Roadmap
This document provides a high-level view on our product roadmap for this and upcoming quarters.
It is divided up into things we are currently working on Now, what we’ll be looking at Next and things we will be looking into at a Later point in time.
What we’re working on now
Incremental rollout for resource definitions changes
Resources often require maintenance work once they are active, ranging from simple security patches to complex network refactoring. Today, platform teams needing to roll out changes need to manage granular matching criteria on their target resource definition until all active resources have been updated. This feature aims to allow Platform Teams rolling out changes to do so on an active resource by active resource basis without having to update fine grained matching criteria. This will give both Development and Platform teams greater control and visibility on how changes to active resources are rolled out.
What we’re working on next
Generic IaC driver
Humanitec provides a single IaC driver for the last open source version of Hashicorp Terraform v1.5.7. Increasingly there is demand for drivers for other IaC such as OpenTofu, Cloud Formation or Pulumi. A Generic IaC driver would provide much of the plumbing for running IaC in a driver while allowing Platform Engineers to plug in their IaC tool of choice. This significantly reduced the cost of using IaC other than Hashicorp Terraform v1.5.7 with the Platform Orchestrator by removing the need to develop and maintain a custom driver.
Infrastructure provisioning for non-k8s runtimes
While it would be ideal to focus infrastructure provisioning only on one runtime, this is not the reality most companies operate in. It usually is a mix of legacy solutions, different technologies that are better suited for different use cases, or an in-between state of cloud migration. Adding infrastructure provisioning for non-k8s runtimes to the Platform Orchestrator will increase Platform Teams’ understanding and control over their entire infrastructure landscape, not limiting it to Kubernetes only.
What we’ll be looking at later
Finer-grained RBAC
The best practice in managing access control is the “Principle of Least Privilege” (POLP). The idea is that any user of a system should only have the minimum set of permissions necessary to do their job. We plan on extending the Platform Orchestrator’s RBAC system to better fit users’ jobs and make following POLP easier.
Fleet management
Larger deployments of Humanitec use organizations as tenants to manage independent teams. For example, different Product groups within a company might each have their own individual Humanitec Organization. This becomes difficult for Platform Teams to manage as they need to stay on top of multiple Humanitec Organizations. Fleet Management is a series of tools that allow Platform Teams to manage multiple Humanitec Organizations centrally. This will enable them to do things to keep base configurations consistent or roll out updates to infrastructure in a controlled and managed way.