Architecture · Technology

What it runs on.

Oasis Stack is installed above infrastructure that is already running and publishes it as services. This page covers the technologies beneath it, how each one is published, and what Oasis Stack builds versus what it integrates.

See the catalogue Talk to an architect
Runs above
CloudStack, OpenStack, VMware vSphere, Kubernetes, bare metal
Built with
React, FastAPI, PostgreSQL, Kubernetes
Backup and DR
Acronis Cloud and Commvault
Integrations
Validated and functional
What it runs on

The technologies beneath the platform.

Your infrastructure is deployed first. Each technology is connected once and becomes orderable, governable and billable — not merely visible in a dashboard.

Apache CloudStack
CloudStack estates published as compute, network and storage services.
OpenStack
OpenStack projects exposed through the same catalogue and tenancy model.
VMware vSphere
Existing vSphere estates kept in place and offered as self-service, governed services.
Kubernetes
Managed clusters ordered from the catalogue, with policy applied at provisioning.
Bare metal
Dedicated hosts for workloads that cannot share, on the same lifecycle as virtual services.
Storage
Block, object and tiered storage, including Ceph, with backup and DR as catalogue services.
Network
VPC, VPN, load balancing, DNS, CDN and connectivity, modelled per tenant.
GPU
GPU pools offered, metered and governed like any other service.
Databases
PostgreSQL, MySQL, MariaDB, MongoDB and Microsoft SQL Server, as managed services.
The platform stack

What Oasis Stack itself is built with.

The platform is built on open technologies your team can inspect and support.

Interface
React, for the portals and consoles.
Services
Python and FastAPI, behind the REST API.
Background work
Celery with Redis, for provisioning and long-running jobs.
Data
PostgreSQL, for the platform’s own records.
Identity
Keycloak, for sign-in across portals and APIs.
Packaging
Docker and Kubernetes, for how the platform itself is deployed.
How a technology is published

From a technology to a service.

A technology is published when a customer can order it, an operator can govern it and finance can invoice it, without anyone touching the underlying console.

1
Connect
The platform authenticates to the technology and discovers what it can offer.
2
Model
Capabilities become catalogue items with pricing, quotas and policy attached.
3
Govern
Identity, approvals and compliance rules are applied before anything is provisioned.
4
Meter
Usage flows into metering, billing and cost governance like every other service.
What an integration requires

What the platform needs from your estate.

An integration is not a connector dropped on top. These have to be true before a technology can be published as a service.

An API
Something that can create, change and destroy the resource. What can only be provisioned by hand can be catalogued but not automated.
Scoped credentials
Credentials the platform holds with permissions bounded to what it provisions — not a shared administrator account.
Something to meter
A countable unit billing can be derived from: an hour, a gigabyte, a node, a seat.
Tenant attribution
A way to attribute a resource to a tenant, so governance and chargeback can reach it.
A supported release
Integrations are validated against specific releases. Running outside that window is a conversation, not an assumption.
Known failure behaviour
What the technology does when provisioning fails halfway, so the platform can reconcile rather than leave an orphan.
What we build and what we integrate

Every part, and where it comes from.

The platform layer is built by Oasis Stack, with CloudHost products integrated into it. Underneath and beside it, the platform runs on and connects to technology your team may already know, including more than 15 open-source tools across the modules, the stack and the integrations. The ones that shape the architecture are listed here.

Component
Relationship
Role in the platform
Oasis Core
Built by Oasis Stack
Portals, APIs, tenancy, the commercial engine and the federation link
Governance engine
Built by Oasis Stack
Identity, policy and audit applied before provisioning, when the Governance, Security & Compliance module is adopted
VirtueSuite
CloudHost product, integrated
Identity and access management: LDAP, SAML, and single sign-on with Microsoft Entra and Google Workspace; privileged access and key custody controls
Observa
CloudHost product, integrated
The observability stack, including the wellness dashboard
Oditr
CloudHost product, integrated
Compliance as a service
CloudSouq
Built by Oasis Stack
The marketplace storefront on the operator’s catalogue
AppLite
Built by Oasis Stack
Secure application delivery with no VPN
Helpdesk
Built by Oasis Stack
Support cases tied to the service and the tenant
Amin and Noura
Built by Oasis Stack
Operations intelligence and customer guidance
Apache CloudStack
Open source, integrated
Compute, network and storage services
OpenStack
Open source, integrated
Projects exposed through the same catalogue and tenancy model
Kubernetes
Open source, integrated
Managed clusters ordered from the catalogue
Ceph
Open source, integrated
Storage that can take over the storage layer
OpenBao
Open source, integrated
Secrets management and HSM-backed key custody
Grafana, Prometheus and Wazuh
Open source, integrated
Inside Observa: monitoring and security signals
VMware vSphere
Commercial platform, integrated
Existing estates kept in place and offered as governed services
Acronis Cloud and Commvault
Commercial platform, integrated
Backup and disaster recovery, including recovery to a public cloud
SAP
Pre-built connector
ERP: invoices, revenue and settlement
Stripe and Paymob
Pre-built connector
Payment collection
Other ERP, CRM, service desk and carrier systems
External systems, through the REST API
Orders, invoices, customers and incidents
Platform stack
Open source, the build stack
React, Python and FastAPI, Celery and Redis, PostgreSQL, Keycloak, Docker and Kubernetes
Public clouds
Oasis Multi-Cloud
Managed in the same platform through Oasis Multi-Cloud

Every integration listed is validated and functional. Supported versions are confirmed for your deployment during design.

Integrate once. Reach every Oasis cloud.

Bring us your estate and your systems.

We will map what you run today against the catalogue it could become, and where each system connects.

Talk to an architect View technical resources