Feature Overview (aka. Goal Summary)  

Enable OpenShift Sandboxed Containers to be deployed on Hosted Clusters and support Confidential Containers on these clusters

Goals (aka. expected user outcomes)

OpenShift Sandboxed Containers can be deployed on HCP Hosted Clusters and COnfidential Containers can run on those clusters

Requirements (aka. Acceptance Criteria):

OpenShift Sandboxed Containers are integrated into Hosted Control Planes, so OpenShift-managed offerings like ROKS, ARO, and ROSA and self-managed customers deploying Hosted Clusters can leverage OpenShift Sandboxed Containers to run Confidential Containers on these clusters.

OpenShift Sandboxed Containers can use the short-living credentials used to integrate with the underlying infrastructure where the Hosted Cluster is deployed.

Use Cases (Optional):

The most immediate use case will be OpenShift-managed offerings like ROKS, ROSA and ARO but self-managed customers using HCP will benefit from this

Background

There have been previous efforts to document how to implement OSC with HCP:

https://developers.redhat.com/articles/2024/05/24/run-openshift-sandboxed-containers-hosted-control-planes#

To add this into the product we need to fill the existing gaps to support OSC on HCP

Documentation Considerations

Usual user-facing documentation will be required to instruct the users how to deploy OSC into HCP customers