Chapter 2. October 2025
2.1. Product-wide updates Copy linkLink copied to clipboard!
Red Hat Insights is now Red Hat Lightspeed
Red Hat Insights is now Red Hat Lightspeed, reflecting the addition of AI-powered management to Red Hat platforms. With Red Hat Lightspeed, you can continue using the same workflows, console entry points, and integrations that you rely on. There is no action required for users.
The Red Hat Hybrid Cloud Console and tools like Red Hat Satellite have updates including the new name, updated navigation and iconography, and user interface adjustments designed to surface AI-driven insights and recommendations more intuitively. The changes will continue gradually through the end of 2025 and into 2026. Our goal is to make the evolution seamless while continuously improving the performance, usability, and intelligence of the experience.
For more information, see Red Hat Insights is now Red Hat Lightspeed: Accelerating AI-powered management.
Published blogs and resources
- Blog post: Integrate incident detection with OpenShift Lightspeed via MCP by Alberto Falossi and Tomas Remes (Oct 9, 2025).
- Blog post: Using AI agents with Red Hat Lightspeed by Sean O’Keeffe (Oct 13, 2025).
2.2. Red Hat Enterprise Linux updates Copy linkLink copied to clipboard!
2.2.1. General Copy linkLink copied to clipboard!
Red Hat Lightspeed: Model Context Protocol (MCP)
The Developer Preview of insights-mcp is live. The insights-mcp utility is a new, lightweight tool from Red Hat that enables you to explore and integrate Red Hat Lightspeed services with large language models (LLMs) through an MCP server.
Built and maintained by Red Hat, the insights-mcp utility is a self-hosted Model Context Protocol (MCP) server that exposes core Red Hat Lightspeed services like Advisor, Vulnerability, Inventory, and Image Builder. It enables seamless interaction with the preceding services through a standardized MCP interface. You can connect LLM-based agents, for example Claude Desktop, VSCode, or other MCP-compatible tools to interact with your Red Hat environment. This integration enables you to explore read-only workflows and use AI to better understand your system health without the risk of autonomous AI decision making.
To learn more, see the following resources:
Enhanced Insights automation with AAP 2.6
Red Hat Ansible Automation Platform 2.6 introduced automatic job labeling for Red Hat Lightspeed-triggered automation. This enhancement brings EDA and AAP closer together, making event-driven operations more transparent and easier to manage at scale.
This update includes the following benefits for Event-Driven Ansible (EDA) users working with Red Hat Lightspeed:
- Identify jobs that Red Hat Lightspeed initiated in the AAP job history.
- Automatically attach context-rich labels like source application, event type, or affected system.
- Improve your ability to audit, troubleshoot, and report automated remediations.
- Use Red Hat Lightspeed events to drive controller-managed automation, not only local playbooks.
- EDA rule books can trigger AAP Job Templates with dynamic labels based on the originating Red Hat Lightspeed event to improve traceability and operational visibility across automation runs.
2.2.2. Remediations Copy linkLink copied to clipboard!
Enhanced AAP integration: now supports Service Account authentication
Red Hat Lightspeed now supports Service Account authentication for playbook retrieval by Ansible Automation Platform (AAP). This enhancement creates a more secure, scalable, and automation-friendly integration between the platforms.
To enable this integration, assign the following permissions to a service account:
-
inventory:hosts:readwhich is included in the Inventory Hosts viewer role -
remediations:remediation:readandplaybook-dispatcher:run:readwhich are included in the Remediations User role
Depreciation Notice
Basic authentication with a username and password is deprecated. Transition to Service Account authentication to maintain compatibility and improve security posture.
For help with setup and configuration, see to the following resources:
- The KBase article, Support for token-based authentication via Service Account for Red Hat Lightspeed (Insights) in Ansible Automation Platform
- The official AAP documentation, Setting up Red Hat Lightspeed Remediations
UI fixes and improvements
The following changes and fixes are now available:
- Host connection types now correctly display in Execution History for a remediation plan.
- A contextual tooltip appears for the disabled Plan remediation button.
- Performance is improved when users create large remediation plans.
-
The messaging is improved when a user checks the connectivity status of a remediation plan when the RHC Manager or
config-managerpermission is absent.
2.2.3. Inventory Copy linkLink copied to clipboard!
Fixes and improvements
Inventory has the following updates that improve usability, consistency, filtering capability, and host lifecycle management:
- Extended default retention to 30 days to match Red Hat Subscription Management (RHSM), ensuring better data continuity
- Improved custom staleness reset logic; resetting now properly removes custom values and returns to default settings
- Added Last Seen and Workspaces filters to filter consistently across Red Hat Lightspeed applications
- Fixed the Delete workspace button refresh issue
- Disabled the Export button during downloads to prevent duplicate exports
- Refined workspace actions and modals for consistency and usability
- Updated system action names like Edit display name and Delete from inventory
- Created a new notification alert when you delete systems
-
Updated the client setup instructions to use
dnfinstead ofyumfor compatibility with RHEL 8 and later
2.2.4. Advisor Copy linkLink copied to clipboard!
UI fixes and improvements
Advisor recommendations that conflict with active compliance policies are now flagged with a note under Steps to resolve. To find flagged recommendations, expand the
New recommendations
The Red Hat Lightspeed Advisor service now detects and recommends solutions for the following issues:
- The CIFS filesystem is at risk of hanging on reconnecting when the server is shutdown abruptly
- Kernel panic occurs when NFS unlinking or renaming over a file
- The Rsyslog client stopped forwarding logs to the remote server over TCP due to network connectivity issues
- Services using "PrivateUsers=yes" are not able to start when setting the kernel parameter "max_user_namespaces" as "0"
- Commands fail due to glibc library error
- Kernel panic will occur when rebooting the host on AMD Turin Zen 5 CPUs
- The system experiences decreased security due to an important security vulnerability in VMWare open-vm-tools
- The rpm database is broken
- The host fails to reboot when the SELinux context of the /etc/fstab file is incorrect
2.2.5. Vulnerability Copy linkLink copied to clipboard!
New security rule released
A new security rule is now available for CVE-2025-41244 - Vulnerability of open-vm-tools. Product Security identified this CVE because it had public visibility and multiple customer inquiries.
2.2.6. Policies Copy linkLink copied to clipboard!
Policies decommissioning is set for December 12, 2025
The Red Hat Lightspeed policies service will be decommissioned on December 12, 2025. Customers should use inventory APIs or Ansible Automation Platform (AAP) to standardize system profiles and report use cases.
The Red Hat Lightspeed compliance service, which evaluates systems against OpenSCAP policies for security compliance, is not impacted.
2.2.7. Patch / Content Copy linkLink copied to clipboard!
The Community EPEL is available in production
The Community Extra Packages for Enterprise Linux (EPEL) is available in production for all users. With this update, users do not need to wait for EPEL to create a snapshot. For more information, see How to use Extra Packages for Enterprise Linux (EPEL).
2.2.8. Subscriptions Service Copy linkLink copied to clipboard!
Daily digest is available for errata notifications
Users can now choose to receive daily digests of security, bugfix, and enhancement errata that affect the organization’s subscriptions.
2.2.9. Image builder Copy linkLink copied to clipboard!
Improved configuration options
Image builder added configuration improvements for the following options:
- Users
- Timezone
- Locale
- Firewall
- Systemd services
Registration to Red Hat Satellite
The registration step now includes the option to register to a Satellite server. Registering to a server adds you to its inventory and provides ongoing management.
Callbacks to Ansible Automation Platform
A new configuration option enables a system that is launched from an image to automatically call back to Ansible Automation Platform. This process adds the system to the inventory and provides further provisioning automation.
Enable FIPS mode
When applying OpenSCAP security policy profiles, a checkbox is now available to enable FIPS mode. FIPS mode is automatically enabled when you select the DISA STIG profile. You can also manually enable it with other profiles.
Integration with Red Hat Lightspeed Compliance - Preview
Preview mode now enables you to apply a custom security policy defined by Insights Compliance service. This feature is currently available only in Preview.
Build images using Red Hat Lightspeed Content Templates - Preview
Image builder can now build images using content from the Content Templates feature. You can select the Content Template in Repeatable build in the image builder workflow. This feature is currently available only in Preview.
Build images using the community EPEL repositories - Preview
Image builder can now build images using the new community EPEL repositories provided by Red Hat Lightspeed Content. This feature is currently available only in Preview and can be selected from either the Custom repositories or by using Content Templates.
2.3. OpenShift Container Platform Copy linkLink copied to clipboard!
2.3.1. Advisor Copy linkLink copied to clipboard!
Incident detection via MCP External
Incident detection, a Red Hat Lightspeed technology that identifies cluster incidents, was introduced as Technology preview during September 2025. The tool is now available in the MCP server. For more information, see Integrate incident detection with OpenShift Lightspeed via MCP.
Incident detection is also now generally availabile. For more information, see Incident detection overview.