Course data sheet
OpenShift Administration (GL280)
H54PZS
Table of Contents
Overview
Build production-ready OpenShift administration skills across the full cluster operations stack. Progress from architecture review and cluster installation through authentication, security hardening, application lifecycle management, advanced scheduling, autoscaling, and production observability, gaining the expertise to operate OpenShift Container Platform clusters at scale.
- OpenShift 4.x installation on AWS with IPI and UPI methods
- Identity provider configuration with htpasswd and OAuth
- Role-Based Access Control, Security Context Constraints
- Admission controllers with Gatekeeper policy enforcement
- Deployments with rolling updates and rollbacks
- ResourceQuotas and LimitRanges
- Node and pod affinity rules
- Taints and tolerations
- Horizontal Pod Autoscalers with custom Prometheus metrics
- MachineSet and ClusterAutoscaler management
- EFK logging with Elasticsearch and Fluentd, audit log forwarding
- Prometheus-based monitoring with ServiceMonitors and Grafana dashboards
With 17 lab exercises spanning every chapter, you work directly on live OpenShift clusters to configure identity providers, enforce RBAC policies, tune pod scheduling, set up autoscaling, deploy the logging stack, and build monitoring dashboards to develop the hands-on skills that day-2 cluster operations demand.
Audience
This course is ideal for system administrators, DevOps engineers, site reliability engineers, platform engineers, and IT professionals responsible for deploying, operating, and maintaining Red Hat OpenShift Container Platform clusters. It is also well suited for professionals seeking production-ready skills in cluster security, workload scheduling, autoscaling, and observability.
Prerequisites
Before attending this course, you should have:
- Solid knowledge of Kubernetes concepts including Pods, Deployments, Services, and namespaces
- Successfully completed Linux Fundamentals (GL120) or equivalent Linux command-line proficiency is required
- Familiarity with container images, registries, and YAML object manifests
- Successfully completed Kubernetes Administration (GL275) or equivalent hands-on Kubernetes experience is strongly recommended
Objectives
After completing this course, you should be able to:
- Describe OpenShift and Kubernetes cluster architecture including control plane components, RHCOS nodes, and Operator-managed infrastructure
- Configure cluster authentication using htpasswd identity providers, OAuth, kubeconfig files, and service accounts
- Implement Role-Based Access Control with Roles, ClusterRoles, RoleBindings, and ClusterRoleBindings
- Manage Security Context Constraints and admission controllers to enforce pod security policies
- Deploy and manage applications using Deployments, ReplicaSets, rolling updates, and Pod Disruption Budgets
- Configure pod health checks using startup, liveness, and readiness probes
- Control pod scheduling with resource requests, limits, node and pod affinity rules, taints, and tolerations
- Plan cluster capacity including control plane sizing, network CIDR allocation, and etcd performance tuning
- Scale clusters using Horizontal Pod Autoscalers, MachineSets, MachineHealthChecks, and ClusterAutoscalers
- Enforce organizational standards using labels, annotations, and Gatekeeper policy-based admission control
- Deploy and operate the EFK logging stack with Elasticsearch, Fluentd, Kibana, and ClusterLogForwarder audit log management
- Monitor cluster health using Prometheus, Grafana, Thanos Querier, ServiceMonitors, and custom application metrics
Course outline
| Modules and Labs |
|
5 reasons to choose HPE as your training partner
- Learn HPE and in-demand IT industry technologies from expert instructors.
- Build career-advancing power skills.
- Enjoy personalized learning journeys aligned to your company’s needs.
- Sharpen your skills with access to real environments in virtual labs.
Explore our simplified purchase options, including HPE Education Services – Learning Credits.
Learn more
© Copyright 2026 Hewlett Packard Enterprise Development LP. The information contained herein is subject to change without notice. The only warranties for Hewlett Packard Enterprise products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. Hewlett Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein.
All third-party marks are property of their respective owners.
a50015655enw, H54PZS A.00, June 2026