Ask your CRS Account Manager for their code and enter it at checkout.

No Account Manager yet? and we'll assign one to call you, or email info@CyberRetaliatorSolutions.com.

Red HatAuthorized Training Partner

CRS is a Red Hat Authorized Training Partner and winner of the Training Reseller Impact of the Year 2023 award for META.

Red Hat Training FAQs

Is CRS an authorized Red Hat Training Partner?

Yes. CRS is a Red Hat Authorized Training Partner and winner of the Red Hat Training Reseller Impact of the Year 2023 award for the Middle East, Turkey & Africa region. CRS delivers the full Red Hat catalogue — including RHCSA, RHCE, Ansible Automation Platform, OpenShift, and all Red Hat Learning Subscriptions.

What Red Hat certifications can I achieve through CRS?

Through CRS you can pursue Red Hat Certified System Administrator (RHCSA), Red Hat Certified Engineer (RHCE), all Red Hat Certified Specialist designations, and Red Hat Certified Architect (RHCA) — the highest Red Hat certification available. Exam vouchers and preparation courses are available for all certification tracks.

What is the Red Hat Learning Subscription?

The Red Hat Learning Subscription is a 365-day all-access subscription to Red Hat's online learning library, including self-paced courses, virtual hands-on labs, and exam preparation content. Available in Standard and Premium tiers — Premium includes instructor-led course sessions and up to 5 exam vouchers with 5 retakes.

Does CRS deliver Red Hat training across Africa?

Yes. CRS delivers Red Hat training across South Africa, Nigeria, Kenya, Ghana, Uganda, Zimbabwe, Zambia, and other African markets, as well as North America. Instructor-led online courses are accessible from any location without travel.

How do I book a Red Hat course or arrange group training?

Use the booking form in the sidebar to submit your enquiry for this course. For group bookings of 5 or more delegates, indicate the number of delegates and preferred dates — the CRS training team will respond within 1 business day with availability and scheduling options.