Leveraging Kubernetes virtual machines at Cloudflare with KubeVirt

Cloudflare describes its multi-tenant Kubernetes architecture and how it uses KubeVirt to run virtual machines securely alongside containers on bare-metal clusters, enforcing Pod Security Standards and custom policies. The post explains the need for virtualization, KubeVirt’s CRD-based integration with Kubernetes primitives, and several internal use cases—large-scale cluster simulations, persistent developer environments, kernel and iPXE testing, and scalable build pipelines—leveraging Ansible, kubeadm, container disks, and CSI cloning, with plans to expand to ARM64 and streamline VM operations via KubeVirt CDI.