Sovereign architectures emerge as the new mandate for enterprises racing to modernize

As regulatory pressure intensifies and geopolitical uncertainty reshapes technology procurement, enterprises are rethinking control over their entire stack, with sovereign architectures emerging as the defining framework for that effort.

The convergence of VMware migration, Kubernetes ingress modernization and AI governance is forcing organizations to confront all three challenges simultaneously, often with generalist teams stretched across a network redesign of significant scale. The only sustainable path through is a unified architectural approach spanning the full stack, according to Troy Topnik (pictured, left), director of product management, Rancher partners and ecosystems, at SUSE S.A. The goal is to abstract that sprawling complexity behind a single, intuitive interface.

“The finesse is in making a product that can make it easy for a user to consume that complexity,” Topnik said. “That is what we’re trying to do with Rancher — the fact that you can drive your SUSE virtualization clusters and your bare metal RKE2 clusters with the same UI.”

Topnik and Sudeep Goswami (right), chief executive officer of Traefik Labs Inc., spoke with Paul Nashawaty at SUSECON 2026, during an exclusive broadcast on theCUBE, SiliconANGLE Media’s livestreaming studio. They discussed how enterprises are navigating migration, modernization and transformation through a consistent architectural framework, as well as why sovereign architectures are becoming a defining operational requirement. (* Disclosure below.)

Sovereign architectures require a multidimensional approach to AI governance

K3s — SUSE’s lightweight Kubernetes distribution built for edge and resource-constrained environments — and RKE2, its hardened, security-focused enterprise variant designed for on-premises deployments, now both ship with Traefik as the default ingress controller, creating a consistent unified networking layer from the edge to the enterprise core. That expansion has arrived at a critical moment, with the deprecation of the Ingress NGINX controller last year sending many organizations scrambling for a migration path, Topnik noted.

“It was KubeCon last year when it caught a lot of people by surprise — the Ingress NGINX ingress controller was being deprecated, which left a lot of people panicking,” he said. “We knew we had to sort this out for our customers, because they need a good migration path away from what they’ve been using for years.”

The scramble to replace a foundational networking component underscored a broader truth: In an era of intensifying regulatory pressure, organizations can no longer afford architectural dependencies they don’t fully control. Traefik Labs recently published an AI sovereignty maturity model treating sovereignty not as a binary state but as a spectrum across multiple dimensions — control plane location, policy portability, data residency and agentic guardrail enforcement, Goswami noted. With IDC projecting that 60% of organizations with digital sovereignty requirements will migrate sensitive workloads to new environments by 2028, the architectural stakes are rising fast.

“You could be level five sovereign on control plane, but if your policies are still going to the cloud where they’re getting enforced, you’re not level five sovereign,” Goswami said. “It’s a spectrum of capabilities — a spectrum of dimensions.”

Here’s the complete video interview, part of SiliconANGLE’s and theCUBE’s coverage of SUSECON 2026:

(* Disclosure: TheCUBE is a paid media partner for SUSECON 2026. Sponsors of theCUBE’s event coverage do not have editorial control over content on theCUBE or SiliconANGLE.)

Photo: SiliconANGLE