Governed catalog
Publish approved Crossplane-backed templates with versioning, dependency metadata, source review, and access control.
Crossplane self-service, governed by platform teams
Governed infrastructure delivery without exposing Kubernetes complexity.
cOTTER gives application teams a controlled portal for requesting infrastructure while platform teams retain ownership of templates, credentials, quotas, approvals, audit trails, and recovery.
Backend-owned control plane
Browser actions are mediated through FastAPI, RBAC, tenancy, and audit.
Crossplane-ready workflows
Templates, deployments, agents, and status reconciliation stay connected.
Operational recovery built in
DLQ handling, support bundles, quotas, and health signals support real operations.
What cOTTER does
A self-service layer your platform team can trust.
Project tenancy
Separate teams by project, membership, lifecycle tier, provider, credentials, quotas, and audit scope.
Guided deployments
Turn template schemas and dependencies into guided workflows that hide raw manifests from application teams.
Agent execution
Queue identifier-only jobs to agents that apply resources, observe Crossplane status, and report back through the platform.
Operations timeline
Trace who changed what, when work was queued, and how recovery actions were handled for a deployment.
Recovery controls
Manage blocked deployments, dead-lettered work, reapply flows, support bundles, and health signals from one portal.
Security model
Credentials and cluster power stay server-side.
Frontend code never talks directly to Kubernetes, Crossplane, Redis, RabbitMQ, databases, or cloud provider APIs.
Provider credentials are encrypted at rest and exposed only through backend and agent-secured paths.
Every user action is role-checked, project-scoped, and auditable before it reaches infrastructure.
Built for platform teams
Use cOTTER when the portal matters as much as the infrastructure.
Internal developer platform
Expose approved infrastructure options without teaching every team Crossplane or Kubernetes internals.
Governed cloud access
Give teams controlled deployment rights while centralizing credential handling and template policy.
Supportable managed control plane
Prepare for remote agents, operational visibility, customer-cluster diagnostics, and enterprise support workflows.
Early product
Building a governed infrastructure portal?
cOTTER is being shaped around platform-team operations, not a generic cloud dashboard.