# Okustera - The Open Cloud for the GitOps Era

> Okustera is an open-standard, sovereign cloud platform (OMC Tier-2) engineered for upstream Kubernetes, true VPC networking, and Ceph NVMe storage, managed declaratively with Terraform.

## Overview
- Platform: Okustera Open Cloud (OMC)
- Host Node: ns570036
- Region: RegionOne
- Primary Domain: https://okustera.com
- Cloud Console: https://portal.okustera.com
- API Endpoint: https://api.okustera.com:5000/v3 (Keystone / OpenStack API)
- Kubernetes Endpoint: https://k8s.regionone.okustera.com:6443

## Core Architecture & Capabilities
- Upstream Kubernetes: Managed clusters via OpenStack Magnum and Cluster API (CAPI) with Calico CNI. Zero vendor lock-in.
- Hard Multi-Tenancy & Networking: Isolated Virtual Private Clouds (VPCs) via OpenStack Neutron and Open Virtual Network (OVN) geneve tunnels with Octavia load balancers.
- Distributed NVMe Storage: Ceph RBD block storage for high IOPS persistent volumes and Ceph RADOS Gateway (RGW) S3-compatible object storage.
- Compute Engine: KVM hardware-accelerated virtualization via Nova with live migration support.
- Managed PaaS & DBaaS:
  - CloudNativePG: High-availability PostgreSQL 16 clusters with Barman backups.
  - Redis: In-memory caching with Redis Sentinel automated failover.
  - MySQL: Clustered Percona XtraDB (PXC) Galera replication.
  - Document DB: MongoDB via MongoDB Community Operator.
  - RabbitMQ: Distributed quorum messaging clusters.
  - Serverless: OpenFaaS event-driven compute with gVisor sandboxing.
  - API Gateway: Apache APISIX high-performance traffic routing and rate limiting.
  - Security & IAM: Keystone identity with 2FA, Barbican secret escrow / KMS.
  - Observability: Prometheus metrics, Grafana dashboards, Loki log streaming, CloudKitty FinOps rating.

## Value Proposition for Hardware Vendors & Datacenters
- Transforming Bare Metal into Sovereign Cloud: Turn unmanaged bare-metal servers, NVMe storage, and networking into an enterprise sovereign cloud in days without multi-million dollar software R&D.
- 10x Higher Margins: Move from commoditized flat-fee rack/server rentals to high-margin managed cloud services (DBaaS, CaaS, S3, Serverless) with integrated FinOps usage metering (CloudKitty).
- Zero Hypervisor Tax: 100% upstream open standards (Linux KVM, OpenStack, Ceph, CNCF Kubernetes) with zero VMware/Broadcom per-core licensing costs.
- About Us & Partner Details: https://okustera.com/about.html

## Automation & IaC
- Terraform Providers:
  - OpenStack Provider (`terraform-provider-openstack`): Manages core IaaS infrastructure including Nova compute instances, Neutron VPC networking, routers, security groups, Cinder/Ceph block storage, and Magnum Kubernetes clusters.
  - Okustera Provider (`okustera/okustera` / `terraform-provider-okustera`): Manages platform-native PaaS services including CloudNativePG PostgreSQL clusters, Redis Sentinel caching, Ceph S3 buckets, OpenFaaS functions, Apache APISIX routes, Keystone tenants & users, Pod IAM roles & workload identity bindings, and FinOps budget caps.
- Provisioning: 100% declarative GitOps workflows.
- Full LLM Context: https://okustera.com/llms-full.txt