Self-hosted Kubernetes platform for managed service providers. One hardened cluster per tenant, nothing shared.
bedrock turns plain machines into isolated, hardened Kubernetes tenants. Each tenant gets its own cluster on its own nodes, with its own storage, databases, observability, policy and network. Today the tenant layer is built and tested. The layers that create and manage tenants are on the roadmap.
Understand bedrock
Learn how a tenant is built, how its parts fit together and why it is designed that way.
View conceptsTry bedrock
Follow the tutorial to go from three empty machines to a hardened, verified tenant cluster.
View tutorialsRun a tenant
Short guides for the tasks you do after the cluster is up.
View tasksLook something up
Versions, namespaces, network flows, policies and alerts, in tables.
View reference