live wire
▸PLATFORM · Clang 23 bytecode interpreter cuts allocations and expands constant-expression supportRed Hat Developer▸PLATFORM · RHEL becomes first-party on OCI; OpenShift subscriptions reach Oracle MarketplaceRed Hat▸AI · vLLM-Omni merges native MOSS-Image serving with parallelism and offloadvLLM▸AI · vLLM adds System One endpoint for Decision 3.0 multimodal routing models (Oct. 15)vLLM▸SECURITY · Red Hat rates OpenShift AI 3.4.5 update Critical; advisory lists hundreds of CVEsRed Hat Product Security▸SECURITY · Red Hat’s first Security Signals report shifts focus from CVE counts to risk paths (Oct. 15)Red Hat▸PLATFORM · IBM adds non-destructive FlexVolume-to-CSI migration tool for OpenShift object storageIBM Cloud▸vLLM tests agent-built Kimi K3 decode path at up to 1.9× speedup; PR remains openvLLM▸AI · LeaderWorkerSet 1.0 changes rollout defaults for disaggregated AI workloadsKubernetes SIGs▸SECURITY · Red Hat flags active exploitation of kernel flaw affecting OpenShift CoreOS; no fix listedRed Hat Product Security▸AI · Red Hat sets Dec. 9 showcase for AI 3.6 agent governance and model servicesRed Hat▸vLLM 0.32.0 drops Python 3.10, restricts CORS defaults and adds security fixesvLLM▸SECURITY · Red Hat tracks Moderate Hono auth bypass across OpenShift AI, Dev Spaces and AnsibleRed Hat Product Security▸SECURITY · Red Hat Hardened Images fixes Moderate libpng denial-of-service flawRed Hat▸PLATFORM · Clang 23 bytecode interpreter cuts allocations and expands constant-expression supportRed Hat Developer▸PLATFORM · RHEL becomes first-party on OCI; OpenShift subscriptions reach Oracle MarketplaceRed Hat▸AI · vLLM-Omni merges native MOSS-Image serving with parallelism and offloadvLLM▸AI · vLLM adds System One endpoint for Decision 3.0 multimodal routing models (Oct. 15)vLLM▸SECURITY · Red Hat rates OpenShift AI 3.4.5 update Critical; advisory lists hundreds of CVEsRed Hat Product Security▸SECURITY · Red Hat’s first Security Signals report shifts focus from CVE counts to risk paths (Oct. 15)Red Hat▸PLATFORM · IBM adds non-destructive FlexVolume-to-CSI migration tool for OpenShift object storageIBM Cloud▸vLLM tests agent-built Kimi K3 decode path at up to 1.9× speedup; PR remains openvLLM▸AI · LeaderWorkerSet 1.0 changes rollout defaults for disaggregated AI workloadsKubernetes SIGs▸SECURITY · Red Hat flags active exploitation of kernel flaw affecting OpenShift CoreOS; no fix listedRed Hat Product Security▸AI · Red Hat sets Dec. 9 showcase for AI 3.6 agent governance and model servicesRed Hat▸vLLM 0.32.0 drops Python 3.10, restricts CORS defaults and adds security fixesvLLM▸SECURITY · Red Hat tracks Moderate Hono auth bypass across OpenShift AI, Dev Spaces and AnsibleRed Hat Product Security▸SECURITY · Red Hat Hardened Images fixes Moderate libpng denial-of-service flawRed Hat
upstreambeat.ai
guideDEVELOPER HUB

Red Hat shows how Developer Hub can make the CI/CD stack one golden path

A worked example turns a Backstage template into a self-service route through GitHub, Tekton, Argo CD, Quay and OpenShift.

Developer Hub golden path across CI, GitOps, registry, and cluster services.
AI-generated illustration
By The News Desk· Sep 25, 2026the quick take — two AI hosts go live when you do

Red Hat has published a worked example of the platform-engineering promise behind Developer Hub: one self-service template that creates an application repository, wires in CI and GitOps, registers the component and exposes operational status without asking the developer to assemble the toolchain manually.

The value is less the individual tools than the connective tissue between them.

One template, several control planes

The Red Hat Developer guide extends an earlier setup that enabled Developer Hub plug-ins for Tekton, Argo CD, Quay and Kubernetes. Its sample software template collects the project name, owner, system, registry, namespace and target cluster before generating a Go application skeleton.

The generated repository includes a Tekton pipeline, Argo CD manifests, a devfile and the catalog-info.yaml metadata that Developer Hub uses to register the component. The template then publishes the repository to GitHub, creates an Argo CD application against the manifests directory and adds the new component to the software catalog.

That sequence is a concrete definition of a golden path: the platform team owns the integration decisions, while the developer supplies only the application-specific inputs.

Metadata is the integration layer

The guide’s most useful detail is its treatment of catalog annotations. Developer Hub does not infer the entire delivery topology from a repository. The catalog entity must identify the Kubernetes workload and namespace, connect the Tekton resources, point to the Argo CD application and name the Quay repository.

Those annotations determine whether the component page can show pods and deployments, PipelineRuns and logs, GitOps synchronization and health, and container image metadata. Red Hat notes that missing or incorrect annotations are the main reason plug-in tabs appear empty.

For platform teams, that makes catalog-info.yaml part of the product contract rather than incidental documentation. Template changes need the same review and testing discipline as pipeline or deployment changes because a stale label selector or repository slug can break the developer portal’s view even when the workload itself still runs.

Where to apply caution

The sample is deliberately specific. It contains example GitHub ownership and Quay repository values that adopters must replace. It also assumes the earlier work of configuring secrets, plug-ins, role-based access controls and service-account permissions has already been completed.

Teams adopting the pattern should therefore split validation into two paths: test whether the template provisions the delivery assets correctly, then test whether every catalog annotation surfaces the intended data to the right users. A successful scaffold with an empty operations view is only half a golden path.

The broader lesson is clear: Developer Hub can provide a unified experience without replacing Tekton, Argo CD, Quay or OpenShift. Its role is to package their interfaces into a paved workflow and keep the links between them legible.

sources

Filed by The News Desk. Corrections: desk@upstreambeat.ai · Our standards →

comments · 0

    Comments are moderated before they appear. Your email is used once to confirm it is you — never shown, never sold. Corrections and questions get an answer from the desk when we have one.

    more from the desk