Course
digicode: DO505
Building a Sovereign Cloud with Red Hat OpenShift
Course facts
Download as PDF- Defining the pillars of digital sovereignty and mapping sovereignty objectives to a multicluster OpenShift architecture
- Deploying sovereign edge clusters in air-gapped environments
- Architecting multitenant isolation with hosted control planes
- Enforcing GitOps as the sovereign source of truth for infrastructure management
- Implementing jurisdiction-aware identity and access controls
- Establishing zero-trust workload identity with SPIFFE and SPIRE
- Integrating external key management for cryptographic sovereignty
- Securing data residency with network-bound disk encryption and confidential computing
- Preparing for post-quantum cryptography threats
- Implementing sovereign disaster recovery with in-jurisdiction backups
This course is designed for enterprise architects, IT security practitioners, and operations personnel who need to meet digital sovereignty requirements by using Red Hat OpenShift Container Platform 4.20. Grounded in the European Union (EU) Cloud Sovereignty Framework, learners will gain hands-on proficiency in deploying multitenant clusters-as-a-service with hosted control planes, enforcing zero-trust isolation and jurisdiction-aware access controls, and implementing advanced cryptographic protections including external key management, network-bound disk encryption, and post-quantum cryptography.
1 Introduction to Sovereign Cloud Operations
Describe the four pillars of sovereignty, the European Union Sovereignty Objectives (SOV), and the Red Hat Advanced Cluster Management (RHACM) hub-and-spoke architecture within the context of sovereign cloud providers.
2 Architecting the Sovereign Boundary
Onboard and manage new sovereign cluster-as-a-service tenant clusters by using RHACM, and enforce zero-trust isolation, operational sovereignty, and jurisdictional access controls.
3 Securing Sovereign Data
Implement advanced cryptographic controls for tenant clusters and provider workloads to ensure data confidentiality at rest, in use, and during recovery.
- Enterprise Architects who design the sovereign landing zone, control planes, and integrate sovereign controls
- IT Security Practitioners who translate regulatory law (such as the SOV framework) into technical policy and manage cryptographic controls
- IT Operations personnel, SREs, and System Administrators who implement, manage, and automate sovereign controls daily and ensure operational resilience
Security fundamentals: Familiarity with core security concepts, such as identity and access management (IAM), encryption, network policies, and firewalls.
We also recommend having taken the following courses: