Cluster Fabrik is the SaaS platform that lets hosters and resellers provision full-stack Kubernetes clusters on their own hypervisor infrastructure — with built-in multi-tenancy, white-label branding, dedicated IPs, and WHMCS billing.
Submit a cluster request and walk away. The async job engine handles every step, retries failures, and gives you a full audit trail.
Whether you're running 5 clusters or 500, Cluster Fabrik automates the entire lifecycle so your team focuses on infrastructure strategy, not repetitive VM setup.
Every cluster request runs automatically in the background — VM creation, Kubernetes install, Rancher registration — with full retry logic. No babysitting required.
Connect Virtualizor, Proxmox, or Harvester. The platform handles each provider the same way — add a new backend without changing anything else.
Every job step is recorded with timestamps, status, and error details. Know exactly what happened at VM creation, SSH bootstrap, and Rancher registration.
Provider credentials and kubeconfigs are AES-encrypted in the database. SSH keys never leave the worker. No plaintext secrets, ever.
Choose the Kubernetes distribution that fits your workload. Both are CNCF-certified and work with all standard tooling.
Create customer organisations, set pricing tiers, and let your clients spin up clusters — all under your own brand, fully isolated, integrated with WHMCS.
Every reseller gets an isolated organisation in Keycloak. Customers only see their own clusters. No cross-tenant data leakage — ever.
Define custom VM plans (CPU, RAM, disk, OS) per organisation. Set your own pricing. Customers only see the plans you've assigned to them.
A thin PHP module connects WHMCS to the Cluster Fabrik API. Provisioning, suspension, termination — all triggered automatically from your billing system.
Self-hosted means your domain, your branding, your terms. Cluster Fabrik is the engine — your customers see your product.
Your customers provision and manage their own clusters without involving your team.
Every cluster gets its own isolated network environment — dedicated IPs, private node communication, firewall protection, and automatic ingress. No manual network setup, no shared infrastructure risks.
Each cluster gets its own public IPv4 address — and IPv6 where your infrastructure supports it. No shared ingress, no noisy neighbours, no IP conflicts between customers.
Cluster nodes communicate over an isolated private network. No internal traffic is exposed publicly — your workloads stay secure by default.
Firewall rules are applied automatically to every cluster. Only the ports and protocols you need are exposed — everything else is blocked by default.
Ingress is deployed and configured as part of provisioning. Traffic is routed automatically with high-availability load balancing — no nginx config files to maintain.
Point any domain to your cluster and it works. Automatic TLS certificates — HTTPS out of the box, no manual SSL management.
Automated backups of your cluster state and workloads. Restore quickly after an incident — no manual backup scripts to maintain.
Cluster Fabrik handles the entire cluster lifecycle — from provisioning through upgrades, scaling, and decommission — so your team stays focused on shipping, not maintenance.
Clusters are automatically imported into Rancher on completion. Manage workloads, RBAC, and monitoring from day one.
Download your kubeconfig the moment your cluster is ready. Rotate credentials on demand.
Scale, upgrade, and delete clusters from the platform. No manual node management.
Automated backups of your cluster state. Restore quickly after an incident without manual backup scripts.
Use any standard Kubernetes tooling — Helm, kubectl, ArgoCD, Lens — without lock-in.
Switch between Virtualizor, Proxmox, and Harvester without changing your workflow. One API, any backend.
Automate everything. The platform exposes a full REST API for cluster provisioning, management, and billing integration.
Keycloak 26 OIDC/PKCE authentication. SSO, per-tenant isolation, and RBAC — configured and ready.
Every action is logged with timestamps, user, and outcome. Compliance and debugging made easy.
RKE2 or K3s, Rancher-registered, with HA ingress. No YAML marathons, no cloud vendor lock-in.
Choose RKE2 for hardened production workloads or K3s for lightweight edge. Both CNCF-certified — standard kubectl, no proprietary APIs.
Ingress controller deployed and configured automatically. High-availability load balancing with no manual setup.
kubeconfig is available the moment your cluster is ready. Download and start deploying immediately.
Clusters are automatically registered in Rancher. Full workload management, monitoring, and RBAC from day one.
Automated cluster backups. Restore quickly after an incident without manual backup scripts.
No black boxes. No proprietary formats. Every layer is inspectable, replaceable, and runs entirely on your infrastructure.
Run as many platform instances as you need — no bottlenecks, no extra infrastructure to manage as you grow.
Every provisioning task is reliable and resumable. No duplicates, no silent failures — even if a server restarts mid-operation.
Single sign-on, role-based access, and per-reseller user isolation — fully configured and ready without any custom auth code.
Your clusters work with every Kubernetes tool you already use — Helm, kubectl, Lens, ArgoCD. No proprietary APIs, no lock-in.
| Capability | Cluster Fabrik | DIY / Scripts |
|---|---|---|
| Provisioning time | ~5 minutes | Hours to days |
| Multi-tenant isolation | ✓ Built-in (Keycloak Orgs) | ✗ Build it yourself |
| Async jobs + auto-retry | ✓ Automatic | ✗ Manual re-runs |
| Full audit trail per step | ✓ | ✗ |
| WHMCS billing integration | ✓ PHP module included | ✗ |
| Multi-provider support | ✓ Pluggable registry | ~ Per-provider scripts |
| HA Ingress (Keepalived) | ✓ Auto-deployed | ~ Manual setup |
| Self-hosted / GDPR | ✓ 100% on your infra | ✓ |
Book a demo or check pricing — we'll have you running in days, not months.