Data center infrastructure
☁️ The KaaS SaaS platform for hosters & resellers

Offer Kubernetes as a Service
on your own infrastructure

Cluster Fabrik is the SaaS platform that lets hosters and resellers provision full-stack Kubernetes clusters on their own hypervisor infrastructure — with built-in multi-tenancy, white-label branding, shared or dedicated ingress IPs, and WHMCS billing.

⚡ Running cluster in minutes, no DevOps PhD
🏢 Multi-tenant, white-label & WHMCS-ready
🌍 Shared or dedicated ingress IPs per cluster
🛡️ Per-cluster firewall & auto ingress
🔌 Connect Virtualizor or Harvester
🔒 EU-based SaaS — GDPR compliant
Works with
🖥️ Virtualizor
🔧 Proxmox · soon
🌾 Harvester · on request
+ more in progress
Connect your existing hypervisor backend to the Cluster Fabrik SaaS platform and start offering KaaS to your customers.
One request. Full cluster.
Zero babysitting.

Submit a cluster request and walk away. The async job engine handles every step, retries failures, and gives you a full audit trail.

📋
1
Configure
Pick your cluster size, Kubernetes flavour, and target infrastructure — one form, seconds
🖥️
2
Connect
Nodes are created on your infrastructure automatically — no manual setup required
⚙️
3
Provision
Kubernetes is deployed and fully configured across all nodes without you lifting a finger
🌐
4
Activate
Your cluster is registered, ingress is live, and everything is production-ready
✅
5
Deploy
Your kubeconfig is ready. Start shipping. Your team is notified automatically.
Data center server racks with blue LED lighting
⚡ Provisioning & Automation
From request to running cluster — automatically

Whether you're running 5 clusters or 500, Cluster Fabrik automates the entire lifecycle so your team focuses on infrastructure strategy, not repetitive VM setup.

⚡

Async Job Engine

Every cluster request runs automatically in the background — VM creation, Kubernetes install, Rancher registration — with full retry logic. No babysitting required.

🔌

Multi-provider Abstraction

Connect Virtualizor or Harvester (on request), with Proxmox coming soon. The platform handles each provider the same way — add a new backend without changing anything else.

📋

Full Audit Trail

Every job step is recorded with timestamps, status, and error details. Know exactly what happened at VM creation, SSH bootstrap, and Rancher registration.

🔒

Encrypted at Rest

Provider credentials and kubeconfigs are AES-encrypted in the database. SSH keys never leave the worker. No plaintext secrets, ever.

🔌

RKE2 & K3s Support

Choose the Kubernetes distribution that fits your workload: RKE2 (Rancher Kubernetes Engine v2, hardened production-grade) or K3s (lightweight Kubernetes, low-resource). Both are CNCF-certified and work with all standard tooling.

Team collaborating on infrastructure dashboards
🏢 Multi-Tenancy & Reseller Tools
Your brand. Your pricing. Full customer isolation.

Create customer organisations, set pricing tiers, and let your clients spin up clusters — all under your own brand, fully isolated, integrated with WHMCS.

🏗️

Multi-tenant by Design

Every reseller gets an isolated organisation in Keycloak. Customers only see their own clusters. No cross-tenant data leakage — ever.

💰

Reseller-Owned Node Plans

Define custom VM plans (CPU, RAM, disk, OS) per organisation. Set your own pricing. Customers only see the plans you've assigned to them.

🔗

WHMCS Integration

A thin PHP module connects WHMCS to the Cluster Fabrik API. Provisioning, suspension, termination — all triggered automatically from your billing system.

🎨

White-label Ready

Your domain, your branding, your terms. Cluster Fabrik is the engine — your customers see your product.

🖥️

Self-Service Portal

Your customers provision and manage their own clusters without involving your team.

🛡️ Security & Networking
Enterprise-grade networking.
Configured automatically.

Every cluster gets public IPs, a firewall and automatic ingress with its own HTTPS hostname. No manual network setup.

🌍

Shared or Dedicated Ingress IPs

Route clusters through a shared HA load balancer by hostname, or give a cluster its own ingress IP from your IP pool. Every node gets a public IPv4.

🛡️

Per-Cluster Firewall

Firewall rules are applied automatically to every cluster. Only the ports and protocols you need are exposed — everything else is blocked by default.

🌐

Automatic Ingress & HA Load Balancing

Ingress is deployed and configured as part of provisioning. Traffic is routed automatically with high-availability load balancing — no nginx config files to maintain.

🔗

HTTPS Hostname per Cluster

Each cluster gets a hostname under your base domain with an automatic Let's Encrypt certificate via cert-manager. Custom customer domains are coming soon.

💾

etcd Snapshots

RKE2 snapshots cluster state every 12 hours on the control-plane node. Workload backups are coming soon.

🌐 Internet
🌍 Public IPv4
🛡️ Firewall
⚡ HA Ingress (auto-deployed)
Cluster Nodes
Node 1
Node 2
Node 3
🔗 cluster-id.your-domain → auto TLS via cert-manager
DevOps engineer at terminal setup
🛠️ Management & Operations
Full cluster lifecycle. No operational toil.

Cluster Fabrik handles the entire cluster lifecycle — from provisioning through upgrades, scaling, and decommission — so your team stays focused on shipping, not maintenance.

🐄

Rancher Integration

Clusters are automatically imported into Rancher on completion. Manage workloads, RBAC, and monitoring from day one.

🔑

kubeconfig on Demand

Download your kubeconfig the moment your cluster is ready. Rotate credentials on demand.

☸️

Cluster Lifecycle

Scale, upgrade, and delete clusters from the platform. No manual node management.

💾

etcd Snapshots

Cluster state is snapshotted automatically by RKE2. Workload backups are coming soon.

✅

CNCF-Conformant

Use any standard Kubernetes tooling — Helm, kubectl, ArgoCD, Lens — without lock-in.

Built to connect with your stack
🔌

Multi-Provider Abstraction

Switch between Virtualizor and Harvester without changing your workflow. One API, any backend.

🔗

REST API

Automate everything. The platform exposes a full REST API for cluster provisioning, management, and billing integration.

🔐

Enterprise Auth

Keycloak 26 OIDC/PKCE authentication. SSO, per-tenant isolation, and RBAC — configured and ready.

📋

Full Audit Log

Every action is logged with timestamps, user, and outcome. Compliance and debugging made easy.

DevOps engineer at terminal setup
👩‍💻 For DevOps Engineers
Production-grade clusters. CNCF-conformant. Yours in minutes.

RKE2 or K3s, Rancher-registered, with HA ingress. No YAML marathons, no cloud vendor lock-in.

☸️

RKE2 & K3s — CNCF Conformant

Choose RKE2 for hardened production workloads or K3s for lightweight edge. Both CNCF-certified — standard kubectl, no proprietary APIs.

🌐

HA Ingress — Auto-Deployed

Ingress controller deployed and configured automatically. High-availability load balancing with no manual setup.

🔑

Instant kubeconfig

kubeconfig is available the moment your cluster is ready. Download and start deploying immediately.

🐄

Rancher Integration

Clusters are automatically registered in Rancher. Full workload management, monitoring, and RBAC from day one.

💾

etcd Snapshots

Cluster state is snapshotted automatically by RKE2. Workload backups are coming soon.

Built on solid open-source foundations

No black boxes. No proprietary formats. Every layer is inspectable and replaceable, and your clusters run on your own infrastructure.

⚡

Scales with your workload

Run as many platform instances as you need — no bottlenecks, no extra infrastructure to manage as you grow.

🛡️

Zero lost jobs

Every provisioning task is reliable and resumable. No duplicates, no silent failures — even if a server restarts mid-operation.

🔐

Enterprise auth, day one

Single sign-on, role-based access, and per-reseller user isolation — fully configured and ready without any custom auth code.

🔧

Works with your entire stack

Your clusters work with every Kubernetes tool you already use — Helm, kubectl, Lens, ArgoCD. No proprietary APIs, no lock-in.

vs DIY Kubernetes on bare metal
CapabilityCluster FabrikDIY / Scripts
Provisioning timeMinutes (fully automated, EU)Hours to days
Multi-tenant isolation✓ Built-in (Keycloak Orgs)✗ Build it yourself
Async jobs + auto-retry✓ Automatic✗ Manual re-runs
Full audit trail per step✓✗
WHMCS billing integration✓ PHP module included✗
Multi-provider support✓ Pluggable registry~ Per-provider scripts
HA Ingress (Keepalived)✓ Auto-deployed~ Manual setup
EU-hosted / GDPR✓ EU platform, clusters on your infra✓

Ready to stop provisioning
clusters by hand?

Talk to sales or request a free trial — we'll have you running in days, not months.

Frequently asked questions

Cluster Fabrik supports Virtualizor (full feature set) and Harvester (on request) for bare-metal Kubernetes deployments, with Proxmox support coming soon. Cloud provider support for AWS, Azure, and GCP is in active development. The platform abstracts the provider layer so the same provisioning workflow applies regardless of the underlying hypervisor.
Cluster Fabrik enforces a three-level role hierarchy: Admin then Reseller then Customer. Each level only sees and manages resources within its own scope. Resellers can have multiple customers, customers can have multiple clusters, and audit trails are scoped per tenant. Authentication is handled by Keycloak with OIDC/PKCE.
Yes. Cluster Fabrik ships with a WHMCS integration for hosting providers and exposes a documented API for custom billing systems. Per-cluster usage is tracked and can be exported on a monthly cycle.
Yes. Cluster Fabrik orchestrates RKE2 and K3s lifecycle operations including version upgrades, control plane patches, and node draining. Upgrades are scheduled per-cluster and tracked in the async job engine with full audit history.
Yes. The reseller and customer portals support white-label branding: your logo, colors, and domain on the customer-facing UI. We operate the underlying platform; your customers only see your brand.