Technology
The stack behind the platform.
Open technologies, chosen because they are portable, well understood and hirable for. Nothing here locks you to Locara — that is the point of running an independent cloud.
Catalogue
Everything we build, run and support with
- Kubernetes
The orchestration layer under every containerised workload we run.
Containers & orchestration
- RKE2
Hardened Kubernetes distribution for clusters with strict security baselines.
Containers & orchestration
- K3s
Lightweight Kubernetes for edge sites and small footprints.
Containers & orchestration
- Docker
Container builds and local development parity.
Containers & orchestration
- Helm
Packaging and versioning for everything deployed to a cluster.
Containers & orchestration
- Harbor
Private image registry with scanning, signing and replication.
Containers & orchestration
- Rancher
Fleet management across clusters and environments.
Containers & orchestration
- Istio
Service mesh for mTLS, traffic shaping and policy between services.
Containers & orchestration
- Proxmox VE
Virtualisation and clustering under the private cloud platform.
Virtualization & private cloud
- OpenStack
Private cloud infrastructure services at data-centre scale.
Virtualization & private cloud
- KVM
The Linux hypervisor virtual machines actually run on.
Virtualization & private cloud
- VMware vSphere
Supported where an existing estate already runs on it.
Virtualization & private cloud
- GitLab CI
Pipelines for build, test, scan and deploy.
CI/CD, GitOps & IaC
- GitHub Actions
Pipelines with OIDC to cloud accounts and no stored keys.
CI/CD, GitOps & IaC
- Jenkins
Long-standing pipelines we operate and modernise in place.
CI/CD, GitOps & IaC
- Argo CD
GitOps delivery: clusters reconcile what is committed to Git.
CI/CD, GitOps & IaC
- Terraform
Infrastructure as code for every environment we build.
CI/CD, GitOps & IaC
- OpenTofu
Open-source Terraform alternative where licensing matters.
CI/CD, GitOps & IaC
- Ansible
Configuration management and repeatable operational runbooks.
CI/CD, GitOps & IaC
- Pulumi
Infrastructure as code in a general-purpose language.
CI/CD, GitOps & IaC
- Gitea
Self-hosted Git where the repository itself must stay local.
CI/CD, GitOps & IaC
- PostgreSQL
Managed relational database with point-in-time recovery.
Databases & streaming
- Percona XtraDB Cluster
Synchronous MySQL clustering for high-availability workloads.
Databases & streaming
- Redis
Caching, queues and session storage.
Databases & streaming
- Apache Kafka
Event streaming clusters for high-throughput pipelines.
Databases & streaming
- RabbitMQ
Message broker clusters for task and integration workloads.
Databases & streaming
- MongoDB
Document database for applications that need it.
Databases & streaming
- Apache Cassandra
Wide-column store for write-heavy, distributed data.
Databases & streaming
- ClickHouse
Columnar analytics over large event volumes.
Databases & streaming
- Couchbase
Distributed NoSQL with caching built in.
Databases & streaming
- MinIO
S3-compatible object storage inside your own environment.
Storage
- RustFS
Rust-based S3-compatible object storage for high-throughput workloads.
Storage
- Longhorn
Replicated block storage for Kubernetes, with snapshots and backup.
Storage
- Ceph
Unified block, file and object storage at cluster scale.
Storage
- Traefik
Ingress and routing with automatic certificate management.
Networking & ingress
- HAProxy
Load balancing and TLS termination at the edge of the platform.
Networking & ingress
- MetalLB
Load balancer addresses for clusters outside a public cloud.
Networking & ingress
- Gateway API
The successor to Ingress: richer, role-separated traffic routing.
Networking & ingress
- Envoy
The proxy underneath service mesh and API gateway layers.
Networking & ingress
- Cilium
eBPF networking, network policy and flow visibility.
Networking & ingress
- Consul
Service discovery and service mesh across mixed environments.
Networking & ingress
- NGINX
Reverse proxy and ingress where it is already the standard.
Networking & ingress
- WireGuard
Encrypted tunnels between sites, clusters and operators.
Networking & ingress
- HashiCorp Vault
Secrets management and short-lived dynamic credentials.
Security & secrets
- Trivy
Vulnerability scanning for images, dependencies and IaC.
Security & secrets
- SonarQube
Static analysis and quality gates in the delivery pipeline.
Security & secrets
- Keycloak
Self-hosted identity, SSO and access control.
Security & secrets
- Cloudflare Zero Trust
Identity-aware access to internal services without a flat VPN.
Security & secrets
- Prometheus
Metrics collection and alerting rules across the platform.
Observability
- Grafana
Dashboards for platform and application health.
Observability
- OpenTelemetry
Vendor-neutral traces, metrics and logs from applications.
Observability
- OpenSearch
Log search and retention for investigation and audit.
Observability
- NVIDIA GPU
Accelerated compute for training, fine-tuning and inference.
AI & data science
- Qdrant
Vector database for retrieval-augmented applications.
AI & data science
- Milvus
Vector search at large scale.
AI & data science
- Weaviate
Vector database with hybrid search built in.
AI & data science
- pgvector
Vector search inside PostgreSQL, next to existing data.
AI & data science
- vLLM
High-throughput serving for open-weight language models.
AI & data science
- LangGraph
Stateful agent and workflow orchestration for LLM applications.
AI & data science
- LangChain
Application framework for retrieval and tool-using models.
AI & data science
- FastAPI
The service layer most AI applications are exposed through.
AI & data science
- MLflow
Experiment tracking and model registry.
AI & data science
- DVC
Versioning for datasets and model artefacts.
AI & data science
- Ray
Distributed training and batch inference.
AI & data science
- Apache Airflow
Scheduling for data and model pipelines.
AI & data science
- AWS
Integrated where a workload genuinely belongs in public cloud.
Cloud & hosting
- Microsoft Azure
Hybrid designs alongside locally operated infrastructure.
Cloud & hosting
- Google Cloud
Used selectively, usually for data and AI services.
Cloud & hosting
- AWS Outposts
AWS services on hardware inside your own facility.
Cloud & hosting
- Azure Local
Azure services operated on local infrastructure.
Cloud & hosting
- Cloudflare
Edge protection, DNS and DDoS mitigation in front of the platform.
Cloud & hosting
- DigitalOcean
Straightforward capacity for smaller or non-regulated workloads.
Cloud & hosting
- Hetzner
Cost-efficient European capacity for suitable workloads.
Cloud & hosting
- Contabo
Budget capacity for development and non-critical environments.
Cloud & hosting
- OVHcloud
European infrastructure where jurisdiction matters.
Cloud & hosting
Product names and logos are trademarks of their respective owners, shown to describe what the platform is built with. They do not imply endorsement or partnership. Some marks are shown as text where the owner restricts logo use.
Using something that is not on this list?
Most estates have at least one. Tell us what it is and we will say honestly whether we can operate it well.