Sovereignty right through to implementation

Cloud&Heat and Cloudogu build the first open stack from infrastructure to tool.

Technical details:

The unified stack combines four open layers to form a consistently robust architecture:

  • SCS-certified OpenStack infrastructure based on Cloud&Heat Patron, managed via the lifecycle management tool Yaook
  • Kubernetes deployment and management via Tarook
  • Cloudogu EcoSystem as an open-source operating platform with single sign-on, centralised user management and LDAP integration
  • Integrated AI assistant with a configurable provider (on-premises or European cloud)
  • Modular tool stacks, e.g.: project management (Redmine, OpenProject, BlueSpice Wiki), software development (Git server, static code analysis, artefact repository), PMFlex, DevOps, supply chain security
  • LowOps operation: automated monitoring, backups and updates
  • Automated cloud switching for incremental, low-disruption workload migration between infrastructure providers

This architecture is particularly well suited to organisations with high requirements in terms of digital sovereignty, client isolation and interoperability – from the data centre right through to the workstation.

Produced by:

Created using:

Certified integrator

Background

Digital sovereignty does not end with infrastructure. It only reveals its full value where people work with it on a daily basis – in their tools, applications and processes. This is exactly where the collaboration between Cloud&Heat Technologies and Cloudogu comes in: Together, they are unveiling, for the first time, a complete open-source stack that combines SCS-certified infrastructure with a sovereign operating platform for tool stacks – thereby delivering freedom of choice and vendor independence at every level.

SCS-compliant infrastructure provides a reliable, open foundation for cloud services. However, for organisations that wish to operate with true independence, this alone is not enough: As long as the application layer – that is, the tools employees use on a daily basis – remains proprietary or tied to individual providers, autonomy is incomplete. It was precisely this gap that Cloud&Heat and Cloudogu set out to close. The starting point was the The Deutschland-Stack’s demand on „interoperability between operators and providers“ as a minimum criterion for digital sovereignty. It was clear to both companies that such a requirement can only be met with a consistently open stack – from the physical infrastructure right through to the end users.

Procedure

At the heart of the joint approach lies „Cloud&Heat IaaS“ – Cloud&Heat’s SCS-certified infrastructure solution, which has been proven to ensure interoperability, transparency and digital sovereignty in accordance with open standards, and thus forms the foundation upon which the entire stack is built. The infrastructure is operated, amongst other places, at the Dresden site by partner IBH, connected to the DDX Internet exchange point for low-latency data exchange. For Cloudogu, this is precisely what matters: as an operating platform that promises infrastructure independence, SCS effectively means a unified API rather than individual scripts for each cloud provider – a significant gain in maintainability and portability. The aim is to create the conditions for this through the further development of open standards as part of the collaboration. SCS is therefore not only a mark of quality for the infrastructure, but also the technical prerequisite for ensuring that the promise of genuine interoperability for end users can actually be fulfilled.

Result

The combination of both platforms creates, for the first time, end-to-end, verifiable sovereignty: transparency, data sovereignty and interoperability apply not only to the infrastructure, but to the entire stack right down to the end users – and this is evident in day-to-day work. Users log in once and navigate seamlessly across all tools – from project management to documentation and software development – via a unified menu. The menu and single sign-on function identically across all tools without requiring any further configuration, which enhances the ability to switch between tool providers. The integrated AI assistant accesses data from all tools – via a freely configurable provider: organisations decide for themselves whether AI inference runs on-premises or via a European provider. No data transfer to non-European clouds, no dependence on a single model supplier. And should an organisation decide to switch infrastructure providers, automated cloud switching enables an incremental, low-risk migration of workloads – without any disruption to operations and without vendor lock-in. The result is a stack that is not only technically open – but one that makes freedom of choice a tangible reality in day-to-day operations.

Want more details?

Download the full use case with all the background and information!

Further use cases