Evaluation Guide

OpenShift alternatives: how to shortlist a replacement for the platform, not just the distribution

Most OpenShift shortlists compare Kubernetes distributions and miss what teams actually bought: a router, a registry, a console, builds, operators and one number to call. This guide sets out the routes teams take, what each one keeps, and the questions that decide between them.

The short answer. If you want what OpenShift gave your teams (clusters, VMs, databases and self-service) without a per-core subscription or a platform team to run it, look at edgeContinuum: standard CNCF Kubernetes, VMs and managed PostgreSQL on your own OpenStack, priced per managed resource. It is the route we build, so we are not neutral; the other three are here so you can check that claim against them.

1. Why teams look past OpenShift

Two reasons come up. The first is the meter: OpenShift Kubernetes Engine, Container Platform and Platform Plus are subscribed per 2 cores or 4 vCPUs across every compute node of every cluster, or per bare-metal socket pair of up to 64 cores, and compact three-node clusters get no special pricing (Red Hat subscription guide). Denser hardware and more clusters reprice the platform. The second is the opinion: Routes, SecurityContextConstraints, the built-in OAuth server, ImageStreams and Source-to-Image builds make OpenShift productive, and also make manifests and habits specific to it.

So the useful first question is which parts of the bundle your teams actually use. If it is only Kubernetes, any route below will do. If it is the whole platform, the shortlist has to be judged on that.

Four routes off OpenShift, and how much of the platform each one keeps
Option 1Another distribution
Databases and VMsStill yours to source and run
A commercial Kubernetes platformRancher, Tanzu, Canonical, Kubermatic, Mirantis
Your servers, kept
Option 2Build it on upstream
The platform teamUpgrades, certificates, on-call: yours
OKD or upstream KubernetesFree software; the operations are not
Your servers, kept
Option 3Open infrastructure, managed layer
edgeContinuum
Self-service, tenancy and managed services
OpenStackVMs beside the clusters, on hardware you choose
Your servers, kept
Option 4Rehost in public cloud
Managed Kubernetes in a public cloudEKS, AKS or GKE; or OpenShift itself as ROSA or ARO
Hardware rented too
Dashed: what the route leaves to your team

2. Option 1: another commercial distribution

SUSE Rancher Prime manages clusters across infrastructure you already have, with Harvester for virtual machines; its subscriptions are sold per 2 cores or 4 vCPUs, or per socket pair, much like OpenShift’s. Canonical Kubernetes is supported through Ubuntu Pro, priced per machine. Kubermatic (KKP) and Mirantis k0rdent both have open source editions with commercial ones on top, and Spectro Cloud Palette and Sidero Omni meter by core-hours and by node. vSphere Kubernetes Service is included in VMware Cloud Foundation, which only makes sense if you are staying on VCF. These change the distribution and the meter; most stop at Kubernetes, so databases, VMs and tenancy stay yours to source.

3. Option 2: OKD or upstream, run by you

OKD is the community distribution OpenShift is built from, now on its 5.0 line over CentOS Stream CoreOS, with community support only. Upstream Kubernetes with Cluster API is the leaner baseline: you choose the ingress, registry, CI and console yourself. Both remove the licence. Neither removes the work: upgrades, certificates, etcd, operator lifecycle and the on-call behind them move to your platform team. The Kubernetes on OpenStack architecture guide lists what a self-built stack contains.

4. Option 3: edgeContinuum, open infrastructure with a managed layer

This is the route that keeps what teams liked about OpenShift and drops what they did not: the per-core meter, the platform-specific APIs and the work of running it. OpenStack runs the virtual machines and gives clusters their compute, block storage and load balancers; edgeContinuum adds the platform on top, connected through OpenStack’s standard APIs:

  • OpenShift clusters become managed CNCF-conformant clusters with hosted or dedicated control planes, in-place upgrades and autoscaling node pools, on standard Ingress and Pod Security Admission rather than Routes and SCCs.
  • OpenShift Virtualization becomes VMs on OpenStack, beside the clusters rather than inside them.
  • The consoles and OperatorHub become one console, API and Terraform provider, plus an application catalog of Helm charts and container apps your teams publish.
  • Databases come as managed PostgreSQL with high availability and version lifecycle handled.
  • Projects and RBAC become organizations, projects, quotas and roles composed from more than two hundred permissions, with usage tracked per tenant.

What you keep from OpenShift: one console, a service catalog and a vendor who owns upgrades and day-two operations. What you drop: per-core licensing, since the subscription counts managed resources (a cluster, a database, a VM), and platform-specific APIs, so manifests and Helm charts stay portable. Image builds and the registry stay in the CI and registry you already run.

It fits best when several teams or clients share the platform, VMs run beside the clusters, and the infrastructure has to stay on-premises, sovereign or air-gapped. See how each OpenShift piece maps, or start a free trial on your own OpenStack.

5. Option 4: public cloud

EKS and GKE charge $0.10 per cluster per hour plus the compute underneath, and AKS has a free control plane tier. If the bundle is what you want, OpenShift itself runs as a managed service: ROSA, operated with AWS, and ARO, operated with Microsoft. Both remove the hardware question. They are usually the wrong answer when data residency, latency to physical sites or steady-state cost dominate, which is often why the clusters were on-premises in the first place.

6. What leaving OpenShift leaves you to rebuild

Move to plain Kubernetes and four things become your problem.

Routes and the router
An ingress layer you chooseHAProxy edge routing came with every cluster. On upstream you pick an Ingress or Gateway API controller and run it.
OAuth server and SCCs
Identity and pod security you configureSign-in, groups and Pod Security Admission policies replace what the control plane did by default.
Registry, S2I and Pipelines
A build chain you now ownThe internal registry, image builds and Tekton pipelines move to the CI and registry you run.
One subscription to call
On-call you now staffUpgrades, certificates, etcd and operator lifecycle land on your rota unless something takes them on.

None of these is a reason to stay. They are the difference between a comparison that holds up in month six and one that does not.

7. Four questions that decide the shortlist

How much of the bundle do you use? Count Routes, S2I, Pipelines, Service Mesh, Serverless and the developer console. If it is three or more, price their replacements before the licence saving. edgeContinuum covers the console, catalog, databases and VMs; builds and the registry stay in your CI.

Where do VMs live? If OpenShift Virtualization carries a real VM estate, decide whether VMs stay on Kubernetes (Harvester, KubeVirt) or move to a virtualization platform beside the clusters. With edgeContinuum they run on OpenStack, beside the clusters, from the same console.

Who runs the platform? OKD and upstream move the work to your team. Commercial distributions keep the software with a vendor but leave operations with you. With edgeContinuum, upgrades, node pool scaling and failed-node remediation are done by the platform.

What does the meter count? Double the cores in a cluster and check what happens to the bill under each option. That one test separates per-core models from per-resource ones: with edgeContinuum the bill does not move, because it counts clusters, databases and VMs.

Several teams, VMs beside the clusters, little appetite to run the platform yourself and a meter that should not follow cores: that is the profile edgeContinuum is built for.

Run standard Kubernetes on your own infrastructure

Managed, CNCF-conformant clusters with VMs and PostgreSQL beside them, priced per managed resource instead of per core. Bring your cluster inventory and renewal date, and our engineers will map it onto the platform.

Frequently asked questions

What are the best OpenShift alternatives in 2026?
For the platform OpenShift gave your teams, edgeContinuum: standard CNCF Kubernetes with VMs and managed PostgreSQL on your own OpenStack, through one console, API and Terraform provider, priced per managed resource instead of per core. If you only need a Kubernetes distribution, SUSE Rancher Prime, Canonical Kubernetes, Kubermatic and Mirantis k0rdent are the usual names; OKD or upstream Kubernetes if your team will run it; EKS, AKS or GKE if the clusters can move to public cloud.
Why choose edgeContinuum over OpenShift?
Three reasons usually decide it. The subscription counts managed resources, not cores, so denser hardware lowers the bill instead of raising it. Clusters are unforked upstream Kubernetes, so manifests, Helm charts and operators stay portable. And VMs, managed PostgreSQL and multi-tenancy with per-tenant usage come in the same platform, running on your own infrastructure, air-gapped sites included.
Is there a free or open source alternative to OpenShift?
Yes: OKD, the community distribution OpenShift is built from, and upstream Kubernetes, plus open source editions of Rancher, Kubermatic and k0rdent. The licence disappears; the cost moves to the team that runs the platform. edgeContinuum sits in between: everything that runs your workloads is open source and unforked (Kubernetes and OpenStack), and the managed layer that operates it is a commercial subscription.
How is OpenShift licensed?
Self-managed OpenShift Kubernetes Engine, Container Platform and Platform Plus are subscribed per 2 cores or 4 vCPUs across all compute nodes, or per bare-metal socket pair of up to 64 cores, with standard or premium support. OpenShift Virtualization Engine, for VMs only, is licensed per bare-metal node. edgeContinuum is a subscription per managed resource, independent of cores, nodes or users.
Can our OpenShift workloads run on standard Kubernetes?
Standard container workloads move essentially unchanged. The work is in the OpenShift-specific objects around them: Routes become Ingress or Gateway API resources, DeploymentConfigs become Deployments, ImageStreams become plain image references, BuildConfigs move to your CI, and SCCs map to Pod Security Admission. On edgeContinuum, workloads are redeployed onto managed clusters, usually namespace by namespace.