Skip to content
OpsHero
Book a consultation
Beta

Managed Kubernetes on infrastructure you own

OpsHero Sovereign Cloud is a managed Kubernetes control plane for machines you choose: any provider, your own rack, or a server with no public address. Your workloads and their data stay on them.

Not for you if
  • You are happy for your workloads and data to live on one provider’s machines, on its terms.
  • You would rather run etcd, certificates and upgrades yourself.
  • You are fine with a bill that grows with every node you add.
The OpsHero Portal on its Managed view: two Kubernetes clusters, each with its version, region, API endpoint and a Healthy state, one carrying a Managed AI stack.
The Managed view. Cluster names are demo values.

Your cluster is welded to your provider

  • Managed Kubernetes from a cloud provider comes with that provider’s machines. The day you want cheaper compute, a different jurisdiction or a rack of your own, the cluster does not come with you.
  • Self-managed Kubernetes on your own machines means someone on your team now owns etcd, certificates, upgrades and a control plane that falls over when a noisy workload lands on the same box.
  • A migration between the two is not copying data. It is rebuilding the cluster, its access, its add-ons and everything that assumed the old one.

Create a cluster, join a machine, deploy

Create

Pick a Kubernetes version and a region. A control plane is up quickly, reachable on its own TLS endpoint.

From an empty cluster to a running application

Creating

Joining

A cluster

The catalogue

Deploying

Running

AI models

1 of 7: Pick a version and a region

Creating

Pick a version and a region

The Create New Cluster dialog in the full managed Kubernetes dashboard, with cluster name, Kubernetes version, type, region and platform stack fields.
Creating a cluster: a name, a Kubernetes version, a type and a region.

Standard Kubernetes, with the hard part run for you

Hosted control plane

API server, scheduler and etcd run with us, isolated per cluster, on their own endpoint. Your nodes carry only your workloads.

Bring your own node

Any Ubuntu host with outbound connectivity. No public IP, inbound firewall rule or VPN required.

Observability built-in

The cluster and its workloads are monitored automatically, with built-in alerts.

Storage on join

Optional: unused disks on a new node are formatted and handed to the cluster. Disks in use are never touched.

Application Marketplace

A marketplace of applications in a single registry: versioned, signed and verified, and deployable to any of your clusters.

Standard Kubernetes

Download the kubeconfig and use kubectl, Helm or whatever you use today. Nothing here requires our tooling.

Applications you run, solutions we answer for

Applications

We package it, sign it and keep the chart current. You deploy it and you run it. We tell you when it is unhealthy; we do not go into your cluster to fix it.

Solutions

We deploy it, run it and answer for it. Upgrades, incidents and tuning are ours, under an engagement.

Solutions for AI workloads →

Your machines, your data

Stays yours

The machines

Any provider, any jurisdiction, your own rack. Change them without rebuilding the cluster.

The data

Volumes live on your nodes. Nothing is copied to us.

The access

Standard kubeconfig, standard Kubernetes APIs.

What we hold: the control plane and the platform

This is the part we run. Kubernetes Control Plane, Automation Platform for Application Delivery, AI Gateway, LLM Inference solution, Sandboxes, AI Agents.

The ones people actually ask

Can I leave?

Yes. Your workloads use standard Kubernetes objects and charts. Moving to another Kubernetes means re-pointing them, not rewriting them.

Which operating systems can join?

Any Ubuntu server, 22.04 LTS or later. 26.04 LTS is recommended.

Do my nodes need a public IP?

No. They need outbound access to the control plane endpoint.

What does it cost?

Priced per cluster, by the size of its control plane. No limit on nodes or workloads.

See a cluster come up and a node join, on a call

  • A control plane created live
  • A machine of yours joined, if you bring one
  • What moving an existing workload would take
Book a walkthrough

Where to go next

Sovereign Cloud: Managed Kubernetes on Your Own Machines – OpsHero