W'xOps

Spec sheet

What it does

W'xOps describes itself as an internal developer portal for Kubernetes-native teams.Read 8 Oct 2026 · docs.wxops.cloud

Product

W'xOps describes itself as an internal developer portal for Kubernetes-native teams.Read 8 Oct 2026 · docs.wxops.cloud

Intended users

The maker says W'xOps is suited to teams already running Kubernetes, especially those that need data to stay inside their infrastructure.Read 8 Oct 2026 · docs.wxops.cloud

Deployment

W'xOps is described as a single Go binary with an embedded Next.js frontend and no database, cache, or message queue.Read 8 Oct 2026 · docs.wxops.cloud

Integrations

The documented platform ecosystem includes Gitea, ArgoCD, Crossplane, Vault, Pinniped, and Kubernetes.Read 8 Oct 2026 · docs.wxops.cloud

Audit

The documentation says write actions are logged as structured JSON to stdout, including scaffolding, Vault writes, and promotions.Read 8 Oct 2026 · docs.wxops.cloud

Availability

The deployment guide says the portal image is in a private registry and access is granted case by case for enterprise deployments.Read 8 Oct 2026 · docs.wxops.cloud

Catalog limits

The catalog supports Component, API, Resource, System, Group, User, and Doc kinds; Location and Template kinds are not implemented.Read 8 Oct 2026 · docs.wxops.cloud

CLI and API

The documentation provides a wxops command-line interface and an API reference.Read 8 Oct 2026 · docs.wxops.cloud

Cluster security

The portal does not write to Kubernetes; configuration changes go through Gitea pull requests and ArgoCD sync.Read 8 Oct 2026 · docs.wxops.cloud

Debugging

Darlane provides on-demand parallel debug deployments alongside live workloads, with role gating and copyable kubectl and mirrord commands.Read 8 Oct 2026 · docs.wxops.cloud

Identity

W'xOps derives permissions from Pinniped group membership and uses Kubernetes RBAC to control what users can see on spoke clusters.Read 8 Oct 2026 · docs.wxops.cloud

Lifecycle promotion

Lifecycle promotion is PR-driven and role-gated, with platform team review for later stages.Read 8 Oct 2026 · docs.wxops.cloud

Limits

The maker says W'xOps is Kubernetes-native and may not suit teams without Kubernetes; it also notes that it lacks a broad third-party plugin ecosystem.Read 8 Oct 2026 · docs.wxops.cloud

Maker and location

The documentation footer identifies the W'xOps Platform Team and says the project is made in Vietnam; it does not state a headquarters or founding date.Read 8 Oct 2026 · docs.wxops.cloud

Multi-cluster access

The portal uses Pinniped for shared identity across Kubernetes clusters and derives access from Kubernetes RBAC.Read 8 Oct 2026 · docs.wxops.cloud

Notable limitation

The maker says W'xOps may not fit teams that need a broad third-party plugin ecosystem or do not plan to run Kubernetes.Read 8 Oct 2026 · docs.wxops.cloud

Open source

The documentation states that from version 0.6.x W'xOps is open source and open for contributions.Read 8 Oct 2026 · docs.wxops.cloud

Scaffolding

The scaffold wizard creates a service repository and deployment configuration through a workflow that previews generated manifests and opens a pull request.Read 8 Oct 2026 · docs.wxops.cloud

Secret handling

The maker says the portal does not read secrets, to avoid making it a secret exfiltration path.Read 8 Oct 2026 · docs.wxops.cloud

Secrets

The portal can write to Vault but cannot read secrets back or delete secret paths.Read 8 Oct 2026 · docs.wxops.cloud

Security design

The maker says the portal does not write directly to Kubernetes; configuration changes go through reviewed Gitea pull requests and GitOps sync.Read 8 Oct 2026 · docs.wxops.cloud

Service catalog

The searchable catalog reads Backstage-compatible YAML from a gitops-infra repository and requires no database or catalog server.Read 8 Oct 2026 · docs.wxops.cloud

Where Specifiction places it

• Internal Developer Portals#24 of 277.2