Kubernetes
A real Kubernetes cluster, not a hidden control plane.
Excloud provisions a Kubernetes control plane on dedicated VMs in your org, gives you the admin kubeconfig, and lets you add worker nodes from any compute instance type. The control plane and workers show up in exc compute list — there's no management layer you can't see.
$ exc k8s cluster kubeconfig get --cluster_id 7 -o ~/.kube/excloud.yaml
What you get
A versioned control plane, in your org.
- Single-tenant. One or three control plane nodes, no shared management layer.
- Admin kubeconfig. Full cluster privileges — you install your own ingress, cert-manager, observability.
- Workers from compute. Add nodes with exc k8s cluster worker create using any compute instance type.
- Per-cluster OIDC. Pods can mint identity tokens for AWS-style workload identity.
What you manage
We don't hide the work — we just don't do it for you.
- Add-ons (CNI, ingress, cert-manager, observability)
- Workloads, namespaces, RBAC inside the cluster
- Worker OS patching cadence (we provide images; you pick when to roll)
- Upgrades for now (re-create with newer image IDs to upgrade; in-place rolling upgrade is on the roadmap)
The CLI
From zero to a running cluster, in one command.
exc k8s cluster create provisions the control plane on dedicated VMs. Fetch the kubeconfig, merge it into ~/.kube/config, and add workers. Same kubectl as everywhere else.
$ exc k8s cluster create \ --control_plane_image_id 1 \ --control_plane_instance_type m1a.large \ --subnet_id 1 --ssh_pubkey my-key ✓ cluster 7 created, control plane ready $ exc k8s cluster kubeconfig merge \ --cluster_id 7 ✓ merged into ~/.kube/config $ exc k8s cluster worker create \ --cluster_id 7 --worker_name worker-1 \ --worker_image_id 1 \ --worker_instance_type m1a.xlarge \ --subnet_id 1 --ssh_pubkey my-key ✓ worker 12 added
The honest part
Versions, upgrades, and the parts we don't do yet.
The cluster's Kubernetes version is determined by the control_plane_image_id and worker_image_id at create time. In-place rolling upgrade is on the roadmap; for now, plan to re-create with newer image IDs when you need to upgrade. Managed add-ons (CNI, CSI, CCM) are pre-installed; you can replace them, but the defaults are tested.