CIQ Stratum SKE Bundles Kubernetes Components for AI and GPU Clusters
CIQ’s open source Stratum SKE packages Kubernetes in one binary, with managed upgrades and tiered access for AI agents.

CIQ Stratum Kubernetes Engine (SKE) takes aim at a persistent Kubernetes operations problem: production clusters depend on a collection of components that each bring their own configuration, dependencies and release schedules. CIQ’s approach is to package those parts into one signed binary, then manage them as a tested set. That could reduce setup and maintenance work for teams running Linux, high-performance computing and GPU infrastructure, though the practical value will depend on how well the package fits their environments.

CIQ, known for Rocky Linux, says SKE is built from unmodified upstream source and brings together around ten upstream projects. The company is pitching it as open source Kubernetes for AI workloads, but the more concrete distinction is its packaging and lifecycle management: one binary installs, joins and upgrades a cluster. The project is in technical preview, with general availability expected November 5. SKE is free under the Apache 2.0 license.

One package, shared lifecycle
Kubernetes complexity tends to accumulate after installation. Networking, storage, security, monitoring and scheduling all need to work together, while clusters may also span multiple Linux distributions or hybrid environments. GPU workloads add another layer of operational demands. When each component follows a separate release schedule, teams must coordinate upgrades and diagnose problems across those boundaries.
SKE’s answer is to pin and test its components together. CIQ says rolling upgrades check node health at each step and roll back a node if it fails. Cluster state is backed up through etcd snapshots every 12 hours by default, and certificates renew before expiration. Each release is signed and includes a software bill of materials.
These features target the upkeep that follows the initial install. A shared component set may make it easier to repeat a known configuration across clusters, while automatic checks and rollback can limit the manual work involved in upgrades. They don’t, by themselves, show how SKE will behave across every supported workload or infrastructure combination; teams will need to assess that in their own environments.
Local development and agent access
CIQ CTO Peter Nelson says the same binary can run Kubernetes on a developer’s desktop and at production scale in the cloud. The product includes a visual interface alongside command-line controls. The intended workflow is to build and test locally, then carry that environment into production without assembling a separate deployment stack.
That workflow also extends to AI agents. SKE includes a built-in Model Context Protocol (MCP) server with 37 tools divided into read, write and destructive permission tiers. Operators choose the highest tier an agent can use; tools above that setting aren’t registered. Kubernetes access controls still apply to tool calls, and secrets remain inaccessible to agents.
An AGENTS.md file provides instructions for agent-led installations, while documentation is available in llms.txt format. A web dashboard offers access to pods, logs and a shell. These controls give teams a way to grant agents bounded cluster access, but the permission design still needs to match how an organization manages credentials and operational changes.
Free SKE and paid fleet management
The free SKE edition runs one cluster and includes the web interface. CIQ Stratum Pro is the commercial tier, intended to manage multiple SKE clusters through the same interface and a single sign-on. It adds an application catalog, CIQ support and an optional CIS hardening profile with checks for individual controls.
Stratum Pro’s fleet agent connects outbound, so clusters don’t need inbound ports for that connection. Pricing is expected at general availability. Cluster API provisioning is planned for a later release, which means teams evaluating the product should distinguish current capabilities from what CIQ has scheduled for later.
The packaging could appeal to teams that want to operate GPU and general-purpose clusters through one management layer. In a 2026 survey of 785 Kubernetes decision makers cited by CIQ, 62% said complexity was slowing business initiatives, and 65% said they ran air-gapped clusters. Those figures describe the survey respondents, not a universal measure of the market, but they point to two use cases where simpler deployment and controlled connectivity may matter.
Linux support and availability
SKE runs on Enterprise Linux 9 or later, including Rocky Linux, RLC Pro AI and RLC Pro Hardened, on amd64 and arm64 systems. That lets teams keep a supported Linux distribution they already use instead of adopting a separate node operating system. CIQ also says SKE can work alongside Warewulf Pro for node provisioning, Fuzzball for high-performance computing and AI workflows, and Ascender Pro for automation; each product can also run independently.
CIQ is entering a field that includes established Kubernetes distributions and cloud services, so a single binary alone won’t settle the comparison. Teams will want to examine upgrade behavior, compatibility with their existing tooling, the boundaries between free SKE and paid Pro, and the level of operational control the package provides. The immediate proposition is specific: fewer separate components to assemble and a common way to install and manage them. General availability and hands-on use will show whether that convenience holds up across real cluster fleets.