Kamaji
Naples, Italy
What it is
Kamaji runs Kubernetes control planes as pods in a management cluster, helping teams operate multiple tenant clusters. Tenant control planes operate independently and are separated from one another. Kamaji uses upstream Kubernetes components and kubeadm, and its tenant clusters are CNCF conformant. Worker nodes can run on bare metal, virtual machines, or cloud instances. Cluster API integration supports infrastructure provisioning and lifecycle management. Datastore options include etcd and MySQL- or PostgreSQL-compatible databases through kine; NATS support is experimental. Konnectivity, enabled by default, provides secure tunnels between tenant control planes and worker nodes. Kamaji exposes management-plane and tenant control-plane metrics in Prometheus format. By default, the manager and kubeconfig-generator metrics endpoints use plaintext without authentication; documentation describes an option for HTTPS and bearer-token authentication. Kamaji collects usage data about its version and tenant control planes, with an opt-out setting. The open-source plan is free under Apache 2.0. Clastix offers subscription-based enterprise support, including SLA-backed ongoing engineering support and one-off deployment help.
For and against
For
- Tenant control planes are independent and separated.
- Tenant clusters are CNCF conformant.
- Integrates with Cluster API.
- Prometheus-format metrics are available.
- Free under Apache 2.0.
Against
- NATS support is experimental.
- Metrics endpoints use unauthenticated plaintext by default.
- Usage data collection is enabled unless opted out.
The verdict
Kamaji provides a free, open-source approach to operating separated Kubernetes tenant control planes. Teams should account for the default metrics endpoint security settings and usage-data opt-out.
Who it suits
Kamaji is intended for platform engineering and managed-service teams running Kubernetes clusters at scale, especially in multi-tenant environments. It can fit deployments spanning cloud, data centers, edge, or bare metal.
Plans and prices
Kamaji Open Source
Free to use under Apache 2.0
Read 3 Oct 2026 · clastix.io
On the record
- Cluster API
- Kamaji integrates with Cluster API for infrastructure provisioning and lifecycle management.kamaji.clastix.io · read 3 Oct 2026
- Datastores
- Supported datastore options include etcd and MySQL- or PostgreSQL-compatible databases through kine; NATS support is experimental.kamaji.clastix.io · read 3 Oct 2026
- Infrastructure
- Worker nodes can run on bare metal, virtual machines, or cloud instances.kamaji.clastix.io · read 3 Oct 2026
- Intended users
- The product is described for platform engineering, managed services, and multi-tenant environments that need Kubernetes clusters at scale.kamaji.clastix.io · read 3 Oct 2026
- Kubernetes compatibility
- Kamaji uses upstream Kubernetes components and kubeadm, and its tenant clusters are CNCF conformant.kamaji.clastix.io · read 3 Oct 2026
- Metrics security
- By default, the manager and kubeconfig-generator metrics endpoints use plaintext without authentication; the documentation describes an option to require HTTPS and bearer-token authentication.kamaji.clastix.io · read 3 Oct 2026
- Monitoring
- Kamaji exposes management-plane and tenant control-plane metrics in Prometheus format.kamaji.clastix.io · read 3 Oct 2026
- Multi-tenancy
- Each tenant control plane operates independently, with separation between tenants.kamaji.clastix.io · read 3 Oct 2026
- Networking
- Kamaji integrates Konnectivity to provide secure tunnels between tenant control planes and worker nodes, and it is enabled by default.kamaji.clastix.io · read 3 Oct 2026
- Purpose
- Kamaji runs Kubernetes control planes as pods in a management cluster to simplify operating multiple Kubernetes clusters.kamaji.clastix.io · read 3 Oct 2026
- Support
- Clastix offers subscription-based enterprise support plans for Kamaji.kamaji.clastix.io · read 3 Oct 2026
- Support options
- Clastix Care includes SLA response times and ongoing engineering support, while Clastix Ready offers one-off deployment assistance.clastix.io · read 3 Oct 2026
- Telemetry
- Kamaji collects usage data about its version and tenant control planes, and users can opt out through deployment settings.kamaji.clastix.io · read 3 Oct 2026
