Skip to content

Add Hybrid Mesh Platform sandbox pattern#686

Closed
maximilianoPizarro wants to merge 12 commits into
validatedpatterns:mainfrom
maximilianoPizarro:add-hybrid-mesh-platform-pattern
Closed

Add Hybrid Mesh Platform sandbox pattern#686
maximilianoPizarro wants to merge 12 commits into
validatedpatterns:mainfrom
maximilianoPizarro:add-hybrid-mesh-platform-pattern

Conversation

@maximilianoPizarro

Copy link
Copy Markdown

Summary

  • Adds Hybrid Mesh Platform as a new sandbox-tier pattern under content/patterns/hybrid-mesh-platform/.
  • Documents hub-spoke multi-cluster GitOps (ACM, Argo CD ApplicationSet, Service Mesh ambient, Skupper, Hub Gateway, observability) on OpenShift 4.20.
  • Extends the existing Industrial Edge pattern for east/west spoke deployment (does not duplicate maintained-pattern content).
  • Includes architecture diagrams in static/images/hybrid-mesh-platform/ and spellcheck entries in .wordlist.txt.

Contributor: Maximiliano Pizarro (Specialist Solution Architect at Red Hat)
Pattern repo: https://github.com/maximilianopizarro/platform-hub-spoke-config

Pages added

Page Weight
_index.md Landing
getting-started.md 10
architecture.md 20
hub-gateway.md 30
observability.md 40
industrial-edge.md 50
scaffolding.md 60
ideas-for-customization.md 70

Test plan

  • CI / Super-Linter passes
  • Spellcheck passes (.wordlist.txt updated)
  • Site build succeeds (make build in container)
  • Pattern renders at /patterns/hybrid-mesh-platform/
  • Images load from /images/hybrid-mesh-platform/
  • Links to maintained Industrial Edge and Multicloud GitOps patterns resolve

Made with Cursor

@openshift-ci

openshift-ci Bot commented May 20, 2026

Copy link
Copy Markdown
Contributor

Hi @maximilianoPizarro. Thanks for your PR.

I'm waiting for a validatedpatterns member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@openshift-ci openshift-ci Bot added the size/XL label May 20, 2026
@openshift-ci openshift-ci Bot requested review from dminnear-rh and mhjacks May 20, 2026 22:28
@openshift-ci openshift-ci Bot added size/XXL and removed size/XL labels May 20, 2026
@mbaldessari mbaldessari self-requested a review May 27, 2026 12:32
@maximilianoPizarro

Copy link
Copy Markdown
Author

Hi @mbaldessari and team,

I have opened this Pull Request to propose adding the Hybrid Mesh Platform architecture blueprint to the Validated Patterns documentation.

This architecture provides a GitOps-first, hub-spoke reference design to scale fleet governance across multiple OpenShift clusters. The stack is validated using an Industrial Edge factory IoT scenario as the proof workload.

Key highlights of the platform architecture include:

  • Centralized Fleet GitOps: Leverages Advanced Cluster Management (ACM) for fleet inventory and OpenShift GitOps (Argo CD) with ApplicationSets for automated multi-cluster delivery.
  • Service Mesh Without Sidecars: Uses Red Hat OpenShift Service Mesh 3 (OSSM3) in ambient mode, utilizing per-node ztunnels for L4 connectivity and optional waypoints for L7 policies.
  • Cross-Cluster Connectivity Without VPN: Implements Red Hat Service Interconnect (Skupper) to create a Virtual Application Network via outbound-only mTLS, avoiding complex inbound firewall rules.
  • Data Pipeline Validation: Integrates AMQ Streams (Kafka), Apache Camel K, and MQTT ingestion to demonstrate a fully functional, stateful edge pipeline.

The underlying repository and full implementation details can be found at: github.com/maximilianoPizarro/platform-hub-spoke-config.

I would highly appreciate your review, feedback, or any guidance on required adjustments to ensure this aligns perfectly with the Validated Patterns standards.

Thank you for your time and support!

maximilianoPizarro and others added 6 commits June 10, 2026 14:15
Introduces hub-spoke multi-cluster GitOps docs with architecture diagrams,
getting started, observability, and Industrial Edge extension pages.

Co-authored-by: Cursor <cursoragent@cursor.com>
Align depth with the platform-hub-spoke-config site: journey intro,
end-to-end flows, Skupper listeners, gateway circuit breaking, and
expanded observability and scaffolding guidance.

Co-authored-by: Cursor <cursoragent@cursor.com>
Download missing diagrams (connectivity-link hub/spoke, Skupper
console views, Grafana/Kiali/Kafka panels) and embed them in
architecture, hub-gateway, observability, and getting-started pages.

Co-authored-by: Cursor <cursoragent@cursor.com>
Add architecture narrative for fleet management and Central/SecuredCluster
topology, ACS-2 console image, and expanded getting-started operator guidance.

Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
… ops.

- Add tested_on metadata: AWS, OpenShift 4.20, 3-cluster topology
- Add cluster sizing table (hub 24vCPU/96GiB, spokes 12vCPU/48GiB)
- Reference current release ocp-420-v5
- Add AI-assisted operations (Kairos) section with 5 screenshots
- Rebase on upstream/main for clean merge

Signed-off-by: Maximiliano Pizarro <maximiliano.pizarro.5@gmail.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
@maximilianoPizarro maximilianoPizarro force-pushed the add-hybrid-mesh-platform-pattern branch from b127450 to e06261d Compare June 10, 2026 17:17
@maximilianoPizarro

Copy link
Copy Markdown
Author

Hi @mbaldessari, thanks for looking at this PR. Here's a summary of what changed since the initial submission:

Updates in this force-push (rebased on latest main):

  1. Tested environment tags — Added tested_on metadata: hub + east + west spokes on AWS with OpenShift 4.20 (multinode, 3 workers per cluster).
  2. Cluster sizing — Getting Started now includes a sizing table based on real provisioning (hub: 24 vCPU / 96 GiB, spokes: 12 vCPU / 48 GiB) with workload breakdowns.
  3. Current release reference — Links to ocp-420-v5 as the latest stable tag.
  4. AI-assisted operations (Kairos) — New observability section with 5 screenshots showing event correlation, historical analysis, human-in-the-loop, AI agents, and observability-driven insights.
  5. Connectivity Link topology — Full section in Hub Gateway with hub/spoke Gateway API screenshots.
  6. Skupper Network Observer — 4 console screenshots (sites, topology, processes, metrics).
  7. ACM and ACS — Dedicated architecture sections with console views and init bundle guidance.
  8. DCO — All commits now carry Signed-off-by.
  9. Rebased on upstream/main for a clean merge path.

The pattern documentation does not include the .docx ebook (stays outside the PR). No changes to Makefile or themes/ — only files under content/patterns/hybrid-mesh-platform/, static/images/hybrid-mesh-platform/, and .wordlist.txt.

Let me know if you need any adjustments!

- Re-download all images with updated Red Hat corporate style
- Add Red Hat logo, OpenShift Console, Kubecost, Mailpit, Kairos
  community logo assets
- Expand product list: Dev Spaces, Quay, Virtualization, Gitea,
  Kafka Console
- Add spoke sync-wave reference table in Architecture
- Add Hybrid Mesh AI Workshop reference in landing page
- Tested on AWS with OpenShift 4.20 (hub + east + west)

Signed-off-by: Maximiliano Pizarro <maximiliano.pizarro.5@gmail.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
@maximilianoPizarro

Copy link
Copy Markdown
Author

Hi @mbaldessari, updated the PR with a fresh rebase on main and new content:

Changes in this update:

  1. Images refreshed — All diagrams re-downloaded with updated Red Hat corporate branding style (logo, consistent visual language across architecture, product, and console screenshots).
  2. New assets added — Red Hat logo (rh-logo.svg), OpenShift Console, Kubecost, Mailpit, and Kairos community logo.
  3. Expanded product list — Added Dev Spaces, Quay, OpenShift Virtualization, Gitea, and Kafka Console (aligns with the current pattern repository scope).
  4. Spoke sync-wave reference — Architecture page now includes the spoke sync-wave table (waves 1–6) explaining deployment ordering on east/west.
  5. Hybrid Mesh AI Workshop — Reference section in the landing page pointing to the workshop materials (hands-on lab with ACM, mesh, AI, Kuadrant).
  6. Rebased cleanly on upstream main (latest merge: Arcade demos #689 arcade-demos).
  7. DCOSigned-off-by on all commits.

No NeuroFace content included. All tested on AWS with OpenShift 4.20 (hub + 2 spokes).

Ready for review when you have time!

maximilianoPizarro and others added 5 commits June 11, 2026 11:22
Add workshop-style hero images (white background, Red Hat branding)
as primary visuals for landing, architecture, observability, scaffolding,
hub-gateway, industrial-edge, and getting-started pages. Previous
console screenshots retained as supplementary detail views.

Signed-off-by: Maximiliano Pizarro <maximiliano.pizarro.5@gmail.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Expand the pattern overview with hub-spoke architecture summary,
service mesh traffic flow, OpenShift AI MaaS, Kuadrant API gateway,
and detailed workshop dual-track description aligned with the
Hybrid Mesh AI Showroom content.

Signed-off-by: Maximiliano Pizarro <maximiliano.pizarro.5@gmail.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Separate hero images with tables, bullet explanations, and flow
descriptions so content doesn't appear as stacked screenshots
without context.

Signed-off-by: Maximiliano Pizarro <maximiliano.pizarro.5@gmail.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Every image now has an italic caption below explaining what the
screenshot shows, preventing wall-of-images without context.

Signed-off-by: Maximiliano Pizarro <maximiliano.pizarro.5@gmail.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Add explanatory paragraphs between every screenshot: cross-cluster
metrics flow, per-dashboard descriptions, Kiali topology detail,
and Kafka Console multi-cluster explanation.

Signed-off-by: Maximiliano Pizarro <maximiliano.pizarro.5@gmail.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
@mbaldessari

Copy link
Copy Markdown
Contributor

Hi! I am a bit confused here, from a quick look at the actual repo, it seems to use non of the validated patterns pieces (pattern-operator, secrets loading, clustergroup chart, other charts, etc). https://validatedpatterns.io/contribute/implementation/ here we have a bit of guidance, but it's really best to start off an existing pattern and expand that (multicloud-gitops is usually the recommended one).

@maximilianoPizarro

Copy link
Copy Markdown
Author

Hi @mbaldessari — thank you for the feedback, and sorry for the confusion.

You're absolutely right: platform-hub-spoke-config is a standalone App-of-Apps implementation and does not use the Validated Patterns framework (no clustergroup chart, pattern-operator, VP secrets loading, or the standard chart layout). This docs PR was ahead of the implementation shape VP expects.

What I'll do next:

Fork multicloud-gitops as the base and migrate our Hybrid Mesh Platform capabilities (Industrial Edge on spokes, ambient Service Mesh, Service Interconnect/Skupper, Connectivity Link/RHCL, observability, ACS, OpenShift AI, etc.) onto the VP structure — starting from the recommended pattern rather than documenting a parallel layout.
Close this PR (or leave it closed) and open a new PR once the implementation repo follows the implementation requirements and the docs align with that VP-conformant repo.
I'll keep the workshop/showroom content on the external repo for now; the new VP work will be the maintained, clustergroup-based path.

Thanks again for pointing me to the right starting point — much appreciated.

@maximilianoPizarro

Copy link
Copy Markdown
Author

Superseded by a new PR with VP-conformant implementation:

The legacy App-of-Apps repo (platform-hub-spoke-config) remains frozen for live workshop deployments until cutover is validated on demo.redhat.com.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants