Openkube

OpenKube

Run Kubernetes out of every datacenter, from one control plane.

OpenKube: a multi-datacenter Kubernetes control plane. A single hub provisions and operates customer clusters inside partner datacenters — on the servers, storage and networks already racked there.

One hub. Many datacenters. Clusters on demand.

The concept

OpenKube is hub and spoke. The hub holds the catalog, policy, identity and billing, and never holds customer data. Each partner datacenter runs one spoke, installed on a small footprint of existing servers. The spoke is what actually builds clusters — so a site keeps running, and keeps serving its tenants, even when the hub is unreachable.

OpenKube hub-and-spoke architecture A control-plane hub at the top connects over outbound TLS to one spoke in each partner datacenter. Each spoke provisions isolated Kubernetes clusters for its own customers. Control plane Openkube-operated Datacenter Partner-owned Customer clusters Tenant-isolated outbound TLS, no inbound ports OpenKube hub catalog · policy · identity · metering holds no customer workloads or data Spoke — Bengaluru your servers your storage and network Spoke — Mumbai your servers your storage and network Spoke — Hyderabad your servers your storage and network bank saas gov telco retail dev media ai edu Each cluster is conformant upstream Kubernetes. Data, traffic and state stay inside the datacenter that hosts it.
Clusters are built locally by the spoke. If the link to the hub drops, running clusters are unaffected and the site keeps operating.

What OpenKube gives you

Control plane Datacenter Cluster

  • One hub for every site

    A single API, CLI and console covering every datacenter in the fleet. Add a site and it shows up in the same catalog.

  • Catalog and policy

    Define cluster sizes, Kubernetes versions, add-on sets and guardrails once. Every site offers the same menu, with local pricing.

  • Identity and access

    SSO, OIDC and LDAP or Active Directory for operators and tenants, with role-based access down to the individual cluster.

  • Metering and billing data

    Per-tenant usage on cores, memory, storage and clusters, exported to the billing system already in place.

  • A spoke per datacenter

    Installs on a small footprint of existing servers. Provisions bare metal through Redfish and PXE, or virtual machines on the hypervisor already running.

  • Storage that is already there

    CSI drivers front the existing SAN, NAS or software-defined storage, so clusters get persistent volumes without new hardware.

  • Network that is already there

    Works with existing VLANs, IPAM, load balancers and firewalls. No overlay-only assumptions and no redesign of the fabric.

  • Clusters on demand

    A tenant asks for a cluster and gets a conformant one in minutes, isolated from every other tenant on the floor.

  • Day-two handled

    Version upgrades, security patching, certificate rotation, node repair and backup run as managed operations, not as tickets.

  • Observability included

    Metrics, logs and health for the fleet and for each cluster, visible to the operator and, scoped down, to the tenant.