vcluster

module
v0.35.0-alpha.1 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Apr 28, 2026 License: Apache-2.0

README ยถ

vCluster

Tenant Clusters for Production Kubernetes and AI Infrastructure

Virtual control planes, real isolation โ€” from a single node to 100K-GPU superclusters.

GitHub stars Slack LinkedIn X

Website โ€ข Quickstart โ€ข Documentation โ€ข Blog โ€ข Slack


ย ย ย ย  Kubernetes AI Conformant

CNCF Certified Kubernetes โ€” Distribution ยท Kubernetes AI Conformant (v1.35)


What is vCluster?

vCluster creates Tenant Clusters โ€” fully isolated Kubernetes environments that run on top of a Control Plane Cluster, on dedicated infrastructure, or standalone on bare metal. Each tenant gets its own API server, CRDs, and RBAC, with a cluster experience indistinguishable from a dedicated Kubernetes cluster.

Built for production. Trusted in production. 40M+ Tenant Clusters deployed by teams at Adobe, CoreWeave, NVIDIA, Lintasarta, Atlan, Deloitte, and hundreds of AI clouds, AI factories, and Fortune 500 platform organizations.

CNCF Certified Kubernetes โ€” Distribution and Kubernetes AI Conformant (v1.35) โ€” every Tenant Cluster is upstream Kubernetes with no vendor lockโ€‘in, validated for portable AI/ML workloads (training, inference, agentic).

The public-cloud experience, on your own infrastructure. Give every team the Kubernetes they need โ€” with strict isolation, hardware-aware scheduling, and zero tenant sprawl โ€” whether you run one region or 100K GPUs.


๐Ÿš€ Quick Start

# Install vCluster CLI
brew install loft-sh/tap/vcluster

# Create a Tenant Cluster
vcluster create my-vcluster --namespace team-x

# Use kubectl as usual โ€” you're now in your Tenant Cluster
kubectl get namespaces

Prerequisites: A running Kubernetes cluster and kubectl configured. Or go straight to bare metal with vCluster Standalone.

๐Ÿ‘‰ Full Quickstart Guide

๐Ÿณ Run Locally with Docker โ€” vind

No Kubernetes cluster? Run vCluster directly on Docker with vind (vCluster in Docker) โ€” like kind, but with the full vCluster feature set (UI, sleep/resume, LoadBalancer, image cache):

vcluster create my-vcluster --driver docker
kubectl get namespaces

๐ŸŽฎ Try in the Browser

Try on Killercoda

๐ŸŽ vCluster Free Tier

Real usage, not a gated demo. Unlimited Tenant Clusters up to 64 CPUs / 32 GPUs, Private Nodes, Auto Nodes, Standalone, and the Platform UI โ€” for free. Get Started Free โ†’


๐Ÿ†• What's New

Version Feature Description
v0.33 Enterprise Reliability & Storage Automatic leaf-cert regeneration, Azure Blob snapshot destinations, workload-level sleep annotations
v0.32 Docker Driver & DRA Run vCluster on Docker, Dynamic Resource Allocation (DRA) for GPU workloads, in-place pod resizing
v0.31 Snapshots & Cross-Cluster APIs Expanded snapshot/restore lifecycle, PDBs for Tenant Cluster control planes, cross-cluster resource proxying
v0.30 vCluster VPN & Netris Integration Tailscale-powered overlay networking and automated hardware isolation via Netris
v0.27โ€“v0.29 Architecture Foundations Private Nodes (v0.27, CNI/CSI isolation), Auto Nodes (v0.28, Karpenter autoscaling), Standalone Mode (v0.29, bare metal / no Control Plane Cluster)

๐Ÿ‘‰ Full Changelog


๐ŸŽฏ Use Cases

Use Case Description Learn More
AI Factory Run AI on-prem where your data and GPUs live. Give every team the GPU access they need without multiplying infrastructure. View โ†’
AI Cloud Providers Launch a hyperscaler-like Kubernetes experience for your GPU customers. Isolated, production-grade, in minutes. View โ†’
Internal GPU Platform Maximize GPU utilization without sacrificing isolation. Self-service Kubernetes for AI/ML teams. View โ†’
Bare Metal Kubernetes Run production Kubernetes on bare metal with zero VMs. Isolation without expensive virtualization overhead. View โ†’
Software Vendors Ship Kubernetes-native products. Each customer gets their own isolated Tenant Cluster. View โ†’
Environments & Cost Savings Consolidate clusters, pause idle workloads with sleep mode, and cut Kubernetes cost at scale. View โ†’

๐Ÿ—๏ธ Architectures

vCluster supports multiple deployment architectures. Each builds on the previous, offering progressively stronger isolation โ€” from dense shared infrastructure to fully standalone bare metal.

Architecture Comparison

Shared Nodes Dedicated Nodes Private Nodes Standalone
Control Plane Cluster Required Required Required Not Required
Node Isolation โŒ โœ… โœ… โœ…
CNI/CSI Isolation โŒ โŒ โœ… โœ…
Bare Metal Ready โ€” โ€” โœ… โœ…
Best For Dev/test, density Production tenants Compliance, GPU AI factories, edge

๐Ÿ‘‰ Full Architecture Guide

Minimal Configuration

๐Ÿ”น Shared Nodes โ€” Maximum density, minimum cost Tenant Clusters share the Control Plane Cluster's nodes. Workloads run as regular pods in a namespace.
Shared Nodes Architecture
sync:
  fromHost:
    nodes:
      enabled: false  # Uses pseudo nodes
๐Ÿ”น Dedicated Nodes โ€” Isolated compute on labeled node pools Tenant Clusters get their own set of labeled nodes on the Control Plane Cluster. Workloads are isolated but still managed by the Control Plane Cluster.
Dedicated Nodes Architecture
sync:
  fromHost:
    nodes:
      enabled: true
      selector:
        labels:
          tenant: my-tenant
๐Ÿ”น Private Nodes v0.27+ โ€” Full CNI/CSI isolation External nodes join the Tenant Cluster directly with their own CNI, CSI, and networking stack. Complete workload isolation from the Control Plane Cluster.
Private Nodes Architecture
privateNodes:
  enabled: true
controlPlane:
  service:
    spec:
      type: NodePort
๐Ÿ”น vCluster Standalone v0.29+ โ€” No Control Plane Cluster required Run vCluster without any Control Plane Cluster. Deploy the Virtual Control Plane directly on bare metal or VMs. The highest level of isolation โ€” vCluster becomes the cluster.
Standalone Architecture
controlPlane:
  standalone:
    enabled: true
    joinNode:
      enabled: true
privateNodes:
  enabled: true
โšก Auto Nodes v0.28+ โ€” Karpenter-powered dynamic autoscaling Automatically provision and deprovision private nodes based on workload demand. Works across public cloud, private cloud, hybrid, and bare metal environments.
Auto Nodes Architecture
autoNodes:
  enabled: true
  nodeProvider: <provider>
privateNodes:
  enabled: true

โœจ Key Features

Feature Description
๐ŸŽ›๏ธ Isolated Virtual Control Plane Each Tenant Cluster gets its own API server, controller manager, and data store โ€” complete Kubernetes API isolation
๐Ÿ”— Shared Platform Stack Leverage the Control Plane Cluster's CNI, CSI, ingress, and other infrastructure โ€” no duplicate platform components
๐Ÿ”’ Strong Tenant Isolation Tenants get admin access inside their Tenant Cluster while having minimal permissions on the Control Plane Cluster
๐Ÿ”„ Resource Syncing Bidirectional sync of any Kubernetes resource โ€” pods, services, secrets, configmaps, CRDs, and more
๐Ÿ’ค Sleep Mode Pause inactive Tenant Clusters to save resources. Instant wake when needed
๐Ÿ–ฅ๏ธ Bare Metal & Standalone Run with or without a Control Plane Cluster. Purpose-built for AI factories and on-prem GPU fleets
๐Ÿงฉ Integrations Native support for cert-manager, external-secrets, KubeVirt, Istio, and metrics-server
๐Ÿ“Š High Availability Multiple replicas with leader election. Embedded etcd or external databases (PostgreSQL, MySQL, RDS)

๐ŸŒ The vCluster Platform

vCluster is the foundation of a broader platform for running production Kubernetes and AI infrastructure on your own hardware โ€” from a single rack to 100K-GPU supercomputers.

Product What it does
vCluster Tenant Clusters โ€” Virtual Control Planes with API, data, and (optionally) network isolation
vNode Runtime-level tenant isolation. Kernel-enforced boundaries (seccomp, cgroups, namespaces, AppArmor) without VM overhead
vMetal Zero-touch bare metal provisioning for GPU fleets. Turns GPU racks into a cloud platform
Netris (integration) Hardware-enforced network isolation via programmatic VLANs, VRFs, and ACLs

Together these deliver the four layers of an AI factory: Certified Stacks โ†’ Tenant Isolation โ†’ Tenant Clusters โ†’ GPU Infrastructure Operations โ€” the same pattern used to run production AI on hundreds of GPU clouds and Fortune 500 on-prem platforms.


๐Ÿข Trusted By

Atlan
100 โ†’ 1 clusters
Aussie Broadband
99% faster provisioning
CoreWeave
GPU cloud at scale
Lintasarta
170+ Tenant Clusters in prod
Fortune 500 Insurance
70% reduction in Kubernetes cost
Scanmetrix
99% faster deployments
Deloitte
Enterprise K8s platform
Ada
10x Developer Productivity
Trade Connectors
50% reduction in K8s ops cost

Also used by: NVIDIA, ABBYY, Precisely, Shipwire, and many more โ€” with 50+ GPU clouds and Fortune 500s running vCluster in production.

๐Ÿ‘‰ View All Case Studies


๐Ÿ“š Learn More

๐ŸŽค Conference Talks
Event Speaker Title Link
KubeCon NA 2025 (Keynote) Lukas Gentele Autoscaling GPU Clusters Anywhere โ€” Hyperscalers, Neoclouds & Baremetal Watch
Platform Engineering Day NA 2025 (Keynote) Saiyam Pathak AI-Ready Platforms: Scaling Teams Without Scaling Costs Watch
Rejekts NA 2025 Hrittik Roy, Saiyam Pathak Beyond the Default Scheduler: Navigating GPU MultiTenancy in AI Era Watch
KubeCon EU 2025 Paco Xu, Saiyam Pathak A Huge Cluster or Multi-Clusters? Identifying the Bottleneck Watch
HashiConf 2025 Scott McAllister GPU sharing done right: Secrets, security, and scaling with Vault and vCluster Watch
FOSDEM 2025 Hrittik Roy, Saiyam Pathak Accelerating CI Pipelines: Rapid Kubernetes Testing with vCluster Watch
KubeCon India 2024 (Keynote) Saiyam Pathak From Outage To Observability: Lessons From a Kubernetes Meltdown Watch
CNCF Book Club 2024 Marc Boorshtein Kubernetes - An Enterprise Guide (vCluster) Watch
KCD NYC 2024 Lukas Gentele Tenant Autonomy & Isolation In Multi-Tenant Kubernetes Clusters Watch
KubeCon EU 2023 Ilia Medvedev, Kostis Kapelonis How We Securely Scaled Multi-Tenancy with VCluster, Crossplane, and Argo CD Watch
KubeCon NA 2022 Joseph Sandoval, Dan Garfield How Adobe Planned For Scale With Argo CD, Cluster API, And VCluster Watch
KubeCon NA 2022 Whitney Lee, Mauricio Salatino What a RUSH! Let's Deploy Straight to Production! Watch
TGI Kubernetes 2022 TGI TGI Kubernetes 188: vCluster Watch
Mirantis Tech Talks 2022 Mirantis Multi-tenancy & Isolation using Virtual Clusters (vCluster) in K8s Watch
Solo Webinar 2022 Rich Burroughs, Fabian Keller Speed your Istio development environment with vCluster Watch
KubeCon NA 2021 Lukas Gentele Beyond Namespaces: Virtual Clusters are the Future of Multi-Tenancy Watch
๐ŸŽฌ Community Voice
Channel Speaker Title Link
TeKanAid 2024 TeKanAid Getting Started with vCluster: Build Your IDP with Backstage, Crossplane, and ArgoCD Watch
Rawkode 2021 David McKay, Lukas Gentele Hands on Introduction to vCluster Watch
Kubesimplify 2021 Saiyam Pathak, Lukas Gentele Let's Learn vCluster Watch
TechWorld with Nana 2021 Nana Build your Self-Service Kubernetes Platform with Virtual Clusters Watch
DevOps Toolkit 2021 Viktor Farcic How To Create Virtual Kubernetes Clusters Watch

๐Ÿ‘‰ YouTube Channel โ€ข Blog


๐Ÿค Contributing

We welcome contributions! Check out our Contributing Guide to get started.


Resource Link
๐Ÿ“– Documentation vcluster.com/docs
๐Ÿ’ฌ Slack Community slack.loft.sh
๐ŸŒ Website vcluster.com
๐Ÿฆ X (Twitter) @vcluster
๐Ÿ’ผ LinkedIn vCluster
๐Ÿ’ฌ Chat with Expert Start Chat

๐Ÿ“œ License

vCluster is licensed under the Apache 2.0 License.


ยฉ 2026 Loft Labs. All rights reserved.

Made with โค๏ธ by the vCluster community.

โญ Star us on GitHub โ€” it helps!

Directories ยถ

Path Synopsis
cmd
vcluster command
vclusterctl command
e2e-next
clusters
Package clusters defines shared cluster infrastructure for e2e tests.
Package clusters defines shared cluster infrastructure for e2e tests.
labels
Package labels lists the Ginkgo labels used across the e2e-next suite.
Package labels lists the Ginkgo labels used across the e2e-next suite.
setup/lazyvcluster
Package lazyvcluster wraps e2e-framework's vcluster.Create with YAML template rendering and the shared DefaultVClusterOptions bag.
Package lazyvcluster wraps e2e-framework's vcluster.Create with YAML template rendering and the shared DefaultVClusterOptions bag.
test_core/coredns
Package coredns contains CoreDNS resolution tests.
Package coredns contains CoreDNS resolution tests.
test_core/lifecycle
Package lifecycle contains vCluster CLI lifecycle tests (connect, pause/resume, etc.).
Package lifecycle contains vCluster CLI lifecycle tests (connect, pause/resume, etc.).
test_core/sync
Package sync contains core resource sync tests (pods, PVCs, services, etc.).
Package sync contains core resource sync tests (pods, PVCs, services, etc.).
test_core/sync/fromhost
Package fromhost contains fromHost sync tests.
Package fromhost contains fromHost sync tests.
test_deploy
Package test_deploy contains deployment tests (Helm charts, init manifests).
Package test_deploy contains deployment tests (Helm charts, init manifests).
test_integration/metricsproxy
Package metricsproxy contains metrics proxy integration tests.
Package metricsproxy contains metrics proxy integration tests.
test_integration/plugin
Package plugin contains legacy vCluster plugin tests (v1 and v2).
Package plugin contains legacy vCluster plugin tests (v1 and v2).
test_modes/nodesync
Package nodesync contains all-nodes sync mode tests.
Package nodesync contains all-nodes sync mode tests.
test_modes/scheduler
Package scheduler contains virtual scheduler tests.
Package scheduler contains virtual scheduler tests.
test_security/certs
Package certs contains certificate rotation and expiration tests.
Package certs contains certificate rotation and expiration tests.
test_security/isolation
Package isolation contains isolation mode tests.
Package isolation contains isolation mode tests.
test_security/kubeletproxy
Package kubeletproxy contains kubelet proxy access control tests.
Package kubeletproxy contains kubelet proxy access control tests.
test_security/rootless
Package rootless contains rootless mode tests.
Package rootless contains rootless mode tests.
test_security/webhook
Package webhook contains admission webhook tests.
Package webhook contains admission webhook tests.
test_storage/snapshot
Package snapshot contains snapshot and restore tests.
Package snapshot contains snapshot and restore tests.
hack
assets/cmd command
compat-matrix command
schema command
pkg
cli
k8s
log
pro
util/websocketproxy
Package websocketproxy is a reverse proxy for WebSocket connections.
Package websocketproxy is a reverse proxy for WebSocket connections.
test

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL