Kubermatic Virtualization for Kubermatic Kubernetes Platform Workloads
Overview
Run your own containerized applications on KKP, on top of Kubermatic Virtualization (KubeV), in production. We build and harden KubeV on your hosts, deploy KKP on it with user clusters on VM worker nodes, and add a tenancy model, cluster templates, observability, alerting, backup with a tested restore, and a full upgrade cycle. One of your applications is onboarded with platform-side support.
Goal
A production KKP-on-KubeV platform your team operates independently, with your first application running and a repeatable path for onboarding the next.
Who it is for
Platform teams that have chosen KKP on KubeV, or completed a Proof of Value, and need to offer Kubernetes as an internal service to multiple teams.
Content
- 01
Design validation and sizing
Topology, sizing, KKP subnet layout and go-live criteria.
- 02
Platform installation
Production KubeV with etcd quorum across failure domains.
- 03
Networking, isolation and storage
VPC, subnets, IPAM, VLANs and live-migration-ready storage.
- 04
KKP deployment
HA KubeOne cluster on VMs and KKP with your identity provider.
- 05
User clusters on VMs
KubeV as a KKP provider, tenancy model and cluster templates.
- 06
Application onboarding
Your reference application, with telemetry and CI/CD hand-off.
- 07
Hardening, backup and restore
Production checklist, backups, restore test and alerting.
- 08
Lifecycle validation
Platform and user cluster upgrades with your application running.
- 09
Operational readiness
Documentation, enablement and go-live review.
Typical Activities
- Sizing and hardware bill of materials from the KubeV Sizing Tool
- Network policy so the only path between user clusters and management is the one KKP needs
- Tenancy model: projects, RBAC, credentials, quotas and offboarding
- Cluster templates for the flavours your application teams can request
- Production hardening against Kubermatic's production checklist
- Backup of platform state and VM volumes, with a timed restore test
- Platform-side onboarding of your application: namespaces, storage, service publication, secrets, registry
- Cluster create/delete campaign to prove stability and clean teardown
Deliverables
| Area | What you receive |
|---|---|
| Design and sizing | Topology, sizing record, hardware bill of materials, frozen go-live criteria |
| Platform | Hardened, HA KubeV installation with Git-managed configuration |
| Networking and storage | Configured networks and isolation, live-migration-ready storage, as-built docs |
| KKP and user clusters | KKP on KubeV, user clusters on VM workers, tenancy model, cluster templates |
| Application onboarding | Your application running on the platform, repeatable onboarding path |
| Backup and upgrade | Backup configuration, documented restore test, documented upgrade cycle |
| Operations | Operations documentation, enablement, signed go-live readiness review |
Prerequisites
- Hypervisor hosts racked and powered, with VT-x or AMD-V enabled
- Host OS installed (Ubuntu LTS or agreed alternative)
- Storage backend with ReadWriteMany Block volume mode, plus a backup target
- VLANs trunked to every host, LACP/MLAG and out-of-band management
- IP addressing and firewall rules in place
- VPN or jump host access and a shared Git repository
- Identity provider reachable from the management subnet
- Reference application selected, owner named, images in a reachable registry
- KubeV and KKP production subscriptions
Why this Accelerator?
- Production-grade from metal to Kubernetes, in one engagement.
- Proven on your own application, not just a demo.
- Multi-tenant from day one: tenancy, quotas and templates ready for your teams.
- Day-2 proven up front: restore, upgrades and teardown tested before go-live.
- Your team owns it, with the docs and skills to run and grow the platform.
What's not included
Your application code and behaviour, onboarding beyond one application, VM migration from other hypervisors, 24/7 operations, multi-site rollout, physical infrastructure and fabric routing. KubeV and KKP subscriptions are contracted separately.
Optional extensions
Additional application onboarding, VM migration onto KubeV, multi-region rollout, KubeLB, GPU or SR-IOV, and managed 24/7 operations.