Nvidia Kubernetes Engine (NVKE)

NVIDIA released NVIDIA Kubernetes Engine (NVKE) as a preview, a management plane that platform teams install to run Kubernetes workload clusters on their own NVIDIA GPU infrastructure, with each cluster getting its own control plane, etcd and node pools. NVKE provisions machines through NVIDIA Infra Controller (NICo), the sole compatible infrastructure provider at preview, and nodes attest through SPIFFE/SPIRE using their TPM before receiving join credentials. NVIDIA warns the preview is not recommended for production workloads: API authentication is off and the API uses plain HTTP after installation, the management cluster cannot upgrade, scale or replace itself, there is no management-plane upgrade or backup/restore procedure, and FDE node images provide no data-at-rest confidentiality.

Run a managed Kubernetes service on your own NVIDIA GPU infrastructure. NVIDIA Kubernetes® Engine NVKE provides the management plane that platform teams install to create and operate Kubernetes clusters for their customers. Each workload cluster has its own Kubernetes control plane, etcd and node pools. You operate the NVKE management plane; your customers use their clusters through the Kubernetes API and kubectl . Preview: NVKE is available as a preview. APIs, configuration and behavior can change between releases, and we do not recommend NVKE for production workloads. See Preview status and known limitations https://github.com/dsx-ai-factory/nvke/blob/main/docs/overview/preview-status.md . Get started getting-started · Documentation https://github.com/dsx-ai-factory/nvke/blob/main/docs/README.md · Contribute https://github.com/dsx-ai-factory/nvke/blob/main/CONTRIBUTING.md · Get help https://github.com/dsx-ai-factory/nvke/blob/main/SUPPORT.md | Your goal | Start here | What you get | |---|---|---| | Evaluate without GPU hardware | Local quickstart https://github.com/dsx-ai-factory/nvke/blob/main/docs/get-started/quickstart-local.md | A development management plane and a workload cluster on simulated machines. No NVIDIA account is required. | | Install on your infrastructure | Plan your installation https://github.com/dsx-ai-factory/nvke/blob/main/docs/operate/plan-installation.md | The prerequisites and sequence for preparing nodes, bootstrapping a management cluster and installing its services. | | Build or contribute | Build from source build-from-source | The NVKE binaries and the contributor development loop. | The local quickstart runs on a Linux host or VM, amd64 or arm64 , with at least 6 CPUs, 12 GiB of free memory and 100 GiB of free disk . It requires Docker, virtual TPM support and the tools listed in the guide. Follow its setup through workload-cluster creation and confirm the cluster's nodes report Ready . On macOS, use the local site guide https://github.com/dsx-ai-factory/nvke/blob/main/docs/get-started/local-site.md , which runs the evaluation inside a Colima virtual machine. For a real installation, you supply the machines, networking, node images and registries, and configure access to NVIDIA Infra Controller NICo . NICo is the sole compatible infrastructure provider at preview. The platform and version reference https://github.com/dsx-ai-factory/nvke/blob/main/docs/overview/supported-platforms.md lists validated combinations and pinned dependencies. - Creates independent workload clusters. Request clusters through the NVKE API or nvkectl ; NVKE provisions machines through NICo and forms Kubernetes clusters with their own control planes. - Manages workload cluster lifecycle. Create, scale and delete node pools, upgrade Kubernetes and replace nodes. See the node pool guide https://github.com/dsx-ai-factory/nvke/blob/main/docs/workload-clusters/node-pools.md for the manual steps and preview limits on replacement and upgrades. - Establishes node identity. Nodes attest through SPIFFE/SPIRE using their TPM before receiving join credentials. Encryption of etcd data is available per cluster. - Connects builds to deployment. Its companion project, NVIDIA Kubernetes Recipes NVKR https://github.com/dsx-ai-factory/nvkr , builds node images and NVKE components from pinned inputs. NVKE deploys those artifacts; NVKR owns their build and release evidence. The preview needs explicit operator configuration: API authentication is off and the API uses plain HTTP after installation. Configure API authentication and protected access https://github.com/dsx-ai-factory/nvke/blob/main/docs/operate/api-authentication.md before admitting callers. The management cluster does not upgrade, scale or replace itself, and there is no management-plane upgrade or backup/restore procedure. FDE node images are for evaluation and provide no data-at-rest confidentiality. Read the known limitations https://github.com/dsx-ai-factory/nvke/blob/main/docs/overview/preview-status.md before choosing an evaluation or installation path. The diagram shows the NVKE product family, how it sits on NICo and your GPU machines, and which components talk to each other. NVKE is not a Kubernetes distribution and not a Cluster API flavour. It is a self-hosting factory for Kubernetes clusters : a throwaway seed cluster stands up a management cluster, and the management plane on it then provisions and lifecycle-manages many isolated workload clusters on demand. An installation has two kinds of Kubernetes cluster: - The management cluster runs the NVKE management plane and infrastructure controllers. nvkectl forms it using a temporary seed cluster; installing the management-plane services is a separate step. - Workload clusters run customer applications. The management plane creates and operates them through NICo, Cluster API and the node agent. Read What is NVKE https://github.com/dsx-ai-factory/nvke/blob/main/docs/overview/what-is-nvke.md for the operator workflow and Architecture https://github.com/dsx-ai-factory/nvke/blob/main/docs/architecture.md for the implementation and data flows. Use Go 1.27.3 , the version pinned in go.work https://github.com/dsx-ai-factory/nvke/blob/main/go.work , and GNU Make 4 or later . Public Go modules must be reachable on the first build. Flox https://flox.dev/ is optional and supplies the repository's development tools; on macOS, it also supplies GNU Make 4. See Development https://github.com/dsx-ai-factory/nvke/blob/main/docs/development.md for toolchain setup. git clone https://github.com/dsx-ai-factory/nvke.git cd nvke make build This builds the workspace and writes nine binaries to bin/ : agent , updater , controller , nvkectl , capd-reboot-controller , nvke-os-image-check , management-engine , tenant-api and operator-api . Building does not start a management plane or create a cluster. The node agent runs on Linux. The workspace guide https://github.com/dsx-ai-factory/nvke/blob/main/docs/go-workspace.md explains the modules and outputs. For local services and test environments, see Local development setup https://github.com/dsx-ai-factory/nvke/blob/main/docs/getting-started.md . Before submitting a change, follow CONTRIBUTING.md https://github.com/dsx-ai-factory/nvke/blob/main/CONTRIBUTING.md and run make preflight ; it selects checks for the modules you changed. | Task | Guide | |---|---| | Prepare nodes and bootstrap the management cluster | Bootstrap the management cluster https://github.com/dsx-ai-factory/nvke/blob/main/docs/operate/bootstrap-management-cluster.md | | Install NVKE services | Install the management plane from the deploy path https://github.com/dsx-ai-factory/nvke/blob/main/deploy/README.md | | Build node images and supply release artifacts | Get NVKE artifacts from NVKR https://github.com/dsx-ai-factory/nvke/blob/main/docs/operate/build-node-images.md | | Create and manage customer clusters | Create a workload cluster https://github.com/dsx-ai-factory/nvke/blob/main/docs/workload-clusters/create.md , Manage node pools https://github.com/dsx-ai-factory/nvke/blob/main/docs/workload-clusters/node-pools.md | | Give a customer access | Access a workload cluster https://github.com/dsx-ai-factory/nvke/blob/main/docs/workload-clusters/access.md | | Inspect cluster health and telemetry | Observe NVKE and its clusters https://github.com/dsx-ai-factory/nvke/blob/main/docs/operate/observe.md | The documentation index https://github.com/dsx-ai-factory/nvke/blob/main/docs/README.md links the remaining guides and references. Contributions, bug reports and documentation improvements are welcome. Start with CONTRIBUTING.md https://github.com/dsx-ai-factory/nvke/blob/main/CONTRIBUTING.md ; open an issue before substantial work so maintainers can agree on the approach. - Questions: GitHub Discussions https://github.com/dsx-ai-factory/nvke/discussions/categories/q-a . - Chat: the nvke channel in the DSX AI Factory Slack. Get an invite https://inviter.co/dsx-ai-factory . - Bugs and feature requests: GitHub Issues https://github.com/dsx-ai-factory/nvke/issues . - Security vulnerabilities: follow SECURITY.md https://github.com/dsx-ai-factory/nvke/blob/main/SECURITY.md and report privately. - Community: Code of Conduct https://github.com/dsx-ai-factory/nvke/blob/main/CODE OF CONDUCT.md , Governance https://github.com/dsx-ai-factory/nvke/blob/main/GOVERNANCE.md , Maintainers https://github.com/dsx-ai-factory/nvke/blob/main/MAINTAINERS.md and Support https://github.com/dsx-ai-factory/nvke/blob/main/SUPPORT.md . - Releases: release process https://github.com/dsx-ai-factory/nvke/blob/main/RELEASE.md . - CI health: the CI dashboard https://dsx-ai-factory.github.io/nvke/ shows the last thirty runs of every workflow and refreshes hourly. Kubernetes® is a registered trademark of The Linux Foundation in the United States and other countries. NVIDIA and the NVIDIA logo are trademarks and/or registered trademarks of NVIDIA Corporation in the U.S. and other countries. Other company and product names may be trademarks of the respective companies with which they are associated. Apache License 2.0. See LICENSE https://github.com/dsx-ai-factory/nvke/blob/main/LICENSE and NOTICE https://github.com/dsx-ai-factory/nvke/blob/main/NOTICE . Copyright c 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.