Managed Cloud Kubernetes Ledger 2026
Ledger
Managed Cloud Kubernetes Ledger 2026
IBM IKS / ROKS: Cloud Kubernetes Ledger 2026
IBM uses ROKS and Satellite to sell managed OpenShift across IBM Cloud, customer sites and other clouds, with IKS as a plain Kubernetes option beside it.
Edition October 13, 20266 min read
Part of the Managed Cloud Kubernetes Ledger (edition 2026-10-13). How the scores work: methodology.
1. Snapshot
- Tier: Enterprise cloud
- Owner: IBM (public company); Red Hat owned by IBM since 2019
- Licence model: Pay as you go: no cluster-management fee; workers billed hourly or monthly; ROKS adds an OpenShift licence per two vCPUs or uses a Cloud Pak entitlement
- Products scored: IKS (upstream Kubernetes, Calico) and ROKS (managed OpenShift) on IBM Cloud classic and VPC infrastructure, with IBM Cloud Satellite for ROKS outside IBM data centres
- Latest release: IKS 1.36 on 2026-06-26; ROKS 4.22 on 2026-09-28
- Next signal: No dated roadmap; tentative end-of-support dates only (IKS 1.36 to 2027-08-01)
- Archetype: OpenShift-first hybrid cloud
- Evidence grade: B. Version tables, release notes from 2019 and costs read from IBM's public docs repositories; SLA terms, incident history, compliance scope and the AI assistant could not be verified.
2. Scorecard
| Dimension | Score | Direction |
|---|---|---|
| Capability today | 69.2 / 100 | higher is better |
| Momentum since end of 2022 | +4.0 points | higher is better |
| Credibility | 15.5 / 25 | higher is better |
| Commercial risk | 6.0 / 25 | lower is better |
| Technical lock-in | 9.0 / 25 | lower is better |
| Integrator fit | 14.0 / 20 | higher is better |
| AI leverage | 7.5 / 20 | higher is better |
| Ledger Index | 62.4 / 100 | balanced weights |
3. Capability by domain
Scores 0 to 5 against fixed anchors; total is weighted to 100.
| Domain (weight) | 2016 | 2019 | 2022 | Today |
|---|---|---|---|---|
| Versions, upgrades and support (12) | n/a | 3 | 3.5 | 3.5 |
| Nodes, autoscaling and compute choice (12) | n/a | 3 | 3 | 3.5 |
| Networking (10) | n/a | 3 | 3 | 3.5 |
| Storage and data protection (8) | n/a | 2 | 3 | 3.5 |
| Security and compliance (12) | n/a | 3 | 3.5 | 3.5 |
| Observability and day-2 operations (8) | n/a | 2.5 | 3 | 3 |
| Multi-cluster, hybrid and fleet (10) | n/a | 1.5 | 3.5 | 3.5 |
| Developer and app platform (8) | n/a | 3.5 | 3.5 | 3.5 |
| GPU and AI workloads (10) | n/a | 2.5 | 3 | 3.5 |
| Regions, sovereignty and SLA (10) | n/a | 3 | 3.5 | 3.5 |
| Total / 100 | not released | 54.4 | 65.2 | 69.2 |
Year by year: 2017: 43.6 · 2018: 43.6 · 2019: 54.4 · 2020: 54.4 · 2021: 60.0 · 2022: 65.2 · 2023: 65.2 · 2024: 67.2 · 2025: 69.2 · 2026: 69.2
What moved the score
| Year | Domain | Change | Points | Trigger |
|---|---|---|---|---|
| 2019 | Developer and app platform | 2.5 → 3.5 | +1.6 | Istio and Knative managed add-ons; ROKS 2019-08 brings the OpenShift console, builds and Routes |
| 2019 | GPU and AI workloads | 1 → 2.5 | +3.0 | GPU VM and bare-metal flavors for workers |
| 2019 | Multi-cluster, hybrid and fleet | 1 → 1.5 | +1.0 | Multizone clusters across three zones; no fleet tooling |
| 2019 | Networking | 2.5 → 3 | +1.0 | Private service endpoint for the master 2019-06, Istio managed add-on GA 2019-11 |
| 2019 | Nodes, autoscaling and compute choice | 2.5 → 3 | +1.2 | Cluster autoscaler 2019-10; GPU and bare-metal flavors |
| 2019 | Observability and day-2 operations | 2 → 2.5 | +0.8 | Diagnostics and Debug Tool add-on 2019-11 |
| 2019 | Regions, sovereignty and SLA | 2.5 → 3 | +1.0 | Six multizone metros plus single-zone data centres |
| 2019 | Security and compliance | 2.5 → 3 | +1.2 | Private-only master endpoint 2019-06 |
| 2021 | Multi-cluster, hybrid and fleet | 1.5 → 3.5 | +4.0 | IBM Cloud Satellite GA 2021-03-01 runs managed ROKS on customer sites and other clouds |
| 2021 | Storage and data protection | 2 → 3 | +1.6 | VPC Block CSI 2021-01, Portworx Backup 2021-05, OpenShift Data Foundation GA 2021-09-15 |
| 2022 | GPU and AI workloads | 2.5 → 3 | +1.0 | VPC GPU flavors and vGPU flavors 2022-09 |
| 2022 | Observability and day-2 operations | 2.5 → 3 | +0.8 | IBM Cloud Monitoring with Prometheus-compatible metrics 2022-06, Activity Tracker; no cost per namespace or upgrade insights |
| 2022 | Regions, sovereignty and SLA | 3 → 3.5 | +1.0 | VPC multizone regions incl. Osaka 2021-02; ROKS sold with 99.99% SLA for regional HA clusters; 13 VPC MZRs today |
| 2022 | Security and compliance | 3 → 3.5 | +1.2 | KMS provider with Key Protect and Hyper Protect, cross-account keys 2022-07, per-service security bulletins; workload identity not found |
| 2022 | Versions, upgrades and support | 3 → 3.5 | +1.2 | IKS minors about 15 months; ROKS OpenShift minors about 2 years at no extra fee; no channels or extended support |
| 2024 | GPU and AI workloads | 3 → 3.5 | +1.0 | L4, L40 and H100 flavors 2024; H200, Gaudi 3, MI300X allowlist only; no GPU sharing or DRA |
| 2024 | Networking | 3 → 3.5 | +1.0 | Secure-by-default VPC security groups 2024-05 and context-based restrictions 2024-11; no eBPF, Gateway API or dual stack found |
| 2025 | Nodes, autoscaling and compute choice | 3 → 3.5 | +1.2 | VPC bare-metal workers 2025-07, OpenShift Virtualization Service GA 2026-06; 500-node limit, no spot, Arm or serverless nodes |
| 2025 | Storage and data protection | 3 → 3.5 | +0.8 | VPC File CSI and Object Storage add-ons; ODF regional DR still preview; no first-party Kubernetes backup service |
4. Direction, 2023 to 2026
Each item carries one theme and one driver (V vision, C customer need, M market window, U upstream, P portfolio).
| Date | Item | Theme | Driver |
|---|---|---|---|
| 2023-07 | Free cluster tier ended | D12 Packaging and pricing | P |
| 2024-02 | NVIDIA L4 and L40 GPU flavors | D13 Accelerators | M |
| 2024-05 | Secure-by-default VPC cluster networking | D9 Security | C |
| 2024-09 | Ubuntu 24 workers GA | D1 Versions and lifecycle | U |
| 2024-10 | H100 GPU flavor | D13 Accelerators | M |
| 2024-11 | Context-based restrictions replace endpoint allowlists | D9 Security | C |
| 2025-01 | Red Hat OpenShift AI add-on on ROKS | D13 Accelerators | P |
| 2025-02 | H200 flavors on allowlist | D13 Accelerators | M |
| 2025-07 | VPC bare-metal worker nodes | D2 Compute and autoscaling | C |
| 2026-06 | OpenShift Virtualization Service GA | D2 Compute and autoscaling | P |
- Centre of gravity: Accelerators (4), Security (2), Compute and autoscaling (2)
- Driver mix: Vision 0%, Customer need 30%, Market window 30%, Upstream 10%, Portfolio 30%
5. Credibility: 15.5 / 25
| Criterion | Score | Basis |
|---|---|---|
| Cadence | 4.5 | Dated release notes several times a week, bi-weekly worker fix packs, version tables with end-of-support dates |
| Roadmap transparency | 2.5 | No roadmap or planned release dates for new minors; direction only through release notes |
| Say-do | 2.5 | 4 of 8 dated beta or allowlist items 2023-2026 reached GA within 12 months (50%); H200, Gaudi 3, MI300X, ODF regional DR stalled |
| Velocity | 3 | One or two substantive features a quarter: GPU flavors, secure-by-default networking, OpenShift AI and Virtualization add-ons |
| Lifecycle stability | 3 | IKS minors 14 to 20 months, ROKS about 2 years; Knative add-on and free tier retired |
Say-do record, 2023 to 2026: 11 items 2023-2026 from beta, allowlist and deprecation notices: 4 delivered within 12 months, 2 shipped with no GA date found, 4 still not GA after 12 months (H200, Gaudi 3, MI300X, ODF regional DR), 1 pending (Headlamp). IBM publishes no roadmap or planned version dates.
6. Commercial risk: 6.0 / 25 (lower is better)
| Criterion | Score | Basis |
|---|---|---|
| Price and licence volatility | 1.5 | No control-plane fee changes since 2023, but free cluster tier removed 2023-07-25 and new-account quotas cut from 2024-01-01 |
| Purchase constraints | 1 | Pay as you go with no cluster fee; no free tier since 2023; ROKS licence or Cloud Pak entitlement |
| Channel and access | 1 | Self-service sign-up and public docs; prices shown in the console catalogue rather than a public price list |
| Owner stability | 1 | IBM is stable and profitable; IBM Cloud is a smaller cloud with a hybrid and Red Hat focus |
| Cost of staying supported | 1.5 | No extended support, but IKS windows of 14 to 20 months and ROKS about 2 years; upgrades free |
Security record of the product itself: None found: no cross-tenant or managed-control-plane flaw specific to IKS or ROKS located in IBM bulletins 2023-2026; bulletins seen cover upstream runc (CVE-2024-21626) and ingress-nginx flaws, with CVE-2025-1974 not applicable because the validation webhook is disabled on managed ALBs.
7. Technical lock-in: 9.0 / 25 (lower is better)
| Criterion | Score | Basis |
|---|---|---|
| Formats | 1.5 | IKS CNCF-conformant 1.24 to 1.36; ROKS workloads use OpenShift APIs such as Routes and operators |
| Export path | 2 | No migration tooling or exit-egress waiver found; Velero and OADP usable |
| Stack coupling | 2 | IBM Cloud IAM and context-based restrictions, IBM ALBs, Calico settings locked, IBM storage classes |
| Hardware / cloud coupling | 1.5 | Satellite runs ROKS on-premises and on other clouds; ROKS workloads move to other OpenShift platforms |
| Skills and tooling coupling | 2 | ibmcloud CLI and IBM resource groups on top of kubectl or OpenShift skills |
8. Integrator fit: 14.0 / 20
| Criterion | Score | Basis |
|---|---|---|
| Partner programme openness | 3.5 | IBM Partner Plus and Red Hat partner network; Kubernetes-specific facts not re-read |
| Multi-tenancy and self-service | 3 | Resource groups, IAM access groups and context-based restrictions; 100 clusters per region quota |
| API and infrastructure-as-code | 3.5 | IBM-Cloud/ibm Terraform provider 32.5 million downloads, REST API and CLI plugins |
| Skills and certification | 4 | Red Hat OpenShift certifications widely held; IBM Cloud certifications |
9. AI leverage: 7.5 / 20
| Strand | Today | Latest step |
|---|---|---|
| AI workload support | 2 | 2024: L4, L40 and H100 flavors GA 2024; newer accelerators allowlist only; no GPU sharing or inference add-on |
| AI platform stack | 3 | 2025: Red Hat OpenShift AI add-on for ROKS 2025-01-21, deployable at cluster creation 2025-02 |
| AI-assisted operations | 0.5 | 2017: No AI-assisted operations for IKS or ROKS verified |
| Agent openness | 2 | 2025: IBM MCP catalogue 2025 lists a Terraform IBM Modules MCP server; no IKS or ROKS MCP server |
AI say-do 2023-2026: 4 accelerator items tracked, 1 GA within 12 months (H100), 3 still allowlist (H200, Gaudi 3, MI300X). The AI story runs through OpenShift AI on ROKS; there is no operator assistant or MCP server for the Kubernetes services.
10. Reading
IBM uses ROKS and Satellite to sell managed OpenShift across IBM Cloud, customer sites and other clouds, with IKS as a plain Kubernetes option beside it. The record shows frequent dated release notes and long support windows, but no roadmap, slower OpenShift version adoption and several accelerators stuck on allowlists. Buyers get a free control plane and OpenShift portability, against a smaller managed feature set and a narrower cloud footprint than the hyperscalers.
11. Open questions and evidence caveats
- ROKS reaches new OpenShift minors about 260 days after the upstream Kubernetes minor (4.13 to 4.22).
- IKS lag rose from 36 to 63 days (1.26 to 1.32) to 65 to 99 days (1.33 to 1.36).
- IKS SLA percentage and the IBM Cloud SLA credit terms could not be read; ROKS 99.99% is a product-page claim.
- No incident history could be checked (status page not readable).
- Free tier removed 2023 and new-account worker quotas cut to 200 from 2024.
More from Managed Cloud Kubernetes Ledger 2026
- Overview: all platforms side by side
- Cloud Kubernetes Ledger Methodology: How Every Score Is Built
- Akamai Linode Kubernetes Engine: Cloud Kubernetes Ledger
- Alibaba ACK: Cloud Kubernetes Ledger 2026
- Amazon Elastic Kubernetes Service: Cloud Kubernetes Ledger
- Azure Kubernetes Service: Cloud Kubernetes Ledger
- Civo Kubernetes: Cloud Kubernetes Ledger
- CoreWeave Kubernetes Service: Cloud Kubernetes Ledger
- DigitalOcean Kubernetes: Cloud Kubernetes Ledger
- Google Kubernetes Engine: Cloud Kubernetes Ledger
- Huawei Cloud Cloud Container Engine: Cloud Kubernetes Ledger
- IONOS Cloud Managed Kubernetes: Cloud Kubernetes Ledger
- Open Telekom Cloud Cloud Container Engine: Cloud Kubernetes Ledger
- Oracle OCI Kubernetes Engine: Cloud Kubernetes Ledger
- OVHcloud Managed Kubernetes Service: Cloud Kubernetes Ledger
- Red Hat OpenShift Service on AWS: Cloud Kubernetes Ledger
- Scaleway Kubernetes Kapsule and Kosmos: Cloud Kubernetes Ledger
- STACKIT Kubernetes Engine: Cloud Kubernetes Ledger
- Tencent Kubernetes Engine: Cloud Kubernetes Ledger
- Upstream Kubernetes: Cloud Kubernetes Ledger
- Vultr Kubernetes Engine: Cloud Kubernetes Ledger