Shturval versions
The Shturval platform is available in Enterprise, Enterprise ML, and Community Edition versions. The comparison table below summarizes features and version functionality.
To obtain a license for the Shturval community version, open the chat bot .
| Parameter | CE | Enterprise | Enterprise ML |
|---|---|---|---|
| Installation | |||
| Installation in an open loop | Yes | Yes | Yes |
| Installation in a closed loop | No | Yes | Yes |
| Features | |||
| User support | Community Telegram channel | Per SLA | Per SLA |
| Access to security fixes | Yes | Yes | Yes |
| Minimum fix release time (bug fix, security fix) | With patch/minor release | From two hours | From two hours |
| Feature request option | No commitment | With legal commitment option | With legal commitment option |
| Russian software registry | Not included | Included | Included |
| Resources and updates | |||
| Resource limit | 10 Worker nodes | Per license | Per license |
| Update availability | Available | Included in support package | Included in support package |
| Updates in a closed loop | No | Yes | Yes |
| Scheduled updates | Yes | Yes | Yes |
| Isolated update per k8s cluster | Yes | Yes | Yes |
| Interface and access | |||
| Graphical interface | Yes | Yes | Yes |
| Multilingual interface | Yes | Yes | Yes |
| Swagger access | Yes | Yes | Yes |
| IaC approach | Yes | Yes | Yes |
| Platform support | |||
| Yandex Cloud | Yes | Yes | |
| vCloud Director | Yes | Yes | Yes |
| VMware vSphere | Yes | Yes | Yes |
| oVirt | Yes | Yes | Yes |
| Basis Dynamix | Yes | Yes | Yes |
| OpenStack | Yes | Yes | Yes |
| Physical servers | Yes | Yes | Yes |
| Pre-provisioned virtual servers | Yes | Yes | Yes |
| Hybrid cluster configurations | Yes | Yes | Yes |
| Manage multiple clusters from one platform | Yes | Yes | Yes |
| Create and manage clusters on different k8s versions under one management cluster | Yes | Yes | Yes |
| Disaster-resilient deployment option | No | Yes | Yes |
| Geo-distributed cluster support | Yes | Yes | Yes |
| Cluster and node management | |||
| Workload cluster creation interface | Yes | Yes | Yes |
| Workload cluster node management | Yes | Yes | Yes |
| Create multiple Worker node groups | Yes | Yes | Yes |
| Manage taints/tolerations | Yes | Yes | Yes |
| Vertical node scaling | Yes | Yes | Yes |
| Horizontal node scaling | Yes | Yes | Yes |
| Node autoscaling | Yes | Yes | Yes |
| Manage node configuration with NodeConfigItem | Yes | Yes | Yes |
| Self-healing (machinehealthchecks) | Yes | Yes | Yes |
| Workload management | |||
| Vertical pod scaling | Yes | Yes | Yes |
| Horizontal pod scaling | Yes | Yes | Yes |
| Pod autoscaling | Yes | Yes | Yes |
| Quota management | Yes | Yes | Yes |
| LimitRange management | Yes | Yes | Yes |
| Authentication and authorization | |||
| Built-in authentication provider | Yes | Yes | Yes |
| External authentication providers (Blitz, Keycloak) | Yes | Yes | Yes |
| Run internal and external authentication services concurrently | Yes | Yes | Yes |
| SSO authentication to external services | Yes | Yes | Yes |
| Obtain cluster kubeconfig from the GUI | Yes | Yes | Yes |
| Connect to all available clusters from the CLI | Yes | Yes | Yes |
| Built-in authorization module | Yes | Yes | Yes |
| Connect an LDAP directory (LDAP, LDAPS) | Yes | Yes | Yes |
| Active Directory support | Yes | Yes | Yes |
| OpenLDAP support | Yes | Yes | Yes |
| FreeIPA support | Yes | Yes | Yes |
| SambaDC support | Yes | Yes | Yes |
| ALDPro support | Yes | Yes | Yes |
| Centralized role model (RBAC) | Yes | Yes | Yes |
| Multi-tenancy | Yes | Yes | Yes |
| Network management | |||
| Network management (Cilium CNI) | Yes | Yes | Yes |
| Graphical network policy editor | Yes | Yes | Yes |
| Network list management | Yes | Yes | Yes |
| Manage inbound and outbound namespace traffic | Yes | Yes | Yes |
| HAProxy backend discovery module (CoreHA) | Yes | Yes | Yes |
| Built-in load balancer (Nginx Ingress) | Yes | Yes | Yes |
| Built-in CoreDNS module (NodeLocalDNS) | Yes | Yes | Yes |
| Built-in virtual IP management module (KubeVIP) | Yes | Yes | Yes |
| Pod multi-homing support | No | Yes | Yes |
| External load balancer support | Yes | Yes | Yes |
| Certificate management | |||
| Certificate management | Yes | Yes | Yes |
| ACME certificate support | Yes | Yes | Yes |
| Vault certificate support | Yes | Yes | Yes |
| Corporate certificate support (including step-ca) | Yes | Yes | Yes |
| Let’s Encrypt support | Yes | Yes | Yes |
| Self-signed certificate support | Yes | Yes | Yes |
| Root certificate delivery module (Trust Manager) | Yes | Yes | Yes |
| System certificate rotation | Yes | Yes | Yes |
| Backup and restore | |||
| Backup and restore (Velero) | Yes | Yes | Yes |
| Restore a deleted cluster | Yes | Yes | Yes |
| Logs and monitoring | |||
| Local log collection | Yes | Yes | Yes |
| Centralized log storage | Yes | Yes | Yes |
| SIEM integration support | Yes | Yes | Yes |
| Graphical log display | Yes | Yes | Yes |
| View cluster logs from the cluster GUI | Yes | Yes | Yes |
| Container logs in the pod GUI | Yes | Yes | Yes |
| Filter and export logs | Yes | Yes | Yes |
| Local metrics collection | Yes | Yes | Yes |
| Centralized metrics storage | Yes | Yes | Yes |
| Graphical metrics display | Yes | Yes | Yes |
| Built-in dashboards | Yes | Yes | Yes |
| Upload custom dashboards | Yes | Yes | Yes |
| Resource utilization charts in namespace and workload GUI | Yes | Yes | Yes |
| Namespace metering | Yes | Yes | Yes |
| Continuous application delivery | |||
| Built-in continuous application delivery module (Argo CD) | Yes | Yes | Yes |
| Built-in Argo CD role model | Yes | Yes | Yes |
| Create Argo CD projects from the cluster namespace GUI | Yes | Yes | Yes |
| Argo Rollouts module | Yes | Yes | Yes |
| Workload redistribution module (Descheduler) | Yes | Yes | Yes |
| Connect repositories over http, https, and oci | Yes | Yes | Yes |
| Manage system services (Helm charts) | Yes | Yes | Yes |
| Data storage | |||
| Local storage module (RawFile Provisioner) | Yes | Yes | Yes |
| Ceph FS support | Yes | Yes | Yes |
| Ceph RBD support | Yes | Yes | Yes |
| NFS support | Yes | Yes | Yes |
| oVirt CSI support | Yes | Yes | Yes |
| vSphere CSI support | Yes | Yes | Yes |
| Security | |||
| Container vulnerability scanning module (Trivy Operator) | Yes | Yes | Yes |
| FSTEC BDU scanning | Yes | Yes | Yes |
| Scan images built on Astra Linux | Yes | Yes | Yes |
| Scan images built on RED OS | Yes | Yes | Yes |
| Vulnerability reports at cluster, namespace, and namespace workload levels | Yes | Yes | Yes |
| Analyze k8s cluster components for CIS Benchmark compliance | Yes | Yes | Yes |
| Application configuration analysis module (Kyverno) | Yes | Yes | Yes |
| Advanced security policies | No | Provided in the Service Desk knowledge base | Provided in the Service Desk knowledge base |
| Graphical security policy editor | Yes | Yes | Yes |
| KESL compatibility | Yes | Yes | Yes |
| KCS compatibility | Yes | Yes | Yes |
| Luntry compatibility | Yes | Yes | Yes |
| Machine learning (ML) | |||
| Kubeflow platform | No | No | Yes |
| Lifecycle management with MLflow | No | No | Yes |