#25 of 28 infrastructure automation tools · Updated October 2026
Metal3 review 2026
Metal3 · Dependable builder
Metal3 ranks #25 of 28 infrastructure automation tools in the Infrastructure Automation Ledger 2026, with a Ledger Index of 43.9 out of 100. Metal3 turns bare metal into Kubernetes objects reconciled by an operator on top of Ironic; CNCF Incubating since 2025, with no product of its own.
Scores
Source: Infrastructure Automation Ledger 2026, edition 2026-10-16. How each score works: methodology.
Pros
No domain scores 4 or higher out of 5.
Cons
- AI assistance0/5
- Provisioning breadth0.5/5
- Configuration management depth1/5
What the Ledger says
Metal3 is the Kubernetes-native way to run Ironic, and its scores follow from that: strong bare-metal depth inherited from the engine, a continuous reconciliation model instead of a plan, and nothing outside bare metal. CNCF incubation in 2025 and a steady 2026 release train keep sustainability risk moderate, although the operator is still 0.x and each release has retired a BMC vendor driver. Integrator fit is the weakest in the group because nobody sells or certifies it directly. Check that your servers are on the regularly tested list (iDRAC 8+, iLO 5+, generic Redfish) before planning around it.
Metal3 has no AI features. Agents can drive it through the Kubernetes API like any operator, and the only AI in the project is a code review plugin for its own pull requests.
Capability by area
Buying, lock-in and release record
Buying and licence (commercial risk)(lower is better)
- Maintainer concentration2.5
- Led by Ericsson and Red Hat; 57 organisations contributed during the sandbox phase (secondary)
- Backer health1.5
- CNCF Incubating since 2025-08; adopters named include SUSE, Ericsson, Red Hat, Fujitsu and Ikea (secondary)
- Licence-change risk0.5
- Apache-2.0 under the CNCF
- Abandonment signs1
- Steady releases through 2026; BMO 0.14.2 on 2026-10-15
- Security response2
- Process not read and no advisory record collected
Technical lock-in(lower is better)
- Formats1
- Kubernetes YAML
- Export path2
- Plain YAML; the Ironic underneath can be driven standalone, but no exporter exists
- Stack coupling2.5
- Needs a Kubernetes management cluster and Ironic
- Hardware / cloud coupling0.5
- Servers with IPMI or Redfish; offline capable
- Skills and tooling coupling2
- Kubernetes and Cluster API skills
Release credibility
- Cadence3.5
- Two to three minors a year (CAPM3 1.13.0 on 2026-05-18, 1.14.0 on 2026-09-09) with regular patch releases; no published schedule
- Roadmap transparency3.5
- Public documentation, version support table and open tracker; no dated roadmap
- Say-do3
- Few commitments to check; the v1beta2 API landed in 1.14
- Velocity3
- Several features per BMO minor
- Lifecycle stability2.5
- Two minors supported; the operator is still 0.x; BMC vendor drivers removed in 0.12 and 0.13
Partners and services
- Partner programme openness1
- None; vendors embed the project
- Multi-tenancy and self-service1.5
- Kubernetes namespaces and RBAC only
- API and infrastructure-as-code3.5
- Kubernetes API and Cluster API provider
- Skills and certification1.5
- None found beyond general Kubernetes training
Alternatives to Metal3
Questions about Metal3
Is Metal3 any good?
Metal3 ranks #25 of 28 infrastructure automation tools in the Infrastructure Automation Ledger 2026, with a Ledger Index of 43.9 out of 100. Its weakest are ai assistance, provisioning breadth, configuration management depth.
What are the best alternatives to Metal3?
The closest by Ledger Index are Digger (42.8), Cinc (41.6), Salt (47.5), MAAS (47.6).
How is Metal3 licensed and sold?
Led by Ericsson and Red Hat; 57 organisations contributed during the sandbox phase (secondary).
How much lock-in does Metal3 bring?
Metal3 scores 8 out of 25 on technical lock-in (lower is better). Export path: Plain YAML; the Ironic underneath can be driven standalone, but no exporter exists.
User reviews of Metal3
No reviews yet
Be the first to say how Metal3 worked for you.
Write a review
No account needed and no email asked. We read every review before it appears and remove adverts, spam and personal attacks.