I have yet to touch OpenShift 4 - every environment that used OpenShift that I worked with professionally except for some testing runs was air-gapped to some extent from internet, something that is not supported on OpenShift 4, and which was treated as a crucial requirement by the customer deploying OpenShift.

Airgapped is now available in 4.3 (although it has some rough edges that will be addressed in 4.4).

Oh, that's a good news. Just this friday when I first looked into OpenShift install, it looked like it wasn't even in the plans, so I might have hit older docs than I intended.

Makes for higher possibility that $DAYJOB upgrades to OpenShift 4.x, but then, we would rather get rid of our (intra-group) provider and their openshift environments...

The OpenShift 3 way of using Ansible playbooks was bad, and is now gone with OpenShift 4. It's a binary installer that you run. Much easier IMHO.