Integrations

Harbor is an open-source container image registry that secures artifacts with policies and role-based access control. Waldur integrates with Harbor to provide self-service management of container registry projects through the marketplace, enabling teams to request and manage their own registries with proper access control.

Kubernetes allows to isolate resources using namespaces and RBAC. Using custom integration scripts, Waldur can setup namespaces and RBAC rights for the Kubernetes identities. This assumes integration of Kubernetes with Keycloak or similar OIDC identity provider. Such integration allows simplified delivery of namespaces to customers with Kubernetes cluster management remaining the responsibility of a service provider.

NetBox is an open-source source of truth for network and infrastructure inventory (DCIM/IPAM). The Waldur NetBox exporter mirrors OpenStack inventory managed by Waldur into NetBox: customers become tenant groups, tenants become clusters, instances become virtual machines and networks map to VLANs and prefixes. Changes are pushed in real time via Waldur’s event stream with periodic reconciliation, and every mirrored object is tagged so manually-created NetBox records are never touched. Supports the NetBox REST API and Diode ingestion backends.

OKD is the community distribution of Kubernetes that powers Red Hat OpenShift. Waldur supports provisioning and management of OpenShift clusters and projects, enabling organizations to offer container platform services through the Waldur marketplace.

Rancher is a Kubernetes cluster management solution for deploying and operating standalone K8s clusters. Waldur supports creation and management of Kubernetes clusters via Rancher and OpenStack, enabling independent clusters in OpenStack tenants. Customers maintain full control over cluster VMs while the service provider manages Rancher and KeyCloak identity integration.

Waldur supports federation between multiple Waldur instances, allowing organizations to share and consume offerings across independent deployments. This enables cross-organizational resource sharing and collaborative service delivery while maintaining separate governance domains, with automated synchronization of offerings and orders between instances.