Features

Podplane is designed to make deploying a secure container platform easy, with the following features built-in:

• Container Registry stores app and mirrored platform images in object storage for use in your cluster.
• Secrets Management stores encrypted secrets in your preferred backend and securely mount them into workloads.
• Workload Certificates automatically generates and rotates server certificates and SPIFFE SVID client certificates directly in Pods.
• Ingress Certificates automatically generates and rotates wildcard certificates for your ingress domains with ACME e.g. Let’s Encrypt.
• Deployment Templates make it easy to deploy common workload types with one command and an opinionated Helm chart.
• IAM Roles for Pods gives AWS workloads the ability to use AssumeRole to use narrowly scoped IAM identities through kube2iam.
• Local Dev Clusters let you quickly run a single-node Podplane cluster in a local VM.
• Secure Authentication uses OIDC for people, services, and CI jobs to securely access your cluster.
• Role-Based Access Control provides useful built-in roles and group bindings for assigning access to users, instead of having to create every role and binding yourself.
• Cluster State in Object Storage enables support for scaling clusters to zero and makes cluster state backup easy thanks to Netsy.
• Cluster Auto-scaling enables scaling clusters from zero to many nodes, and supports on-demand and spot instances, thanks to Nstance.
• Air-Gapped Support makes it possible to run clusters offline, thanks to dependency and image mirroring to local directories or object storage.
• Multiple Cloud Providers are supported, from public clouds such as AWS and Google Cloud, to private cloud/on-prem with Proxmox support.