--- title: What's new in Red Hat OpenShift 5 for developers | daily.dev description: Red Hat OpenShift 5 is now generally available, built on CRI-O 1.36 and Kubernetes 1.36. It adds an MCP server and gateway so AI agents get RBAC-governed,... canonical: https://daily.dev/posts/what-s-new-in-red-hat-openshift-5-for-developers-pw7pk8ddt twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: What's new in Red Hat OpenShift 5 for developers | daily.dev og:description: Red Hat OpenShift 5 is now generally available, built on CRI-O 1.36 and Kubernetes 1.36. It adds an MCP server and gateway so AI agents get RBAC-governed,... og:url: https://daily.dev/posts/what-s-new-in-red-hat-openshift-5-for-developers-pw7pk8ddt og:image: https://api.daily.dev/og/posts/PW7pk8Ddt.png og:image:alt: What's new in Red Hat OpenShift 5 for developers og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # What's new in Red Hat OpenShift 5 for developers **[Red Hat Developer](https://daily.dev/sources/rhdev)** · 9 min read · 0 upvotes · 0 comments ## Summary Red Hat OpenShift 5 is now generally available, built on CRI-O 1.36 and Kubernetes 1.36. It adds an MCP server and gateway so AI agents get RBAC-governed, read-only-by-default access to cluster resources, plus dynamic GPU resource allocation that lets a single GPU be split into claimable slices. An Agent Sandbox feature, in Technology Preview, runs untrusted AI agent code in VM-isolated Kata containers. Developer Hub 2.1 extends support windows from 6 to 10 months, Podman Desktop gains Podman 6 support, and the console adds OIDC login and 3 new UI themes. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What does the MCP server for Red Hat OpenShift actually restrict AI agents from doing? It defaults to read-only access and enforces standard Kubernetes RBAC, so agents can inspect pipeline runs, query service mesh telemetry, or monitor virtualization resources without being able to modify them. It also integrates with OAuth and OIDC identity providers and tags every action for audit logging. A separate MCP gateway screens traffic for PII, prompt injection, and unsafe content before requests reach MCP servers. _Teams wiring AI agents into cluster operations can track MCP governance patterns like these on daily.dev._ ### How does dynamic resource allocation (DRA) let OpenShift split a single GPU between workloads? Partitionable devices allow one GPU or network card to be divided into logical slices that can be independently allocated, while consumable capacity lets workloads claim specific portions, such as memory or bandwidth, through individual ResourceClaim requests. Pod status also exposes real-time device health, with device taints, tolerations, and binding conditions supporting finer scheduling control. _Engineers planning GPU-sharing strategies for AI workloads can follow DRA developments like this on daily.dev._ ### How does Red Hat's Agent Sandbox isolate untrusted AI agent code from the rest of the cluster? Agent Sandbox, available in Technology Preview, runs AI agents in short-lived, VM-isolated execution environments using sandboxed Kata containers rather than standard containers. It keeps pre-provisioned warm pools ready to remove startup delays for interactive agent sessions, and a sandbox router provides access to agent browsers, notebooks, and IDEs. _Developers evaluating how to run agentic AI code safely can keep up with sandboxing approaches like this on daily.dev._ ## Similar posts on daily.dev - [What's new for developers in Red Hat OpenShift 4.22](https://daily.dev/posts/what-s-new-for-developers-in-red-hat-openshift-4-22-w0f5qwqyq) · Red Hat Developer · 1 upvotes · 1 comments - [Red Hat Expands OpenShift Application Development Environment](https://daily.dev/posts/red-hat-expands-openshift-application-development-environment-9febxassl) · Cloud Native Now · 1 upvotes · 0 comments - [Red Hat Bridges the Local-to-Cloud Gap for Agentic AI Development](https://daily.dev/posts/red-hat-bridges-the-local-to-cloud-gap-for-agentic-ai-development-ibhiaf00u) · SD Times · 0 upvotes · 0 comments - [Red Hat OpenShift 4.20 boosts AI workloads, security](https://daily.dev/posts/red-hat-openshift-4-20-boosts-ai-workloads-security-fne0alrnp) · InfoWorld · 0 upvotes · 0 comments --- Tags: [#kubernetes](https://daily.dev/tags/kubernetes), [#mcp](https://daily.dev/tags/mcp), [#openshift](https://daily.dev/tags/openshift) [View this post on daily.dev](https://daily.dev/posts/what-s-new-in-red-hat-openshift-5-for-developers-pw7pk8ddt) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"What's new in Red Hat OpenShift 5 for developers","url":"https://daily.dev/posts/what-s-new-in-red-hat-openshift-5-for-developers-pw7pk8ddt","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/what-s-new-in-red-hat-openshift-5-for-developers-pw7pk8ddt"},"datePublished":"2026-11-09T15:38:28.896Z","dateModified":"2026-11-09T19:16:10.082Z","description":"Red Hat OpenShift 5 is now generally available, built on CRI-O 1.36 and Kubernetes 1.36. It adds an MCP server and gateway so AI agents get RBAC-governed,...","image":"https://media.daily.dev/image/upload/s--CxzD6vbw--/f_auto/v1722860399/public/Placeholder%2005","thumbnailUrl":"https://media.daily.dev/image/upload/s--CxzD6vbw--/f_auto/v1722860399/public/Placeholder%2005","isAccessibleForFree":true,"articleSection":"Red Hat Developer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Red Hat Developer","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/2a8895f3216c4900bdc455585a4ad3e4","url":"https://daily.dev/sources/rhdev"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/what-s-new-in-red-hat-openshift-5-for-developers-pw7pk8ddt","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"kubernetes,mcp,openshift","timeRequired":"PT9M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Red Hat Developer","item":"https://daily.dev/sources/rhdev"},{"@type":"ListItem","position":3,"name":"What's new in Red Hat OpenShift 5 for developers"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/what-s-new-in-red-hat-openshift-5-for-developers-pw7pk8ddt#faq","mainEntity":[{"@type":"Question","name":"What does the MCP server for Red Hat OpenShift actually restrict AI agents from doing?","acceptedAnswer":{"@type":"Answer","text":"It defaults to read-only access and enforces standard Kubernetes RBAC, so agents can inspect pipeline runs, query service mesh telemetry, or monitor virtualization resources without being able to modify them. It also integrates with OAuth and OIDC identity providers and tags every action for audit logging. A separate MCP gateway screens traffic for PII, prompt injection, and unsafe content before requests reach MCP servers. Teams wiring AI agents into cluster operations can track MCP governance patterns like these on daily.dev."}},{"@type":"Question","name":"How does dynamic resource allocation (DRA) let OpenShift split a single GPU between workloads?","acceptedAnswer":{"@type":"Answer","text":"Partitionable devices allow one GPU or network card to be divided into logical slices that can be independently allocated, while consumable capacity lets workloads claim specific portions, such as memory or bandwidth, through individual ResourceClaim requests. Pod status also exposes real-time device health, with device taints, tolerations, and binding conditions supporting finer scheduling control. Engineers planning GPU-sharing strategies for AI workloads can follow DRA developments like this on daily.dev."}},{"@type":"Question","name":"How does Red Hat's Agent Sandbox isolate untrusted AI agent code from the rest of the cluster?","acceptedAnswer":{"@type":"Answer","text":"Agent Sandbox, available in Technology Preview, runs AI agents in short-lived, VM-isolated execution environments using sandboxed Kata containers rather than standard containers. It keeps pre-provisioned warm pools ready to remove startup delays for interactive agent sessions, and a sandbox router provides access to agent browsers, notebooks, and IDEs. Developers evaluating how to run agentic AI code safely can keep up with sandboxing approaches like this on daily.dev."}}]} ```