IONOS Cloud Managed Kubernetes: Cloud Kubernetes Ledger
IONOS is building a plain, low-cost Managed Kubernetes on its own German cloud, adding an MCP server in 2026 but no GPU pools, fleet or AI features for…
Part of the Managed Cloud Kubernetes Ledger (edition 2026-10-13). How the scores work: methodology.
1. Snapshot
- Tier: European cloud
- Owner: IONOS Group SE, listed in Frankfurt since 2023-02-08; United Internet holds 63.8% (2026-03-31)
- Licence model: Pay as you go; free control plane; nodes billed as Dedicated Core or vCPU servers; optional 1-year and 3-year savings plans
- Products scored: Managed Kubernetes clusters with Public and Private Node Pools in the IONOS Cloud (Frankfurt, Newark, Las Vegas, Lenexa)
- Latest release: Kubernetes 1.35 available 2026-08-28
- Next signal: 1.36 and 1.37 not yet offered; 1.35 end of life 2027-02-28, product end of life TBD
- Archetype: German low-cost basics
- Evidence grade: B. Docs, release notes, status incidents, vulnerability register and CNCF folder were opened; launch date, compliance scope and control-plane SLA were not found.
2. Scorecard
| Dimension | Score | Direction |
|---|---|---|
| Capability today | 41.6 / 100 | higher is better |
| Momentum since end of 2022 | +7.2 points | higher is better |
| Credibility | 14.0 / 25 | higher is better |
| Commercial risk | 6.5 / 25 | lower is better |
| Technical lock-in | 10.0 / 25 | lower is better |
| Integrator fit | 12.0 / 20 | higher is better |
| AI leverage | 4.0 / 20 | higher is better |
| Ledger Index | 49.0 / 100 | balanced weights |
3. Capability by domain
Scores 0 to 5 against fixed anchors; total is weighted to 100.
| Domain (weight) | 2016 | 2019 | 2022 | Today |
|---|---|---|---|---|
| Versions, upgrades and support (12) | n/a | n/a | 1.5 | 2.5 |
| Nodes, autoscaling and compute choice (12) | n/a | n/a | 2.5 | 3 |
| Networking (10) | n/a | n/a | 2.5 | 2.5 |
| Storage and data protection (8) | n/a | n/a | 2 | 2.5 |
| Security and compliance (12) | n/a | n/a | 2 | 2 |
| Observability and day-2 operations (8) | n/a | n/a | 1.5 | 1.5 |
| Multi-cluster, hybrid and fleet (10) | n/a | n/a | 2 | 2 |
| Developer and app platform (8) | n/a | n/a | 1.5 | 2 |
| GPU and AI workloads (10) | n/a | n/a | 0 | 0 |
| Regions, sovereignty and SLA (10) | n/a | n/a | 1.5 | 2.5 |
| Total / 100 | not released | not released | 34.4 | 41.6 |
Year by year: 2021: 29.2 · 2022: 34.4 · 2023: 36.4 · 2024: 38.4 · 2025: 41.6 · 2026: 41.6
What moved the score
| Year | Domain | Change | Points | Trigger |
|---|---|---|---|---|
| 2022 | Networking | 1.5 → 2.5 | +2.0 | Calico with network policies; private clusters behind a NAT gateway documented by 2022-08-16; no LoadBalancer on private pools |
| 2022 | Nodes, autoscaling and compute choice | 2 → 2.5 | +1.2 | Cluster autoscaler per pool documented by 2022-08-16 |
| 2022 | Security and compliance | 1.5 → 2 | +1.2 | ISMS certified to IT-Grundschutz September 2022; private clusters documented; no IAM-to-RBAC mapping or policy tools, C5 Type 1 omits Kubernetes |
| 2022 | Storage and data protection | 1.5 → 2 | +0.8 | CSI driver for block storage (HDD, SSD) with snapshot webhook |
| 2023 | Developer and app platform | 1.5 → 2 | +0.8 | Custom CoreDNS ConfigMap by 2023-05-29; cert-manager DNS webhook 2025-03-25; new DCD interface 2026-09-24; no GitOps or add-on catalogue |
| 2023 | Versions, upgrades and support | 1.5 → 2 | +1.2 | 1.26 to 1.28 made available 174, 119 and 64 days after upstream; end-of-life notices issued before the dates |
| 2024 | Regions, sovereignty and SLA | 1.5 → 2.5 | +2.0 | Regional control planes 2024-04-22; Frankfurt plus three US locations; IT-Grundschutz ISMS; no control-plane SLA found |
| 2025 | Nodes, autoscaling and compute choice | 2.5 → 3 | +1.2 | Dedicated Core or vCPU servers from 2025-04-01; 100 nodes per pool, 5,000 per cluster; no Arm, spot or Windows |
| 2025 | Storage and data protection | 2 → 2.5 | +0.8 | NFS volumes on request, Network File Storage GA 2025-01-07; Velero CSI snapshots are full copies; no managed backup |
| 2025 | Versions, upgrades and support | 2 → 2.5 | +1.2 | Seven supported minors over 2024 to 2025; nodes replaced one by one, new node first; median lag 119 days; 1.36 and 1.37 not offered |
4. Direction, 2023 to 2026
Each item carries one theme and one driver (V vision, C customer need, M market window, U upstream, P portfolio).
| Date | Item | Theme | Driver |
|---|---|---|---|
| 2023-12 | Private Node Pools | D4 Networking | C |
| 2024-04 | Regional control planes | D10 Sovereignty and regions | C |
| 2024-08 | NFS volumes for Kubernetes (German data centres first) | D5 Storage and data protection | P |
| 2025-04 | Dedicated Core or vCPU server types for node pools | D2 Compute and autoscaling | C |
| 2025-12 | Cloud GPU VMs (separate from Kubernetes node pools) | D13 Accelerators | M |
| 2026-06 | MCP server GA with Kubernetes tools | D7 AI-assisted operations | M |
| 2026-08 | Kubernetes 1.35 available | D1 Versions and lifecycle | U |
| 2026-09 | MCP write tools for Managed Kubernetes | D7 AI-assisted operations | M |
| 2026-09 | New Managed Kubernetes interface in the DCD | D6 Developer platform | C |
- Centre of gravity: AI-assisted operations (2), Networking (1), Sovereignty and regions (1)
- Driver mix: Vision 0%, Customer need 44%, Market window 33%, Upstream 11%, Portfolio 11%
5. Credibility: 14.0 / 25
| Criterion | Score | Basis |
|---|---|---|
| Cadence | 3 | Release schedule with dates and monthly release notes, but new minors arrive 64 to 254 days after upstream and 1.36 is missing |
| Roadmap transparency | 3 | Dated release notes, status incident updates and a vulnerability register; no roadmap; promised RCAs not found |
| Say-do | 3 | 5 items: 3 on time, 1 partial (NFS for Kubernetes still on request), 1 late (maintenance pause 64 days) |
| Velocity | 2.5 | About 4 to 7 Kubernetes-specific release-note items a year; few new capabilities |
| Lifecycle stability | 2.5 | End-of-life notices kept, but forced upgrades, a 64-day maintenance pause and 2026 control plane instability |
Say-do record, 2023 to 2026: 5 items 2022 to 2026: 3 on time (custom CoreDNS within 9.5 months, 1.27 and 1.28 end-of-life dates), 1 partial (NFS volumes), 1 late (automated maintenance pause). No public roadmap.
6. Commercial risk: 6.5 / 25 (lower is better)
| Criterion | Score | Basis |
|---|---|---|
| Price and licence volatility | 1 | No fee change found since the 2021 price list; control plane free; node types changed 2023 and 2025 |
| Purchase constraints | 1 | Self-service pay as you go with a 30-day trial; savings plans optional |
| Channel and access | 1 | Self-service sign-up and public pricing; Kubernetes in four locations |
| Owner stability | 1 | Listed company, United Internet holds 63.8%; revenue growing in 2026 |
| Cost of staying supported | 2.5 | Free upgrades but forced upgrade at end of life; product life about 11 to 14 months per minor |
Security record of the product itself: No deduction: the 2026 worker-node admin credential exposure (CVSS 6.5, fixed 2026-08-27) is not cross-tenant per the advisory, so the rule does not apply. One provider-side flaw: worker nodes on 1.33+ exposed an internal administrative credential through cloud-init (no CVE, CVSS 6.5), disclosed to IONOS 2026-07-16 and fixed 2026-08-27; not cross-tenant, counted for the 0.5 deduction. Upstream runc, OpenSSH, CrackArmor and Copy Fail (KEV) advisories were patched by IONOS.
7. Technical lock-in: 10.0 / 25 (lower is better)
| Criterion | Score | Basis |
|---|---|---|
| Formats | 0.5 | Certified Kubernetes (CNCF folders 1.27 to 1.35); Calico only |
| Export path | 2.5 | Velero with CSI snapshots documented, no migration service; outbound traffic from USD 0.09 per GB on the US price list |
| Stack coupling | 2.5 | IONOS block storage classes, contract-level permissions, LoadBalancer only on public pools; components reset at each maintenance |
| Hardware / cloud coupling | 3.5 | IONOS Cloud only; no hybrid or on-premises extension found |
| Skills and tooling coupling | 1 | kubectl, Terraform, DCD or ionosctl |
8. Integrator fit: 12.0 / 20
| Criterion | Score | Basis |
|---|---|---|
| Partner programme openness | 3 | Channel partner programme and ISV programme; partner names not confirmed |
| Multi-tenancy and self-service | 2.5 | Contracts with users, groups and privileges; no organisation or fleet isolation found |
| API and infrastructure-as-code | 4 | Terraform provider 6.1 million downloads (partner-premier), Crossplane, Pulumi, Cluster API provider, SDKs and ionosctl |
| Skills and certification | 2.5 | IONOS Cloud Learn material; no Kubernetes certification found |
9. AI leverage: 4 / 20
| Strand | Today | Latest step |
|---|---|---|
| AI workload support | 0 | none |
| AI platform stack | 0 | none |
| AI-assisted operations | 0 | none |
| Agent openness | 4 | 2026: Official MCP server GA 2026-06-09 with 8 Kubernetes read tools and opt-in write tools with confirmation; runs locally |
AI say-do: 0 dated AI promises found. No GPU node pools or AI assistant for Kubernetes; GPU VMs and AI Model Hub are separate products; the MCP server is the only AI item.
10. Reading
IONOS is building a plain, low-cost Managed Kubernetes on its own German cloud, adding an MCP server in 2026 but no GPU pools, fleet or AI features for clusters. The record shows slow version availability (median 119 days, 1.36 and 1.37 still missing), no control-plane SLA and a run of control plane outages in Frankfurt from March to September 2026. A buyer gets free control planes and German hosting, with one CNI, limited networking on private pools and weaker operations depth.
11. Open questions and evidence caveats
- Launch (GA) date of the service not found; scores start 2021 from the earliest archived product page.
- Control-plane SLA not found; the only IONOS SLA text seen (99.95% for Compute Engine) belongs to IONOS Cloud Inc. and was not opened.
- Compliance scope for Managed Kubernetes not found; C5 Type 1 (2023-11-07) names Compute Engine, Cloud Cubes and S3 only.
- 2026 control plane incidents in Frankfurt: March (etcd resource limit), May (65-hour outage from a configuration filtering defect), June to August (157 and 154 hours); RCAs promised but not found.
- Prices read from the US-served page in USD; EU euro prices not read.
- The 0.5 security deduction for the 2026-07 credential exposure is a judgement: the advisory says it is not cross-tenant.
More from Managed Cloud Kubernetes Ledger 2026
- Overview: all platforms side by side
- Cloud Kubernetes Ledger Methodology: How Every Score Is Built
- Akamai Linode Kubernetes Engine: Cloud Kubernetes Ledger
- Alibaba ACK: Cloud Kubernetes Ledger 2026
- Amazon Elastic Kubernetes Service: Cloud Kubernetes Ledger
- Azure Kubernetes Service: Cloud Kubernetes Ledger
- Civo Kubernetes: Cloud Kubernetes Ledger
- CoreWeave Kubernetes Service: Cloud Kubernetes Ledger
- DigitalOcean Kubernetes: Cloud Kubernetes Ledger
- Google Kubernetes Engine: Cloud Kubernetes Ledger
- Huawei Cloud Cloud Container Engine: Cloud Kubernetes Ledger
- IBM IKS / ROKS: Cloud Kubernetes Ledger 2026
- Open Telekom Cloud Cloud Container Engine: Cloud Kubernetes Ledger
- Oracle OCI Kubernetes Engine: Cloud Kubernetes Ledger
- OVHcloud Managed Kubernetes Service: Cloud Kubernetes Ledger
- Red Hat OpenShift Service on AWS: Cloud Kubernetes Ledger
- Scaleway Kubernetes Kapsule and Kosmos: Cloud Kubernetes Ledger
- STACKIT Kubernetes Engine: Cloud Kubernetes Ledger
- Tencent Kubernetes Engine: Cloud Kubernetes Ledger
- Upstream Kubernetes: Cloud Kubernetes Ledger
- Vultr Kubernetes Engine: Cloud Kubernetes Ledger