Launch your own Kubernetes-as-a-Service on Proxmox & Talos
Kubaros lets small and mid-sized ISPs, hosting and IT service providers offer managed Kubernetes clusters to their customers — running on Proxmox VE and Talos Linux.
Install inside a management VM
Runs in a dedicated VM — never on the Proxmox host.
Your infrastructure, productised as managed Kubernetes
Kubaros is a control plane that turns your Proxmox capacity into a clean, billable Kubernetes product — with OVH-style networking: project gateways with speed tiers, outbound internet by default, LoadBalancer via booked gateway IPs and managed databases on the tenant network.
Reuse Proxmox capacity
No new hardware. Use the Proxmox you already run — or stand up a dedicated cluster just for Kubaros. A single node works; a cluster with Ceph is recommended for HA.
Clusters on Talos Linux
Immutable, API-managed Talos Linux nodes — secure by default, no SSH sprawl.
Internet gateways per project
One gateway per project (OVH-style): outbound internet at a booked speed tier — from 50 to 10,000 Mbit/s — shaped centrally on a shared edge VM (Proxmox SDN).
Outbound internet by default
Every cluster gets outbound NAT automatically. Fully isolated clusters — no outbound, no inbound — are an explicit, per-cluster option.
LoadBalancer via booked IPs
Public IPs are booked onto the gateway and MetalLB hands exactly those to Service type=LoadBalancer. Inbound exists where you booked a gateway — nothing else is exposed.
Managed databases
MySQL, PostgreSQL, Redis and MongoDB on the tenant's Proxmox SDN vnet — encrypted, rotatable credentials and snapshotted backups, reachable straight from the tenant's clusters.
API-first automation
Every action is a documented REST endpoint, ready for your portal and billing. Scoped tokens, usage reporting and job tracking are built in.
Provider-grade UX
A calm, structured admin and tenant console your team will actually enjoy operating.
How the pieces fit together
Four levels, one clean mental model: you operate the provider, each customer is a tenant, projects organise their resources, and clusters are the actual Kubernetes you hand over. Gateways and managed databases are the network services attached to a project.
You run the appliance — it connects Proxmox and offers the product.
A customer (a company) with its own login, users and quotas.
A space inside the tenant for related resources, e.g. “Production” or “Staging”. A project owns a gateway.
A real Kubernetes (Talos) cluster the tenant uses.
The project's connection line: a speed tier for outbound internet + booked public IPs for inbound.
MySQL, PostgreSQL, Redis or MongoDB on the tenant network — reachable straight from the cluster.
Each project owns a gateway. The gateway decides internet speed and inbound capacity for every cluster in the project.
Projects scope everything. Clusters and databases land in the project, so usage and billing are grouped cleanly.
Billing is per resource. Clusters, gateways (speed), databases and public IPs all appear in the usage report — your pay-as-you-go basis.
Proxmox-native by design
Connect with a scoped Proxmox API token. Kubaros discovers your nodes, storage and network bridges, and only ever touches the VMs it manages — never your existing workloads. Runs on any Proxmox VE 8+ — existing or dedicated, a single node or a full cluster.
Talos Linux: minimal, immutable, secure
Kubaros generates Talos machine configurations, bootstraps the control plane and hands you a ready kubeconfig. No package drift, no SSH, no snowflake nodes.
A self-hosted appliance you control
Kubaros ships as a Docker Compose stack you install inside a dedicated management VM. One command, secure defaults, and a web console on your network.
A complete REST API from day one
Integrate Kubaros into your customer portal, billing system and automation. Scoped API tokens, usage reporting, provisioning job tracking and kubeconfig retrieval — plus gateway and managed-database endpoints — all documented via OpenAPI.
Scoped API tokens
POST /api/clusters/create Authorization: Bearer kbrs_••••• { "name": "tenant-acme-prod", "controlplane_count": 1, "worker_count": 3, "cpu": 4, "memory_mb": 8192, "customer_id": "cust-1042", "billing_reference": "BILL-ACME-01" } 201 → { "cluster": {…}, "job_id": "…" }
✓ preflight checks ......... ok
✓ backup database .......... ok
✓ pull images (ghcr) ....... ok
▸ restart services ......... 88%
Safe, observable self-updates
Check for updates from the console. Kubaros runs preflight checks, takes a backup, updates step by step and keeps a full log — and never touches running customer clusters.
Free Community plan
The free Community plan is available now — no payment required. Run managed Kubernetes on your Proxmox today.
Detailed pricing will be announced soon. B2B offer only; all prices are net and exclude statutory VAT, billed per installation.
Where Kubaros is heading
Available now
- Proxmox connection, discovery & readiness check
- First-run setup wizard
- Talos cluster provisioning & deletion
- Multi-tenancy: tenants, projects & RBAC
- Internet gateways per project (speed tiers 50–10000 Mbit/s)
- Managed databases (MySQL, PostgreSQL, Redis, MongoDB)
- LoadBalancer from booked gateway IPs (MetalLB)
- Public IP pools & IPAM (per Proxmox site)
- Usage & billing report (clusters, gateways, databases, IPs)
- kubeconfig download, jobs & live logs
- REST API, scoped tokens, audit logging & self-updater
- License activation & installation registry
Coming next
- Cluster upgrade center (Talos/K8s)
- Multiple Proxmox clusters per appliance
- VLAN automation & ingress/DNS
- Longhorn / Ceph storage options
- Backup & restore for clusters
- Terraform provider & CLI
On the roadmap
- Automated usage-based billing settlement
- Cross-site failover / HA data plane
- Observability add-ons & service mesh
- Multi-appliance federation & regional replication
Ready to run your own Kubernetes platform?
Install the appliance in minutes, or request early access for guided onboarding.