SUSE Extends Scope of Kubernetes Management Capabilities With Help From AI Agents
TL;DR — Key Takeaways
- SUSE made its AI Agent Crew generally available in Rancher Prime. Liz, the platform’s AI assistant, routes requests to specialized agents that can troubleshoot Kubernetes workloads and virtual machines.
- SUSE Rancher Prime Virtual Clusters now offers a Hosted Control Plane mode in open beta, enabling platform teams to deliver Kubernetes as a service using RKE2.
- SUSE Application Collection now includes more than 1,000 Python libraries built from verified sources, with software bills of materials (SBOMs) that help teams assess dependencies.
SUSE this week at the KubeCon + CloudNativeCon North America 2026 conference made a bevy of updates to its tools and frameworks for managing Kubernetes clusters, including a set of specialized artificial intelligence (AI) agents that are invoked via a natural language AI assistant dubbed Liz that the company added last year.
Additionally, Liz via an OAuth2 authorization protocol can now invoke Model Context Protocol (MCP) servers to integrate with external tools, AI agents and applications.
SUSE Rancher Prime Virtual Clusters also now supports a beta release of a Hosted Control Plane mode, enabling IT teams to provide Kubernetes as a Service using an RKE2 distribution of Kubernetes.
There is also now in beta a command line interface (CLI) through which IT teams can programmatically test infrastructure updates and an updated version of the SUSE Observability StackPacks that extends the reach of the SUSE Observability platform to third-party platforms and applications.
The SUSE Rancher Prime platform is designed to be deployed on SUSE Linux Enterprise Server, the latest 16.1 version of which now includes a technology preview of a framework based on MCP to give AI agents and tools access. SUSE has also added support for NVIDIA-accelerated infrastructure, expanded Live Patching, post-quantum cryptography (PQC) and software supply chain verification tools.
An upcoming SUSE Security 6.0 release adds a SUSE Security Vulnerability Scanner to identify and prioritize vulnerabilities in deployed workloads and cluster nodes, and SUSE Security Runtime Enforcer to detect and block anomalous workload behavior.
Finally, SUSE Application Collection now includes more than 996 Python libraries built from verified sources, with integrated software bills of material (SBOMs) that enable IT teams to identify dependencies.
Abhinav Puri, vice president and general manager of portfolio and community for SUSE, said the sub-agents added to that platform, dubbed AI Crew, make it possible to assign, for example, a troubleshooting task to an AI agent that has been specifically trained to perform that task. AI agents are not going to replace the need for engineers and other IT professionals to manage Kubernetes environments but they do make Kubernetes more accessible to IT professionals that might not have the engineering expertise that was previously required to manage Kubernetes environments, he added.
The tools and frameworks developed by SUSE are all designed to reduce the time to value when deploying multiple classes of workloads on a Kubernetes cluster, said Puri. That’s critical because the biggest challenge most IT teams face today when it comes to deploying workloads on Kubernetes clusters is a chronic skills gap, noted Puri. That skills gap has become especially pressing at a time when more IT teams are now looking to deploy AI models and applications in on-premises IT environments to reduce costs by becoming less dependent on service providers that charge them for every token used to create an input and output, he added.
There is, of course, no shortage of distributions of Kubernetes that IT teams can adopt. The issue now is determining which one provides the most additional tools and capabilities that IT teams need to successfully manage a fleet of Kubernetes clusters at scale.
Frequently Asked Questions
How does Liz connect to external tools?
Liz now supports OAuth 2.0 for connections to external Model Context Protocol (MCP) servers, giving it access to tools and services such as GitHub or an internal configuration database.
What does the Rancher CLI beta do?
It uses server-side dry runs to validate proposed infrastructure changes and show engineers what would change before they approve them.
What’s new in SUSE Observability?
StackPacks 2.0 is generally available. It lets teams build integrations for third-party tools and use OpenTelemetry data to see how components and services depend on one another.


