loft-sh/vcluster
Vcluster
vcluster is a Kubernetes virtual cluster platform that creates fully isolated Kubernetes environments with dedicated control planes, API servers, and RBAC on shared physical infrastructure. It virtualizes Kubernetes control planes by running them as pods inside a host cluster, as standalone binaries on bare metal or virtual machines, or within Docker containers, providing each tenant their own isolated Kubernetes environment without the overhead of managing separate physical clusters.
The platform enables multi-tenant Kubernetes isolation through multiple tenancy models, from shared node pools for development workloads to dedicated physical nodes for GPU-accelerated and regulated environments. It supports kernel-level workload isolation, hardware-enforced network boundaries, and private node deployments, giving teams the flexibility to choose the appropriate isolation level for their specific security and compliance requirements. Virtual clusters can be provisioned on demand through CI/CD pipelines, self-service portals, or GitOps-driven templates, with automated lifecycle management including hibernation, scaling, and teardown.
Beyond isolation, vcluster provides bidirectional resource synchronization between virtual and host clusters, allowing pods, services, configmaps, and custom resources to be mirrored across environments. It includes cost optimization features such as cluster consolidation, idle cluster auto-sleep, and GPU utilization maximization, enabling organizations to run hundreds of isolated tenant clusters on a single shared infrastructure while reducing operational expenses. The platform integrates with existing CI/CD pipelines and SSO providers, and supports deployment across EKS, GKE, AKS, bare metal, and private cloud environments.
