Mirantis Kubernetes Engine vs openCenter

Mirantis Kubernetes Engine (MKE 4) is a self-hosted enterprise Kubernetes platform built on the open-source k0s distribution. It supports deployment across public and private clouds, multi-cloud and hybrid-cloud environments, and bare-metal infrastructure. Teams manage cluster lifecycle with the mkectl command-line tool and a declarative mke4.yaml configuration file; standardized APIs and GitOps-based lifecycle management are also listed. A cluster combines k0s, a container network interface, the MKE control plane, system services, and user services. Calico is installed by default, with other network interface options supported. The web dashboard manages Kubernetes resources in an MKE-managed cluster. Backup and restore are supported, and the CLI upgrade process includes automated backups. Authentication through Dex supports OIDC, SAML, and LDAP, but not MFA. MKE 4 requires x86_64 and Linux manager/control-plane nodes; supported operating systems include specified Ubuntu, RHEL, and Rocky Linux versions, plus Windows Server worker nodes. A valid license is required, and a trial license is available on request. Mirantis offers 24/7 proactive support or managed services.

openCenter provides upstream Kubernetes with GitOps automation, security hardening, observability, backup and lifecycle management. It runs on OpenStack, VMware vSphere, AWS, bare metal and air-gapped sites. Its CLI uses declarative YAML to define infrastructure, Kubernetes, services and secrets, applying schema validation and business-rule checks before generating infrastructure-as-code, Kubespray inventory and FluxCD manifests with Kustomize overlays. Listed pre-hardened services include cert-manager, Kyverno, Keycloak, Harbor, Velero, MetalLB, Longhorn, Calico, PostgreSQL Operator and OpenStack CSI. Observability components include Prometheus, Grafana, Alertmanager, Loki, Tempo and OpenTelemetry. Security controls include Kyverno ClusterPolicies, Pod Security Admission, NetworkPolicies and group-based Keycloak OIDC access controls. Secrets can use SOPS Age encryption in Git, Kubernetes encryption at rest and key rotation. Air-gap packaging uses a Zarf artifact for images, charts and binaries, with signing and SBOM generation. Community is free; paid plans start at $125/mo. Rackspace Technology develops and maintains openCenter.