Editions and Support Levels
Purpose: For architects and buyers, documents the openCenter Platform edition differences, included services per edition, pricing, and support SLAs.
Edition Overview
| Edition | Audience | Core Promise |
|---|---|---|
| Community | Builders & PoCs | Free, self-supported platform with GitOps, security policies, and observability for evaluation/dev. |
| Essentials | First production cluster | Complete platform operations with 8×5 support—GitOps, security, monitoring, and lifecycle management. |
| Enterprise | Multi-cluster at scale | 24×7 platform operations with SRE support, SLAs, DR, advanced policies, and blueprints. |
| Regulated | Financial, healthcare, public sector | Compliance-ready platform with evidence automation, segregation, change control, FIPS/HSM, air-gap. |
Platform Capabilities
| Capability | Community | Essentials | Enterprise | Regulated |
|---|---|---|---|---|
| Bootstrap & lifecycle (FluxCD) | ✓ | ✓ | ✓ | ✓ |
| SSO (Keycloak OIDC) | ✓ | ✓ | ✓ | ✓ |
| Optimized CNIs (Cilium/Calico/Kube-ovn) | ✓ | ✓ | ✓ | ✓ |
| Policy guardrails (Kyverno) | Templates | Baseline | Enterprise pack | Regulated pack |
| DR runbooks | Community docs | L2 guided | L2/L3 with tests | L2/L3 + evidence |
| Compliance packs (SOC2/NIST/HITRUST/PCI) | — | — | Readiness kit | Evidence automation |
| Image signing/SBOM & CVE management | — | Basic | Advanced | Advanced + FIPS |
| Dedicated TAM | — | — | ✓ | ✓ |
| Blueprints | Community | Add-on | Add-on | Add-on w/ contract |
Service Delivery Model
Community and Essentials clusters consume services directly from openCenter-gitops-base. Enterprise and Regulated clusters consume services from openCenter-gitops-enterprise, which imports the public base and applies enterprise-specific changes (private chart sources, private image references, hardened values, managed services).
openCenter-gitops-base (public base)
↑ imported by
openCenter-gitops-enterprise (enterprise overlays + managed services)
↑ consumed by
Cluster overlay repository (secrets, overrides, cluster-local config)
Services Included in All Editions (via gitops-base)
| Service | Version | Purpose |
|---|---|---|
| cert-manager | v1.18.2 | Automated TLS certificate management |
| external-snapshotter | v8.2.1 | Volume snapshot management |
| gateway-api (Envoy) | v0.0.0-latest | Next-generation ingress API |
| harbor | 1.17.2 | Container registry with security scanning |
| headlamp | 0.35.0 | Kubernetes dashboard |
| istio | 1.28.3 | Service mesh (traffic management, mTLS) |
| keycloak | 26.4.2 | Identity and access management |
| kyverno | 3.6.0 | Policy engine (17 ClusterPolicies) |
| longhorn | 1.11.0 | Distributed block storage |
| metallb | 0.15.2 | Load balancer for bare-metal clusters |
| olm | v0.34.0 | Operator Lifecycle Manager |
| openstack-ccm | 2.33.1 | OpenStack Cloud Controller Manager |
| openstack-csi | 2.33.1 | OpenStack Cinder CSI driver |
| postgres-operator | 1.14.0 | PostgreSQL cluster management |
| rbac-manager | 1.21.1 | RBAC management automation |
| sealed-secrets | 2.17.3 | GitOps-friendly secret management |
| strimzi-kafka-operator | 0.50.0 | Apache Kafka operator |
| velero | 10.1.1 | Backup and disaster recovery |
| vsphere-csi | 3.8.1 | vSphere storage integration |
Observability Stack (All Editions)
| Service | Version | Purpose |
|---|---|---|
| kube-prometheus-stack | 77.6.0 | Prometheus, Grafana, Alertmanager |
| loki | 6.45.2 | Log aggregation |
| mimir | 6.0.3 | Long-term metrics storage |
| tempo | 1.55.0 | Distributed tracing |
| opentelemetry-kube-stack | 0.11.1 | Telemetry collection |
Enterprise-Only Managed Services
| Service | Path |
|---|---|
| alert-proxy | applications/enterprise/managed-services/alert-proxy |
Enterprise overlays apply to all base services — private chart sources, private image registries, and hardened values specific to enterprise delivery.
Support Levels
| Metric | Community | Essentials | Enterprise | Regulated |
|---|---|---|---|---|
| Support channel | Self-served | 8×5 (email) | 24×7 + Phone | Enterprise + Priority |
| SLA response time | — | 4 hours | 1 hour | 15 minutes |
| Managed support service | Self service | Standard | Premium | Mission Critical |
| Dedicated TAM | — | — | ✓ | ✓ |
Pricing
Per-node per-month. VM and Bare Metal pricing differ.
Platform License
| Edition | VM | Bare Metal |
|---|---|---|
| Community | $0 | — |
| Essentials | $125 | $250 |
| Enterprise | $249 | $475 |
| Regulated | $526 | $900 |
Managed Support Service (additional)
| Edition | Price |
|---|---|
| Community | N/A |
| Essentials | N/A |
| Enterprise | $389 |
| Regulated | $726 |
Blueprint Add-ons
| Blueprint | Enterprise | Regulated |
|---|---|---|
| Cloud (OpenStack) | $425 | $649 |
| AI (Per Node/GPU) | 2026 | 2026 |
| DBaaS | 2026 | 2026 |
| Sitecore | 2026 | 2026 |
| Banking Software | 2026 | 2026 |
| Marketplace | 2026 | 2026 |
Deployment Models
| Model | Community | Essentials | Enterprise | Regulated |
|---|---|---|---|---|
| Connected (internet access) | ✓ | ✓ | ✓ | ✓ |
| Air-gap (disconnected) | — | — | ✓ | ✓ |
| Air-gap with FIPS | — | — | — | ✓ |
Infrastructure Providers
All editions support: OpenStack, VMware vSphere, Bare Metal, kind (local dev). AWS support is available across all editions.