- Home
- Cloud Governance Software
- Open Cluster Management
Open Cluster Management
What it is
Open Cluster Management is an open-source project for managing Kubernetes applications across multiple clusters and cloud environments. A hub cluster registers managed clusters, while the Work API distributes Kubernetes resources and the Placement API selects clusters for content and behavior. The hub-and-spoke design runs the core control plane on the hub and a klusterlet agent on each managed cluster. Registration needs approval from administrators on both sides and creates an mTLS connection. Policy and configuration controllers can audit or enforce declared policies, with labels supporting consistent access control, quota, and cost management. The application management add-on uses Argo CD for declarative GitOps application lifecycle work. OCM supports cloud, local kind, and on-premises Kubernetes environments, including GKE, EKS, and AKS. Installation requires the hub control plane and agents. It is licensed under Apache 2.0 and is a CNCF sandbox project.
For and against
For
- Open source under Apache License 2.0
- Manages multiple Kubernetes clusters
- Placement API selects destination clusters
- Policy controllers can audit or enforce rules
- Supports GKE, EKS, AKS, kind, and on-premises
Against
- Requires a hub cluster and managed-cluster agents
- Customer-managed control plane
- Installation involves administrator approval on both sides
The verdict
Open Cluster Management provides hub-based control for multicluster Kubernetes resources, policies, and applications. Its architecture and installation model fit teams prepared to operate the required hub and agents.
Who it suits
OCM suits teams operating Kubernetes applications across multiple clusters, cloud providers, or on-premises environments. It is intended for organizations managing policies, placement, and application lifecycle centrally.
On the record
- Application lifecycle
- The built-in application management add-on uses Argo CD for declarative GitOps-based application lifecycle management across multiple Kubernetes clusters.open-cluster-management.io · read 5 Oct 2026
- Architecture
- OCM uses a hub and spoke model, with a klusterlet agent on each managed cluster pulling instructions from the hub.open-cluster-management.io · read 5 Oct 2026
- Argo CD integration
- The Argo CD integration uses OCM Placement to select managed clusters for application deployment.open-cluster-management.io · read 5 Oct 2026
- Cluster inventory
- It registers multiple clusters to a hub cluster for management.open-cluster-management.io · read 5 Oct 2026
- Content placement
- Its Placement API dynamically selects clusters for content and behavior across multiple clusters.open-cluster-management.io · read 5 Oct 2026
- Credential handling
- The work agent pulls resources from its dedicated hub namespace, avoiding the need to store managed cluster credentials on the hub.github.com · read 5 Oct 2026
- Deployment model
- Installation uses a hub cluster running the core control plane and a klusterlet agent on each managed cluster.open-cluster-management.io · read 5 Oct 2026
- EKS support
- The documented EKS hub solution uses AWS IAM roles and supports managed clusters running on EKS.open-cluster-management.io · read 5 Oct 2026
- Getting started
- The quick start sets up one hub and two managed clusters using clusteradm and kind, and asks users to consult separate guides for production or other Kubernetes distributions.open-cluster-management.io · read 5 Oct 2026
- Installation
- Installation involves putting the core control plane on a hub cluster and the klusterlet agent on each managed cluster.open-cluster-management.io · read 5 Oct 2026
- Integrations
- The project lists integrations with Argo CD, Argo Workflows, Cluster API, Clusternet, Fluid, Flower, Helm, Istio, KubeStellar, KubeVela, Kueue, Meshery, OpenTelemetry, RamenDR, and Submariner.open-cluster-management.io · read 5 Oct 2026
- License
- The project is licensed under Apache License 2.0.github.com · read 5 Oct 2026
- Policy and configuration
- Policy and configuration management uses labels to deploy policies and control consistently across resources, and supports access control, quota, and cost management.open-cluster-management.io · read 5 Oct 2026
- Policy management
- Prebuilt security and configuration controllers can audit or enforce declared policies across managed clusters.github.com · read 5 Oct 2026
- Project status
- Open Cluster Management is a Cloud Native Computing Foundation sandbox project.open-cluster-management.io · read 5 Oct 2026
- Purpose
- Open Cluster Management is a community-driven project for multicluster and multicloud scenarios for Kubernetes applications.open-cluster-management.io · read 5 Oct 2026
- Security
- The community welcomes and appreciates responsible disclosure of security vulnerabilities and refers users to its Community Security Response page.open-cluster-management.io · read 5 Oct 2026
- Security reporting
- The community welcomes responsible disclosure of security vulnerabilities.open-cluster-management.io · read 5 Oct 2026
