>   It doesn't? What about https://github.com/freeipa/freeipa-container ?

My understanding is that it is an experimental implementation
currently. FreeIPA does not necessarily work very well broken up into
containers right now.

Yes, and running FreeIPA in a container requires the container to run as root, which is not allowed in our Openshift.