Kubernetes Integration
Skipper carries the same capability spec that ran locally into a Kubernetes cluster, reconciled by an operator that keeps it converged. It lands the reviewed capability.yaml on the third of the Fleet's three surfaces. Available in the Enterprise edition.
A capability is a Kubernetes resource
Skipper is an operator built on the Java Operator SDK and compiled to a GraalVM native binary. It turns a Capability custom resource into every object the engine needs, and keeps enforcing that desired state.
Enterprise
Declare a capability as a custom resource and the operator reconciles the ConfigMap, Deployment, Service, and Secrets that run it on Ikanos.
Spec drift detection
Enterprise
A SHA-256 hash over the spec, its binds, and its imports triggers an automatic rolling restart the moment any of them change — no manual redeploy.
Stop and restart
Enterprise
Annotate a capability to scale it to zero without deleting the resource, then remove the annotation to bring it straight back.
CapabilityClass tiers
Enterprise
Dev, standard, and premium classes drive CPU and memory requests and limits, selected with a single label on the capability.
Secrets and shared consumes
Enterprise
File binds are mounted as Kubernetes Secrets and imported consumes documents as ConfigMaps, so sensitive values never sit in the spec.
Ingress on demand
Enterprise
Tag an expose as public and the operator creates the Ingress; drop the tag and it removes it again.
GitOps delivery and Prometheus observability
Git stays the source of truth and Argo CD does the syncing; Skipper reconciles from there. Declare a control port and the metrics wiring appears on its own.
Enterprise
Applications applied in sync-wave order, plus an ApplicationSet that creates one Application per capability directory in your repository.
Helm install
Enterprise
One OCI chart installs the operator, the CRDs, and the default CapabilityClasses, with least-privilege RBAC included.
Automatic ServiceMonitor
Enterprise
Declare a control expose and Skipper creates the ServiceMonitor, so Prometheus scrapes the capability without extra configuration.
Bundled dashboards
Enterprise
Grafana and Datadog dashboard definitions ship with the operator, on top of the OpenTelemetry traces the engine already emits.
Fleet scale and governance
Where Skipper is going: one console across every cluster, and the same Polychro rules that ran in the IDE enforced at admission time.
Fleet dashboard
Roadmap
Aggregated health, latency, and error rate per capability across every cluster the fleet runs in, from one console.
Kyverno admission
Roadmap
Mirror Polychro governance rules as Kubernetes ClusterPolicies for admission-time enforcement — the same rules that ran in the IDE and CI.
Cost-bounded runtime
Roadmap
Cost-center labelling and OpenCost integration for budget-aware execution with thresholds and alerts.
Continuous compliance
Roadmap
Continuous monitoring against NIST, SOC 2, PCI, and GDPR control sets, evaluated on the running fleet. Naftiko holds no attestation against these frameworks; this is control-set mapping and evidence collection, not certification.
Domains and federation
Roadmap
Aggregate metrics and compliance at the domain level, and federate multiple fleets with cross-fleet discovery and unified governance.
Progressive delivery
Roadmap
Canary and blue/green rollouts, autoscaling from the CapabilityClass, and cross-region failover.
The other two surfaces
Skipper is one of three components that carry the same reviewed capability spec, with its governance intact, onto the surfaces your teams already use.
VS Code Extension
Author and lint capabilities inside the editor developers and their AI copilots already live in — VS Code, Cursor, Windsurf, and Zed. Free in every edition.
Backstage Integration
Turn the Backstage portal your platform team already runs into the golden path for creating, documenting, and cataloguing capabilities.
Ready to run capabilities on Kubernetes?
Skipper is available in the Enterprise edition. Read the operator guide in the Shipyard, or talk to us about a trial.
