The Platform Problem: Why AI Pilots Stall
Every enterprise has an AI pilot story. A data science team builds a promising model, but when it’s time to push to production, everything slows down. Identity isn’t integrated. Security policies don’t apply. The infrastructure team has to re-architect the deployment.
This is the gap Microsoft and Red Hat are closing with Azure Red Hat OpenShift. At Red Hat Summit 2026, the two companies showcased how a jointly managed, enterprise-grade Kubernetes platform can unify modernization, security, and AI—without forcing teams to choose between speed and compliance.
As noted in the announcement, the challenge shifts from building models to operating them with consistent identity, governance, and security through integration with Microsoft Azure services.

Three Pillars of Production AI on Azure Red Hat OpenShift
1. Modernization Without Rewriting: OpenShift Virtualization
Most enterprises aren’t starting from scratch. They have thousands of legacy VMs running critical workloads. The immediate priority is migrating off legacy virtualization platforms without disrupting existing workloads.
OpenShift Virtualization on Azure Red Hat OpenShift allows VMs and containers to run side-by-side on a single managed platform. This gives you a practical path:
- Migrate existing workloads without re-architecting.
- Transition those workloads to Kubernetes over time, at your own pace.
- Use integrated RHEL entitlements and Azure Hybrid Benefit to simplify licensing.
Key takeaway: You don’t need to containerize everything overnight. Start with VMs, then gradually adopt containers as your team matures.
2. Zero Trust Security: Confidential Containers & Managed Identities
As sensitive workloads move to the cloud, trust becomes non-negotiable. Azure Red Hat OpenShift applies a Zero Trust approach with two key capabilities:
- Confidential Containers: Protect data in use through hardware-backed isolation. Even the underlying infrastructure can’t see your plaintext data.
- Workload Identities (GA): Use OpenID Connect (OIDC) federation to give applications secure access to Azure services—without long-lived secrets embedded in code.
# Example: Configure workload identity for an app on Azure Red Hat OpenShift
apiVersion: v1
kind: ServiceAccount
metadata:
annotations:
azure.workload.identity/client-id: "<your-client-id>"
name: my-app-sa
namespace: production
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: my-app
spec:
template:
spec:
serviceAccountName: my-app-sa
containers:
- name: app
image: myregistry.azurecr.io/my-app:latest
env:
- name: AZURE_CLIENT_ID
valueFrom:
fieldRef:
fieldPath: spec.serviceAccountAnnotations['azure.workload.identity/client-id']
This eliminates credential sprawl and aligns with Zero Trust principles across distributed applications.
3. AI at Scale: NVIDIA GPUs & Red Hat OpenShift AI
Azure Red Hat OpenShift provides a consistent platform for running AI workloads across hybrid and multi-cloud environments. Customers can:
- Run AI directly on OpenShift using Red Hat OpenShift AI.
- Integrate with Azure AI services and Microsoft Foundry to accelerate development.
- Leverage expanded NVIDIA GPU support for large-scale inference and data-intensive workloads.
Real-world example: Banco Bradesco, one of the largest financial institutions in Latin America, uses Azure Red Hat OpenShift to unify governance across more than 200 AI initiatives. As Rafael Romualdo Wandresen, Senior Bridge Manager, said: "We are bringing AI-powered banking to millions of Brazilians, so performance at scale is nonnegotiable."

Limitations & Considerations
While Azure Red Hat OpenShift is powerful, it’s not a silver bullet. Here are a few things to watch out for:
- Learning curve: If your team is new to Kubernetes, the initial setup and operational overhead can be significant. Plan for training and invest in platform engineering.
- Cost management: Running GPUs and managed OpenShift clusters at scale can get expensive. Use Azure cost management tools and right-size your node pools.
- Vendor lock-in risk: Although OpenShift is open-source, the managed Azure service ties you to the Azure ecosystem. If multi-cloud portability is critical, consider a self-managed OpenShift deployment.
- Not for simple apps: If your application is a single stateless web service, a fully managed Azure App Service might be simpler and cheaper. OpenShift shines when you need consistency across hybrid environments.
Next Steps: Where to Go From Here
- Start small: Migrate one VM workload to OpenShift Virtualization before moving to containers.
- Adopt workload identities: Eliminate secrets from your CI/CD pipeline.
- Explore AI integration: Try running a small inference workload on a GPU node to understand the operational patterns.
- Read related guides: Check out our Critical React Server Components RCE Vulnerability guide to ensure your frontend security posture matches your infrastructure security.

Conclusion: The Platform Is the Strategy
Azure Red Hat OpenShift is not just another Kubernetes distribution. It’s a strategic platform that lets enterprises standardize on one foundation for VMs, containers, and AI—with built-in security, identity, and governance.
As AI moves from pilot to production, the platform matters more than ever. Customers like Banco Bradesco and Topicus show that with the right foundation, you can scale AI without sacrificing compliance or operational control.
Ready to get started? Explore how to deploy your first workload on Azure Red Hat OpenShift, and join the conversation at Red Hat Summit 2026.