CIQ has introduced CIQ Stratum Kubernetes Engine (SKE), an open-source Kubernetes distribution that bundles the components needed to install and operate a cluster into a single signed binary. The company says the package is intended to reduce the work involved in deploying Kubernetes across Linux, high-performance computing and GPU environments.
SKE is available in technical preview, with general availability expected November 5. It is free under the Apache 2.0 license. CIQ is also preparing Stratum Pro, a paid subscription that adds fleet management, security features and support. The company has not yet announced pricing for the commercial tier.
A bundled approach to Kubernetes operations
Production Kubernetes depends on multiple connected projects for functions such as networking, storage, security, monitoring and scheduling. Those projects have separate configurations and release schedules, creating operational work as teams deploy, maintain and upgrade clusters. CIQ says SKE packages around 10 upstream projects together, pinning and testing components as a set to limit version drift.
The distribution is built from unmodified upstream code by the team behind Rocky Linux. Rather than requiring separate steps to assemble and configure the components, administrators can use the same binary to install, join and upgrade clusters. CIQ describes the package as suitable for both local development and production deployment, though organizations will still need to configure their environments and manage access according to their requirements.
SKE includes rolling upgrades that check node health as the process proceeds and roll back a node when it fails. The system takes etcd snapshots every 12 hours by default; etcd stores Kubernetes cluster configuration and state. Certificates are renewed before expiration, and each release is signed and accompanied by a software bill of materials.
The package also includes a web dashboard for viewing pods and logs and accessing a shell. CIQ says SKE can run on Enterprise Linux 9 or later, including Rocky Linux, RLC Pro AI and RLC Pro Hardened, on amd64 and arm64 systems. It does not require customers to adopt a separate operating system supplied by CIQ.
AI-agent access is permission-tiered
SKE includes a Model Context Protocol (MCP) server that allows AI agents to interact with a cluster through tools governed by operator-defined permissions. The 37 tools are organized into read, write and destructive tiers. Tools beyond the enabled tier are not registered, while Kubernetes access controls continue to apply to calls that are available. CIQ says secrets remain inaccessible to agents.
An AGENTS.md file provides guidance for agent-assisted installations, and the product documentation is available in llms.txt format. The approach gives operators a way to permit selected automation without granting an agent unrestricted access to cluster operations. It does not remove the need to determine which actions are appropriate or to configure the underlying access controls.
CIQ positions the agent features alongside a broader effort to make a cluster easier to reproduce across development and production. The company says the same SKE binary can run on a developer’s machine and in a cloud environment, allowing teams to use a common deployment package as they move workloads between those settings.
Free distribution and commercial fleet tier
The free SKE edition is designed to operate a single cluster and includes the web interface. Stratum Pro is aimed at organizations managing multiple SKE clusters, including GPU and general-purpose fleets, through a shared interface and sign-on. Its planned features include an application catalog, CIQ support and an optional CIS hardening profile with checks for individual controls.
For fleet connectivity, CIQ says the Stratum Pro agent makes outbound connections, so managed clusters do not need inbound ports opened for that connection. Cluster API-based provisioning is planned for a later release, rather than included as an available feature at launch.
SKE is designed to work alongside CIQ products including Warewulf Pro for node provisioning, Fuzzball for HPC and AI workflows, and Ascender Pro for automation. CIQ says those products can also be used independently. The distribution is available through CIQ Depot and the CIQ Portal, with one binary for each supported architecture and public documentation.
The operational challenge is reflected in a 2026 industry survey of 785 Kubernetes decision-makers cited by CIQ: 62% said complexity was slowing business initiatives, while 65% reported running air-gapped clusters. Those figures point to the varied environments SKE is intended to address, but do not establish how the new distribution will perform across them. Its technical preview gives teams an opportunity to evaluate the packaging and lifecycle features before the stated general availability date.
