[{"_1":2,"_188":-5,"_189":-5},"loaderData",{"_3":4,"_17":18,"_25":26,"_175":176},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7,"_13":14,"_15":16},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","theme","system","contrast","normal","routes/_layout",{"_19":-5,"_20":21,"_22":21,"_23":11,"_24":21},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.layers.$namespace.$reponame.$tag.(images).($imageUrlDigest)",{"_27":28,"_29":30,"_83":84,"_109":-7,"_110":-7,"_111":-7,"_112":-7,"_113":-5,"_114":-5,"_115":11,"_116":11,"_77":117,"_166":21,"_136":137,"_167":135,"_168":76,"_35":46,"_169":11,"_170":21,"_171":48,"_172":-5,"_173":11,"_174":11},"scanningType","none","tagData",{"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_67":68,"_69":70,"_71":72,"_73":74,"_75":76,"_77":78,"_79":50,"_80":68,"_81":59,"_82":21},"content_type","image","creator",8935764,"digest","sha256:bb4bd5e1d9eb29a1a5a1045a6ad5f6898314d8fef4bb8f3a6cee200a901c0449","full_size",50429981,"id",278332431,"images",[43,61],{"_44":45,"_35":46,"_47":48,"_49":50,"_51":52,"_53":54,"_55":48,"_56":-5,"_57":38,"_58":59,"_60":-5},"architecture","amd64","sha256:073436d4323bbb4f8fc1d7d93594baac4477ab84ed32290768b8a70c0d3bfcd6","features","","last_pulled","2026-10-08T03:42:16.573966288Z","last_pushed","2026-10-05T07:12:46.471969331Z","os","linux","os_features","os_version","size","status","active","variant",{"_44":62,"_35":63,"_47":48,"_49":64,"_51":65,"_53":54,"_55":48,"_56":-5,"_57":66,"_58":59,"_60":-5},"arm64","sha256:b88282f047a48b4d4c9f5e95c19a447484a0075ad4b21a056220c6b90f30783a","2026-10-08T00:52:26.818144168Z","2026-10-05T07:12:46.070689455Z",46074437,"last_updated","2026-10-05T07:12:47.102665Z","last_updater",987377,"last_updater_username","prometherion","media_type","application/vnd.oci.image.index.v1+json","name","latest","repository",17196844,"tag_last_pulled","tag_last_pushed","tag_status","v2","tagImages",[85,100],{"_44":45,"_35":46,"_47":48,"_49":50,"_51":52,"_86":87,"_53":54,"_55":48,"_56":-5,"_57":38,"_58":59,"_60":-5},"layers",[88,93,97],{"_35":89,"_57":90,"_91":92},"sha256:bb8fa58ec978821768266f0c728f5deffbceba0afcd8f819e906150f6ff268f1",607648,"instruction","apko",{"_35":94,"_57":95,"_91":96},"sha256:250c06f7c38e52dc77e5c7586c3e40280dc7ff9bb9007c396e06d96736cf8542",127,"ko build ko://github.com/clastix/kamaji",{"_35":98,"_57":99,"_91":96},"sha256:fe41f758ddc896af7c2acb73b24e2383cb12c46b579bdf80df351e8d10deb968",49822206,{"_44":62,"_35":63,"_47":48,"_49":64,"_51":65,"_86":101,"_53":54,"_55":48,"_56":-5,"_57":66,"_58":59,"_60":-5},[102,105,106],{"_35":103,"_57":104,"_91":92},"sha256:e6e34819883728aceb6bec47d0a54399d36ff80d7dd79e1a1445bb3eafeb02e1",607652,{"_35":94,"_57":95,"_91":96},{"_35":107,"_57":108,"_91":96},"sha256:55636e2c6535de4c954c9275469f39e1cc38b0f229b303b6259e3979fe3a8407",45466658,"layerOrdinals","packageName","cveId","sbom","scoutSummary","staticSummary","isScoutPaymentRequired","canSeeVulnerabilities",{"_118":119,"_120":121,"_122":123,"_124":125,"_126":11,"_67":127,"_128":129,"_130":131,"_75":135,"_136":137,"_138":139,"_140":32,"_141":142,"_58":143,"_144":59,"_145":-5,"_146":142,"_147":148,"_149":11,"_150":72,"_151":152,"_157":11,"_158":159,"_163":137,"_164":165},"categories",[],"content_types",[32],"date_registered","2022-05-23T10:04:05.085978Z","description","Build and operate Kubernetes at scale with a fraction of operational burden","is_private","2026-10-05T15:48:17.198332Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[132,133,134,74],"application/vnd.docker.container.image.v1+json","application/vnd.docker.distribution.manifest.list.v2+json","application/vnd.oci.image.config.v1+json","kamaji","namespace","clastix","pull_count",639362,"repository_type","star_count",0,1,"status_description","source","collaborator_count","full_description","# Kamaji\n\n

\n \n \n \n \n $\"#kamaji$ \n

\n\n![Logo](assets/logo-black.png#gh-light-mode-only)\n![Logo](assets/logo-white.png#gh-dark-mode-only)\n\n### 🤔 What is Kamaji?\n\n**Kamaji** is a **Kubernetes Control Plane Manager** leveraging on the concept of [**Hosted Control Plane**](https://clastix.io/post/the-raise-of-hosted-control-plane-in-kubernetes/).\n\nKamaji's approach is based on running the Kubernetes Control Plane components in Pods instead of dedicated machines.\nThis allows operating Kubernetes clusters at scale, with a fraction of the operational burden.\nThanks to this approach, running multiple Control Planes can be cheaper and easier to deploy and operate.\n\n_Kamaji is like a fleet of Site Reliability Engineers with expertise codified into its logic, working 24/7 to keep up and running your Control Planes._\n\n

\n\n### 📖 How it works\n\nKamaji is extending the Kubernetes API capabilities thanks to [Custom Resource Definitions](https://kubernetes.io/docs/concepts/extend-kubernetes/api-extension/custom-resources/#customresourcedefinitions).\n\nBy installing Kamaji, two pairs of new APIs will be available:\n\n- `TenantControlPlane`, the instance definition of your desired Kubernetes Control Plane\n- `Datastore`, the backing store used by one (or more) `TenantControlPlane`\n\nThe `TenantControlPlane` (short-named as `tcp`) objects are Namespace-scoped and allows configuring every aspect of your desired Control Plane.\nBesides the Kubernetes configuration values, you can specify the Pod options such as limit, request, tolerations, node selector, etc.,\nas well as how these should be exposed (e.g.: using a `ClusterIP`, a `LoadBalancer`, or a `NodePort`).\n\nThe `TenantControlPlane` is the stateless definition of the Control Plane allowing to set up the required components for a full-fledged Kubernetest cluster.\nThe state is managed by the `Datastore` API, a cluster-scoped resource which can hold the data of one or more Kubernetes clusters.\n\n> For further information about the API specifications and all the available options,\n> refer to the official [API reference](https://kamaji.clastix.io/reference/api/#tenantcontrolplane).\n\n### ⭐️ Main features\n\n- **Fast provisioning time**: depending on the infrastructure, Tenant Control Planes are up and ready to serve traffic in **16 seconds**.\n- **Streamlined update**: the rollout to a new Kubernetes version for a given Tenant Control Plane takes just **10 seconds**, with a Blue/Green deployment to avoid serving mixed Kubernetes versions.\n- **Resource optimization**: thanks to the Datastore decoupling, there's no need of odd number instances (e.g.: RAFT consensus) by allowing to save up to 60% of HW resources.\n- **Scale from zero to the moon**: scale down the instance when there's no usage, or automatically scale to support the traffic spikes reusing the Kubernetes patterns.\n- **Declarative approach, constant reconciliation**: thanks to the Operator pattern, drift detection happens in real-time, maintaining the desired state.\n- **Automated certificates management**: Kamaji leverages on `kubeadm` and the certificates are automatically created and rotated for you.\n- **Managing core addons**: Kamaji allows configuring automatically `kube-proxy`, `CoreDNS`, and `konnectivity`, with automatic remediation in case of user errors (e.g.: deleting the `CoreDNS` deployment).\n- **Auto Healing**: the `TenantControlPlane` objects in the management cluster are tracked by Kamaji, in case of deletion of those, everything is created in an idempotent way.\n- **Datastore multi-tenancy**: optionally, Kamaji allows running multiple Control Planes on the same _Datastore_ instance leveraging on the multi-tenancy of each driver, decreasing operations and optimizing costs.\n- **Overcoming `etcd` limitations**: optionally, Kamaji allows using a different _Datastore_ thanks to [`kine`](https://github.com/k3s-io/kine) by supporting `MySQL`, `PostgreSQL`, or `NATS` as an alternative.\n- **Simplifying mixed-networks setup**: thanks to [`Konnectivity`](https://kubernetes.io/docs/tasks/extend-kubernetes/setup-konnectivity/),\n the Tenant Control Plane is connected to the worker nodes hosted in a different network, overcoming the no-NAT availability when dealing with nodes with a non routable IP address\n (e.g.: worker nodes in a different infrastructure).\n\n### 🚀 Use cases\n\n- [**Creating a private Managed Kubernetes Service**](https://clastix.io/post/netsons-builds-a-managed-kubernetes-service-with-kamaji-and-open-stack/)\n- [**Building a Platform as a Service**](https://aenix.io/cozystack/)\n- [**Overcoming public Managed Kubernetes Services**](https://clastix.io/post/overcoming-eks-limitations-with-kamaji-on-aws/) such as EKS\n- [**Hybrid infrastructures**](https://clastix.io/post/bridging-the-gap-hybrid-kubernetes-clusters-with-remote-control-planes/):\n host the Control Plane on the Cloud and worker nodes on prem or vice-versa, according to your needs.\n- [**Kubernetes at the edge**](https://clastix.io/post/edgevolution-unleashing-the-power-of-kubernetes-clusters-for-a-revolutionary-edge-computing-experience/):\n take full advantage of the _Kubernetes API Server as a service_ paradigm.\n- **Kubernetes Control Plane as a Service:** centrally manage multiple Kubernetes clusters from a single management point (_Multi-Cluster management_). \n- **High-density Control Plane:** place multiple control planes on the same infrastructure, instead of having dedicated machines for each control plane.\n- **Strong Multi-tenancy:** leave users to access the control plane with admin permissions while keeping them isolated at the infrastructure level.\n- **Kubernetes Inception:** use Kubernetes to manage Kubernetes with automation, high-availability, fault tolerance, and autoscaling out of the box. \n- **Bring Your Own Device:** keep the control plane isolated from data plane. Worker nodes can join and run consistently from everywhere: cloud, edge, and data-center.\n- **Full CNCF compliant:** all clusters are built with upstream Kubernetes binaries, resulting in full CNCF compliant Kubernetes clusters.\n\n> 🤔 You'd like to do the same but don't know how?\n> 💡 [CLASTIX](https://clastix.io/) can help you with your needs!\n\n### 🧑‍💻‍ Production grade\n\nKamaji is empowering several businesses, and it counts public adopters.\nCheck out the [adopters](./ADOPTERS.md) file to learn more.\n\n> 🤗 If you're using Kamaji, share your love by opening a PR!\n\n### 🍦 Vanilla Kubernetes clusters\n\nKamaji is **not** yet-another-Kubernetes distribution: you have full freedom on the technology stack to provide to end users.\nKamaji is a perfect fit for Platform Engineering, hiding the complexity of the Control Plane management to developers and DevOps engineers.\n\nThe provided Kubernetes Control Planes are [CNCF compliant clusters](https://kamaji.clastix.io/reference/conformance/).\n\n

\n\n### 🐢 Cluster API support\n\nKamaji is **not** a [Cluster API](https://cluster-api.sigs.k8s.io/) replacement, rather, it plays very well with it.\n\nSince Kamaji is just focusing on the Control Plane a [Kamaji's Cluster API Control Plane provider](https://github.com/clastix/cluster-api-control-plane-provider-kamaji) has been developed.\n\n### 🛣️ Roadmap\n\n- [x] Dynamic address on Load Balancer\n- [x] Zero Downtime Tenant Control Plane upgrade\n- [x] [Join worker nodes from anywhere thanks to Konnectivity](https://kamaji.clastix.io/concepts/#konnectivity)\n- [x] [Alternative datastore MySQL, PostgreSQL, NATS](https://kamaji.clastix.io/guides/alternative-datastore/)\n- [x] [Pool of multiple datastores](https://kamaji.clastix.io/concepts/#datastores)\n- [x] [Seamless migration between datastores](https://kamaji.clastix.io/guides/datastore-migration/)\n- [ ] Automatic assignment to a datastore\n- [ ] Autoscaling of Tenant Control Plane\n- [x] [Provisioning through Cluster APIs](https://github.com/clastix/cluster-api-control-plane-provider-kamaji)\n- [ ] Terraform provider\n- [ ] Custom Prometheus metrics\n\n### 🎥 Multimedia\n\n- Playlist ▶️ [Tutorials and How-Tos by Dario Tranchitella, CLASTIX](https://www.youtube.com/playlist?list=PLjiUjoV4Ws_3pNsUpTXI-KKk731nD2MQY)\n- YouTube ▶️ [Metal³ provisioning with Kamaji Hosted Control Planes by Huy Mai, Ericsson](https://youtu.be/u9sbURj6jXY?t=10536)\n- YouTube ▶️ [Hands-on introduction to Kamaji](https://www.youtube.com/watch?v=HhevxwQWQ88)\n- YouTube ▶️ [Scaling Kubernetes up to 1,000 Control Planes](https://www.youtube.com/watch?v=W_HXRXJh96U)\n- YouTube ▶️ [Equinix, Kamaji, and Cluster API](https://www.youtube.com/watch?v=TLBTqROj_wA)\n- YouTube ▶️ [Rancher & Kamaji: solving multitenancy challenges in the Kubernetes world](https://www.youtube.com/watch?v=VXHNrMmlF8U)\n- YouTube ▶️ [Enabling Self-Service Kubernetes clusters with Kamaji and Paralus](https://www.youtube.com/watch?v=JWA2LwZazM0)\n- YouTube ▶️ [Hosted Control Plane on Kubernetes (HPC) with Kamaji and K0mostron by Hervé Leclerc, ALTER WAY](https://www.youtube.com/watch?v=vmRdE2ngn78)\n\n### 🏷️ Versioning\n\nVersioning adheres to the [Semantic Versioning](http://semver.org/) principles.\nA full list of the available releases is available in the GitHub repository's [**Release** section](https://github.com/clastix/kamaji/releases).\n\n### 📄 Documentation\n\nFurther documentation can be found on the official [Kamaji documentation website](https://kamaji.clastix.io/).\n\n### 🤝 Contributions\n\nContributions are highly appreciated and very welcomed!\n\nIn case of bugs, please, check if the issue has been already opened by checking the [GitHub Issues](https://github.com/clastix/kamaji/issues) section.\nIn case it isn't, you can open a new one: a detailed report will help us to replicate it, assess it, and work on a fix.\n\nYou can express your intention in working on the fix on your own.\nThe commit messages are checked according to the described [semantics](https://github.com/projectcapsule/capsule/blob/main/CONTRIBUTING.md#semantics).\nCommits are used to generate the changelog, and their author will be referenced in it.\n\nIn case of **✨ Feature Requests** please use the [Discussion's Feature Request section](https://github.com/clastix/kamaji/discussions/categories/feature-requests).\n\n### 📝 License\n\nThe Kamaji Cluster API Control Plane provider is licensed under Apache 2.0.\nThe code is provided as-is with no warranties.\n\n### 🛟 Commercial Support\n\n![CLASTIX](https://avatars.githubusercontent.com/u/39170129?s=50&v=4) [CLASTIX](https://clastix.io/) is the commercial company behind Kamaji and the Cluster API Control Plane provider.\n\nIf you're looking to run Kamaji in production and would like to learn more, **CLASTIX** can help by offering [Open Source support plans](https://clastix.io/support),\nas well as providing a comprehensive Enterprise Platform named [CLASTIX Enterprise Platform](https://clastix.cloud/), built on top of the Kamaji and [Capsule](https://capsule.clastix.io/) project (now donated to CNCF as a Sandbox project).\n\nFeel free to get in touch with the provided [Contact form](https://clastix.io/contact).\n","has_starred","hub_user","immutable_tags_settings",{"_153":11,"_154":155},"enabled","rules",[156],".*","is_automated","permissions",{"_160":21,"_161":11,"_162":11},"read","write","admin","user","storage_size",59339322866,"isOrg","reponame","tag","canDeleteTags","isHubSbxKitsEnabled","currentTab","tagAttestations","displaySecurityMetadata","showSbxLogoOverride","routes/_layout.layers.$namespace.$reponame.$tag.(images).($imageUrlDigest)._index",{"_27":28,"_111":-7,"_109":-7,"_110":-7,"_29":177,"_35":46,"_181":182,"_187":11},{"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":178,"_67":68,"_69":70,"_71":72,"_73":74,"_75":76,"_77":78,"_79":50,"_80":68,"_81":59,"_82":21},[179,180],{"_44":45,"_35":46,"_47":48,"_49":50,"_51":52,"_53":54,"_55":48,"_56":-5,"_57":38,"_58":59,"_60":-5},{"_44":62,"_35":63,"_47":48,"_49":64,"_51":65,"_53":54,"_55":48,"_56":-5,"_57":66,"_58":59,"_60":-5},"imageWithLayers",{"_44":45,"_35":46,"_47":48,"_49":50,"_51":52,"_86":183,"_53":54,"_55":48,"_56":-5,"_57":38,"_58":59,"_60":-5},[184,185,186],{"_35":89,"_57":90,"_91":92},{"_35":94,"_57":95,"_91":96},{"_35":98,"_57":99,"_91":96},"hasPermissionToViewRepoSettings","actionData","errors"]

clastix/kamaji:latest