Kamaji vs Kubermatic KubeOne

Kamaji runs Kubernetes control planes as pods inside a management cluster, giving platform teams a way to operate multiple tenant clusters. Each tenant control plane is independent and separated from others. It uses upstream Kubernetes components and kubeadm, with CNCF-conformant tenant clusters. Worker nodes may run on bare metal, virtual machines, or cloud instances across cloud, data-center, edge, and bare-metal environments. Kamaji integrates with Cluster API for infrastructure provisioning and lifecycle management, and supports cluster provisioning, multi-cluster management, policy enforcement, and upgrade management. Datastores include etcd and MySQL- or PostgreSQL-compatible databases through kine; NATS support is experimental. Konnectivity, enabled by default, creates secure tunnels to worker nodes. Prometheus-format metrics cover management and tenant planes. Metrics endpoints use unauthenticated plaintext by default, with documented HTTPS and bearer-token options. Kamaji is free under Apache 2.0; Clastix also sells enterprise support.

Kubermatic KubeOne has no write-up on Specifiction yet; its figures are above.