Capability
In scope
Out of scope
Maturity
Ref.
Cluster lifecycle
EKS, GKE, AKS, self-managed K8s; provisioning, upgrades, node pools, scale-to-zero
Bare-metal provisioning, OpenShift distribution, VMware Tanzu replacement
Tier 1
docs/cluster-lifecycle
GitOps delivery
ArgoCD ApplicationSets, 2,100+ vetted Helm charts, drift detection, pre-merge validation
Flux CD migration tooling, Jenkins pipelines, Spinnaker
Tier 1
docs/gitops
Observability
Prometheus + Thanos, OpenTelemetry pipelines, 2.1B traces/yr processed, SLO burn alerts
Log-only products, RUM/browser telemetry, custom dashboards-as-a-service
Tier 1
docs/observability
Cost & FinOps
Right-sizing, spot orchestration, showback/chargeback, $0.04/pod-hour cap
AWS Cost Explorer replacement, custom invoice parsing
Tier 1
docs/cost
Chaos & resilience
In-house ChaosK engine, game-day scheduling, 14,000+ node failures recovered in 2024
Multi-cloud blast-radius drills, region-level failover
Tier 2
docs/chaos
Security & compliance
SOC 2 Type II, ISO 27001, HIPAA alignment, OPA policies, SBOM, signed releases
FedRAMP authorization, SIEM replacement, custom GRC workflows
Tier 1
docs/security