Ecosystem
The tools and infrastructure behind the platform, organized by the capabilities they provide.
Foundation & Runtime
Where platform infrastructure and workloads run.
Traffic & Trust
How requests reach applications and establish trusted connections.

Istio
Service mesh for encrypted workload traffic, gateway routing, and locality-aware load balancing.

agentgateway
AI-native data plane for MCP, agent-to-agent, and LLM traffic.
Authentik
Identity provider for OIDC and authenticated browser access at the gateway.

cert-manager
Automated TLS certificate issuance and renewal for Kubernetes workloads.

Security & Operations
How the platform protects resources and keeps workloads healthy.
OpenBao
Secrets management, dynamic credentials, and PKI certificate issuance.

OPA Gatekeeper
Kubernetes admission policies that prevent non-compliant resources from being deployed.


Datadog
Observability, security monitoring, and cloud cost management.
Nuclei
Template-based vulnerability scanning of platform endpoints and APIs.
Delivery & Developer Experience
How teams build, validate, and deliver platform changes.

OpenTofu
Infrastructure as code across cloud resources and Kubernetes configuration.

Helm
Kubernetes package management for platform components and cluster add-ons.


GitHub Actions
Shared workflows for consistent, auditable deployments using OIDC authentication.

Dependabot
Automated updates for pinned dependencies across platform repositories.
pre-commit
Formatting, validation, documentation, and security checks before commits.
GitHub Copilot
AI-assisted development and team-level agents for platform workflows.
Docusaurus
Platform documentation published through GitHub Pages.
