The Open Source
Sovereign Cloud Stack
A CNCF-native reference architecture built entirely on open source projects. From bare metal to multi-tenant cloud — no proprietary components, no vendor lock-in.
Built on CNCF & Open Source
Every component in the stack is open source with community governance. No BSL, no SSPL, no CLA traps. You own your stack.
CNCF Projects
Open Source Ecosystem
All core components are licensed under Apache 2.0 or equivalent OSI-approved licenses. No proprietary dependencies required at any layer.
Three Layers, One Stack
Composable by design. Start with what you need, add the rest when you're ready. Each layer is independently adoptable.
Infrastructure
From bare metal to compute-ready Kubernetes
Automated bare-metal provisioning, networking, storage, GPU, and VM support on commodity hardware. Everything you need to turn servers into a cloud-ready compute platform.
Platform
Multi-tenant cloud APIs via kcp
Tenants get isolated workspaces with high-level cloud APIs. They create VMs, notebooks, and storage — never seeing pods, nodes, or clusters. The platform controls the abstraction.
Production
Billing, monitoring, and day-2 operations
Everything needed to run the platform as a production service — usage metering, identity management, observability, backup, and TLS automation.
Why Sovereign Stack?
100% Open Source
Every layer, every component. No proprietary dependencies. Fork it, modify it, own it. All Apache 2.0 or OSI-approved licenses.
CNCF-Native
Built on the same graduated and incubating projects that power production Kubernetes at scale. Battle-tested, community-governed.
EU Digital Sovereignty
Run on your hardware, in your jurisdiction. No US hyperscaler dependency. Full control over your data and infrastructure.
Composable Architecture
Start with 5 core components, add the rest when ready. Each layer is independently adoptable. No all-or-nothing decisions.
Get Started in 2 Hours
From zero to a working multi-tenant cloud platform.
Get 3 Linux servers (bare metal, VMs, or cloud instances)
Install Kubernetes via kubeadm or k3s
Deploy Cilium for networking and tenant isolation
Install kcp as the multi-tenant control plane
Deploy the cloud operator
Create your first tenant workspace
Apply a Compute resource and see it running
$ kubectl get computes
NAME STATUS URL AGE
my-app Ready https://my-app.jane.cloud.example.com 1m
$ kubectl get virtualmachines
NAME CORES MEMORY STATUS SSH AGE
dev-box 4 16Gi Running ssh://dev-box:22 3mBuilt by Engineers, for Engineers
Sovereign Stack is a community-driven project by EU engineers passionate about open infrastructure and AI sovereignty. Every contribution matters — from documentation to new platform APIs.