Open Sovereign Cloud

Overview

This guide covers how to operate Open Sovereign Cloud — from activating your account and creating your first cluster through to day-to-day management, networking, observability and advanced workload capabilities.

If you are looking for conceptual and architectural background — what OSC is, how the platform is structured, or how security and sovereignty are implemented — see the About section.

How this guide is organized

SectionWhat you will find hereStart here
Getting StartedAccount activation, Dashboard access, first project and first Shoot clusterActivate your account
Access & User ManagementUser and group management in Keycloak, project membership, OIDC federation and kubeconfig accessIdentity & Access Management
Managed KubernetesCluster configuration, worker pools, scaling, Kubernetes version upgrades, hibernation and advanced options such as GPU nodes, volume encryption and service meshShoot spec overview
NetworkingLoad balancer configuration, DNS record management and DNS zone setupLoad balancers
ObservabilityCluster health dashboards, capacity monitoring and SGX memory metricsShoot monitoring
Private DeploymentPrivate stack deployment option on OSCPrivate Deployment Architecture
ExtensionsOptional platform services: cert-manager, S3 buckets, audit logs, bastion hosts, DEX clients, node feature discovery and Shoot peeringcert-manager
Confidential ComputingRunning workloads in hardware-attested, isolated enclaves using SCONE and SGX-enabled worker poolsConfidential Computing overview