Oracle Cloud Native Environment: On-Prem Kubernetes Ledger

Part of the On-Prem Kubernetes Ledger (edition 2026-10-13). How the scores work: methodology.

1. Snapshot

Tier: Niche
Owner: Oracle Corporation, public company
Licence model: Open-source CLI (UPL-1.0) and catalog; supported at no extra cost with an Oracle Linux Premier Support subscription
Products scored: OCNE 1.0 to 1.9 (olcnectl) until 2024-08; OCNE 2.0 to 2.4 (ocne CLI, OCK images, Cluster API providers) from 2024-09
Latest release: OCNE 2.4.0, 2026-09-16 (Kubernetes 1.34 and 1.35); CLI patch v2.3.3 on 2026-04-15
Next signal: No dated roadmap; Kubernetes 1.36 not supported yet (issue 525); vSphere and KubeVirt Cluster API providers requested since 2024-09-23
Archetype: Image-based Oracle Linux Kubernetes
Evidence grade: B. Lifecycle table, Release 1 and 2 notes, GitHub releases and issues, catalog, CNCF history and NVD read directly; Release 1 day-level dates, support prices and any roadmap were not found.

2. Scorecard

Dimension	Score	Direction
Capability today	49.6 / 100	higher is better
Momentum since end of 2022	+13.0 points	higher is better
Credibility	14.0 / 25	higher is better
Commercial risk	11.0 / 25	lower is better
Technical lock-in	10.0 / 25	lower is better
Integrator fit	9.5 / 20	higher is better
AI leverage	4.0 / 20	higher is better
Ledger Index	50.2 / 100	balanced weights

3. Capability by domain

Scores 0 to 5 against fixed anchors; total is weighted to 100.

Domain (weight)	2016	2019	2022	Today
Install, upgrade and lifecycle (12)	n/a	2	3	3.5
Bare metal, edge and on-prem infrastructure (10)	n/a	2	2.5	3
Multi-cluster and fleet management (10)	n/a	0.5	1	1.5
Networking (10)	n/a	2	3	3.5
Storage and data protection (10)	n/a	1.5	2	3
Security and compliance (12)	n/a	2	2.5	3
Developer platform (8)	n/a	1	1.5	2
Observability and day-2 operations (8)	n/a	1.5	2.5	3
VMs on Kubernetes (VMware exit) (10)	n/a	0	0	2
GPU and accelerator workloads (10)	n/a	0	0	0
Total / 100	not released	25.6	36.6	49.6

Year by year: 2019: 25.6 · 2020: 26.8 · 2021: 26.8 · 2022: 36.6 · 2023: 42.6 · 2024: 47.6 · 2025: 49.6 · 2026: 49.6

What moved the score

Year	Domain	Change	Points	Trigger
2020	Security and compliance	2 → 2.5	+1.2	OCNE 1.2: SELinux option, Kata Containers, OIDC through Keycloak and Dex
2022	Bare metal, edge and on-prem infrastructure	2 → 2.5	+1.0	OCNE 1.5 (2022): Oracle Linux 8 and RHCK, RHEL 8, OCI controller manager
2022	Developer platform	1 → 1.5	+0.8	OCNE 1.5: Helm and Istio modules
2022	Install, upgrade and lifecycle	2 → 3	+2.4	OCNE 1.5 (2022): module-based install, update and upgrade book, Kubernetes 1.23 and 1.24; no published window per version
2022	Multi-cluster and fleet management	0.5 → 1	+1.0	OCNE 1.5: same model, no fleet console
2022	Networking	2 → 3	+2.0	OCNE 1.5: Calico, Flannel, Istio, MetalLB
2022	Observability and day-2 operations	1.5 → 2.5	+1.6	OCNE 1.5: Prometheus, Grafana and Fluentd modules
2022	Storage and data protection	1.5 → 2	+1.0	OCNE 1.5: OCI CSI and NFS
2023	Networking	3 → 3.5	+1.0	OCNE 1.7 (2023): Multus module and Oracle Linux 9; 2.1.1 (2025-03-17) dual stack and Gateway API CRDs; no eBPF CNI
2023	Storage and data protection	2 → 2.5	+1.0	OCNE 1.7 (2023): Rook-Ceph module
2023	VMs on Kubernetes (VMware exit)	0 → 2	+4.0	OCNE 1.7 (2023): KubeVirt module; no templates or migration toolkit found, KubeVirt and vSphere Cluster API providers still open issues
2024	Bare metal, edge and on-prem infrastructure	2.5 → 3	+1.0	OCNE 1.8 (2024-01) ARM; 2.x libvirt, OLVM (2.2.0, 2025-07-17), OCI and bring-your-own bare metal; air-gapped catalog mirroring; no VMware
2024	Developer platform	1.5 → 2	+0.8	OCNE 2.0 (2024-09): Oracle and Artifact Hub catalogs, UI; Verrazzano dropped
2024	Install, upgrade and lifecycle	3 → 3.5	+1.2	OCNE 2.0 (2024-09): ocne CLI, OCK images updated per node, staged updates, backups; 16-month support per release; 1.x needs migration
2024	Observability and day-2 operations	2.5 → 3	+0.8	OCNE 2.0 (2024-09): kube-prometheus-stack, Fluent Operator, cluster dump and analyze
2024	Security and compliance	2.5 → 3	+1.2	OCNE 2.0 (2024-09): immutable OCK image with UEK, Secure Boot toggles; no FIPS, STIG or SBOM statement found
2025	Multi-cluster and fleet management	1 → 1.5	+1.0	OCNE 2.3.0 (2026-01): OLVM Cluster API controller manages every OLVM cluster from Kubernetes; UI per cluster; no fleet policy
2025	Storage and data protection	2.5 → 3	+1.0	OCNE 2.2.0 (2025-07-17) oVirt CSI; Rook 1.19, NFS CSI, ceph-csi operator in the catalog; cluster backup; no application backup

4. Direction, 2023 to 2026

Each item carries one theme and one driver (V vision, C customer need, M market window, U upstream, P portfolio).

Date	Item	Theme	Driver
2024-01	OCNE 1.8: 64-bit ARM hosts and Kubernetes 1.28	D2 Bare metal, edge and infrastructure	C
2024-06	OCNE 1.9: last Release 1 minor, Kubernetes 1.29	D1 Install and lifecycle	U
2024-09	OCNE 2.0: ocne CLI and OCK images replace olcnectl	D1 Install and lifecycle	V
2025-02	OCNE 2.1: OCI cluster upgrades and Kubernetes 1.31	D1 Install and lifecycle	U
2025-03	OCNE 2.1.1: IPv6 dual stack and Gateway API CRDs	D4 Networking	C
2025-07	OCNE 2.2: Oracle Linux Virtualization Manager provider and oVirt CSI	D2 Bare metal, edge and infrastructure	P
2026-01	OCNE 2.3: AI Assistant in the UI and Kubernetes 1.33	D7 AI-assisted operations	V
2026-01	OCNE 2.3: Ingress NGINX, Fluentd and Keycloak deprecated	D12 Packaging and licensing	P
2026-05	Copy Fail kernel flaw fixed in OCK images five days after it entered KEV	D9 Security	U
2026-09	OCNE 2.4: Kubernetes 1.34 and 1.35 together, 385 days after upstream 1.34	D1 Install and lifecycle	U

Centre of gravity: Install and lifecycle (4), Bare metal, edge and infrastructure (2), Networking (1)
Driver mix: Vision 20%, Customer need 20%, Market window 0%, Upstream 40%, Portfolio 20%

5. Credibility: 14.0 / 25

Criterion	Score	Basis
Cadence	3	Releases in 2024-09, 2025-02, 2025-07, 2026-01 and 2026-09 (gaps of 5 to 8 months); lifecycle table lists dates but no cadence is published
Roadmap transparency	3	Release notes and an open GitHub tracker with 292 issues; no milestones, roadmap or direction beyond the docs
Say-do	3.5	8 of 10 requested capabilities shipped within 275 days; KubeVirt and vSphere providers still open after 25 months; Kubernetes 1.34 shipped 385 days late
Velocity	2.5	One or two substantive items per release: OLVM provider, dual stack, AI Assistant; Kubernetes two minors behind after a 273-day median lag
Lifecycle stability	2	Release 1 to 2 broke the architecture, 1.8 and 1.9 are in Sustaining Support, each release has 16 months, Ingress NGINX, Fluentd and Keycloak deprecated

Say-do record, 2023 to 2026: 11 items 2023-2026 from public issues (requests, not promises): 8 shipped (Kubernetes 1.31 in 46 days, 1.32 in 80, 1.33 in 104, 1.34 and 1.35 in 121, OLVM provider in 253, dual stack in 18, Gateway API CRDs in 14, Oracle Linux 10 RPM in 275), 2 pending beyond 24 months (KubeVirt provider, vSphere provider), the 2.3 deprecations not yet executed. Oracle CloudWorld promises were not found.

6. Commercial risk: 11.0 / 25 (lower is better)

Criterion	Score	Basis
Price and licence volatility	2	Included with Oracle Linux Premier Support with no price change found; OCNE 2.0 replaced the platform and removed modules and Verrazzano
Purchase constraints	2	Bought as part of an Oracle Linux Premier subscription per system; free to download and use unsupported
Channel and access	2	Docs, CLI and catalog public; errata and support through Oracle Linux Support and ULN
Owner stability	1.5	Oracle is stable, but OCNE is a small part of the Oracle Linux line and was re-architected once in 2024
Cost of staying supported	3.5	16-month support per release, Release 1 clusters must migrate, 1.8 and 1.9 already in Sustaining Support

Security record of the product itself: No CISA KEV entry for OCNE components and no critical flaw in its own components; CVE-2026-35255 (CLI, CVSS 6.6) was fixed in v2.3.3 on 2026-04-15, 21 days before NVD publication, and Copy Fail (KEV 2026-05-01, upstream kernel) was fixed in OCK images on 2026-05-06, so no deduction.

7. Technical lock-in: 10.0 / 25 (lower is better)

Criterion	Score	Basis
Formats	1	CNCF-listed for 1.24 to 1.33 and 1.35; upstream APIs, Cluster API and Helm
Export path	2	Standard manifests; only a one-way Release 1 to 2 migration is documented
Stack coupling	3.5	Oracle Linux with UEK in the OCK image is required; custom images must use Oracle Linux and UEK
Hardware / cloud coupling	1	Self-hosted with an ephemeral cluster, air-gapped mirroring supported, no mandatory cloud
Skills and tooling coupling	2.5	ocne CLI, OSTree and Ignition skills on top of kubectl

8. Integrator fit: 9.5 / 20

Criterion	Score	Basis
Partner programme openness	2.5	Oracle PartnerNetwork exists; no OCNE-specific programme found
Multi-tenancy and self-service	2	Namespaces, RBAC, Dex and oauth2-proxy; one control plane per cluster
API and infrastructure-as-code	3	ocne CLI with YAML configs, Cluster API providers for OCI and OLVM, Helm catalog; no Terraform provider found
Skills and certification	2	No OCNE certification found

9. AI leverage: 4 / 20

Strand	Today	Latest step
AI workload support	0	none
AI platform stack	0	none
AI-assisted operations	3	2026: OCNE 2.3.0 (CLI 2026-01-14): AI Assistant in the UI with own API key or local Ollama model; explains, generates YAML and runs commands
Agent openness	1	2019: olcnectl and platform API server; later Kubernetes and Cluster API only, no MCP server found

AI say-do: 0 announced, 1 GA unannounced (AI Assistant), 0 preview, 0 pending, 0 dropped; there is no GPU, AI platform or MCP content, and the first-pass DRA, AI operator and MCP claims have no source.

10. Reading

OCNE 2 turns Oracle Linux and Kubernetes into one OSTree image that the ocne CLI stages and updates, with Cluster API providers for OCI and Oracle Linux Virtualization Manager. The record shows steady small releases and a clean public tracker, but a slow Kubernetes cadence (273 days median), no GPU, FIPS or fleet story, and open requests for VMware and KubeVirt providers. It suits Oracle Linux shops that already pay for Premier Support and want the cluster bundled; it is a narrow choice elsewhere.

11. Open questions and evidence caveats

Release 1 release days (1.0 to 1.7) were not found; since=2019 rests on the 1.1 notes upgrading from 1.14.
Support prices and the pricing page were not captured.
No GPU, FIPS, STIG or SBOM evidence: absence is from searches of the docs, catalog and CLI, not from an Oracle statement.
Certification can precede release (1.31, 1.33, 1.35), so lag figures use Oracle and GitHub release dates.