Kamaji

What Kamaji is

Kamaji runs Kubernetes control planes as pods in a management cluster, giving platform teams a way to operate multiple Kubernetes clusters. Each tenant control plane is independent and separated from other tenants. Kamaji uses upstream Kubernetes components and kubeadm, and its tenant clusters are CNCF conformant. Worker nodes can run on bare metal, virtual machines, or cloud instances, while Cluster API integration supports infrastructure provisioning and lifecycle management. Datastore options include etcd and MySQL- or PostgreSQL-compatible databases through kine; NATS support is experimental. Konnectivity, enabled by default, provides secure tunnels between tenant control planes and worker nodes. Kamaji exposes management-plane and tenant control-plane metrics in Prometheus format. By default, manager and kubeconfig-generator metrics endpoints use unauthenticated plaintext, though the documentation describes requiring HTTPS and bearer-token authentication. The software collects usage data about its version and tenant control planes, with an opt-out through deployment settings. Kamaji Open Source is free under Apache 2.0; Clastix also offers subscription-based enterprise support.