One declarative infrastructure foundation.
Your infrastructure.
One cloud operating model.
Run virtual machines, managed Kubernetes and application services on infrastructure you control—with tenant isolation, integrated storage and networking, and one consistent API.

Isolation for teams, environments and customers.
Human workflows and repeatable automation.
Built for data center, edge and controlled sites.
A cloud experience your teams can actually use.
Administrators govern the underlying platform while tenants consume approved services through clear, repeatable workflows.

Modernize infrastructure without forcing every workload into the same runtime.
Choose the right runtime. Keep one operating model.
Virtual machines and Kubernetes remain distinct workload choices while sharing Layer Sentry storage, networking, tenancy, operations and API foundations.

A service catalog, not another operations backlog.
Publish approved infrastructure, data, messaging and connectivity services through the same tenant-aware workflow.
Virtual Machine
KVM compute instance
Virtual Disk
Persistent VM storage
Kubernetes
Managed tenant cluster
Virtual Private Cloud
Isolated tenant network
Bucket / Object Storage
S3-compatible object service
PostgreSQL
Managed relational database
MariaDB
Managed SQL database
MongoDB
Document data service
Redis
In-memory data service
ClickHouse
Analytical database
OpenSearch
Search and analytics
Qdrant
Vector database service
Kafka
Distributed event streaming
RabbitMQ
Message broker
NATS
Cloud-native messaging
HTTP Cache
Application delivery
TCP Balancer
TCP service publishing
VPN
Managed connectivity
Harbor
Container registry
OpenBao
Secrets management
Give every team a cloud boundary of its own.
Organize business units, environments or customers in a hierarchical tenant model with delegated administration, modules and resource quotas.


Delegate safely. See everything.
- Hierarchical tenants and sub-tenants
- Per-tenant modules and readiness
- Resource quota visibility
- Administrative actions in context
See the state of your cloud at a glance.
Understand cluster capacity, allocation and infrastructure health without moving between disconnected management tools.
CPU, memory, storage, pods and virtualization resources.
Allocation and quota context across isolated environments.
Backup classes, jobs, artifacts and restore workflows.

Private Cloud
Turn owned infrastructure into governed, self-service cloud capacity.
Learn more →Virtualization Modernization
Operate current and new VM workloads on a Kubernetes-native foundation.
Learn more →Platform Engineering
Deliver approved services without giving up infrastructure governance.
Learn more →Service Provider Cloud
Separate customers, services and quotas on shared infrastructure.
Learn more →Evaluate with clarity.
Answers to the questions infrastructure and platform teams ask first.
Talk to an architect →What is Layer Sentry?+
Layer Sentry is a Kubernetes-native private-cloud platform for virtual machines, tenant Kubernetes, managed applications, storage, networking and automation.
How does virtualization work?+
KVM-based virtual machines run on the platform’s Kubernetes-native infrastructure foundation and use managed disks, images, networking and lifecycle workflows.
Are tenant clusters just Kubernetes namespaces?+
No. Tenant Kubernetes environments have their own control planes and VM worker nodes, with independent lifecycle, persistent volumes and load-balancing services.
How are teams and customers isolated?+
Hierarchical tenants provide separate resource and network scopes, RBAC, quotas and delegated administration.
Which services can teams deploy?+
The catalog includes VMs, tenant Kubernetes, databases, caches, messaging, registry, object storage, load balancing, HTTP delivery and VPN services.
Can the platform be automated?+
Yes. Resources can be managed through the dashboard, kubectl, Terraform or programmatic clients using the Kubernetes API model.
Shape the cloud operating model your teams actually need.
Select your starting priorities to create a focused evaluation brief for your infrastructure and platform teams.
Build a governed private-cloud foundation.
Turn infrastructure you control into shared cloud capacity with self-service delivery and one operational context.
- Use distinct VM and Kubernetes runtimes on shared storage, networking, tenancy, operations and API foundations.
- Model business units and environments with hierarchical tenants, quotas, RBAC and network boundaries.
- Design around servers, physical storage and network fabric in your primary or secondary data-center environment.
Final topology, sizing, integrations and lifecycle design are confirmed during architecture qualification.
