13 · 14 OctoberPocteo exhibits at BIGTECH AFRICA 2026 · Cité de la Culture, Tunis. Come and see us.bigtech.africa
Pocteo Platform · fleet management

Manage all your clusters as one fleet. Inventory, policies, versions, access, drift: one cockpit.

Pocteo Platform runs your Prime, Flex, Edge and Metal clusters as a single fleet. Tag a cluster and it is governed, upgraded and watched with the rest.

One inventory of every cluster, wherever it runs
Policies, add-ons, access and versions by tag
Upgrades rolled out tag by tag, drift put back
4kinds of clusters, one fleet
1 tagto govern a cluster
0per-cluster configuration
offlinegovernance still applies at the edge
How it works

Tag. Aim. Converge. Keep.

Auto-plays · click a step
factory-sfax
env=prodsite=factoryteam=ot
tag
$ pke tag factory-sfax env=prod site=factory
tags updated · 3 policies now apply

Any cluster, any product. Tags are the only thing you set per cluster.

Try it

Pick a tag. Watch the fleet.

A policy targets a tag. The clusters that carry it light up, whatever product they run on.

baseline-securitytargetsenv=prod6 of 8 clusters match, across Prime, Edge, Metal
payments-prodPKE Primeenv=prodteam=payments
checkout-prodPKE Primeenv=prodteam=checkout
pr-1428PKE Flexenv=previewteam=shop
pr-1431PKE Flexenv=previewteam=payments
factory-sfaxPKE Edgeenv=prodsite=factory
vessel-tunisPKE Edgeenv=prodsite=vessel
dc-tunis-corePKE Metalenv=prodteam=payments
dc-tunis-batchPKE Metalenv=prodteam=batch

baseline-security: admission rules, network default-deny, monitoring agents. Applied to every match, put back if changed by hand, kept for clusters that join later.

What you can govern

Six things you set once, by tag

privileged podsblocked
unsigned imagesblocked
host networkblocked
Kyvernoenv=prod

The same admission rules on every matching cluster.

Cluster profile

One profile, every layer

A tag selects a profile. The profile describes the whole stack, from the OS to your add-ons, and the fleet keeps every matching cluster on it.

NodesPrime, Flex, Edge or Metal
Operating systemimmutable, signed
Kubernetesversion pinned by tag
Network and add-onsCilium, cert-manager, monitoring
Policies and accessKyverno, SSO, quotas
Your workloadsvia Argo CD
Edge

Governance that reaches disconnected sites

Delivered as signed artifactsOver egress-only mTLS, or the local Git mirror.
Enforced on sitePolicies keep applying for days or weeks without WAN.
Reconciled on reconnectFleet changes made while a site was offline land on return.
One fleet

Four kinds of clusters, the same tags, the same policies

Run your clusters as one fleet

Bring us your inventory. We show you the tags that govern it.