Features & Roadmap

Compliance with the Singapore Government’s IM policies

CStack meets the Singapore Government’s Application Infrastructure Architecture Standard (AIAS) and IM8 requirements. It utilises a default tiered architecture (web, app, data) and adheres to relevant policies for infrastructure, applications, and containers. By using CStack, you will streamline compliance audits for these areas and save time in the process.

Managed platform for internet and intranet applications

With CStack, you can deploy your applications on either the internet or intranet. Using CStack GEN routable clusters, you can enable end users to access your applications by whitelisting your egress firewalls to the platform ingress.

Integration with SGTS products for end-to-end development workflow/tooling

CStack integrates with SHIP-HATS for source code management and CI/CD automation and with StackOps for centralised monitoring by exporting container application logs. All CStack components are accessible through SSO via TechPass and connectivity via SEED.

Out-of-the-box CI pipeline for building, scanning and signing container images

CStack includes a base CI pipeline out-of-the-box, enabling you to start CI/CD from day one. This pipeline ensures your container images are scanned and signed, safeguarding against software supply chain threats.

GitOps built-in to automate/reconcile deployments on Kubernetes

CStack features built-in GitOps to minimise issues related to drift and orphaned resources when managing Kubernetes. GitOps enables the CStack platform to automatically synchronise runtime resources with your configuration code by continuously monitoring your code repositories.

Supports custom resource definitions to automate cloud resource configurations

CStack includes custom resources that allow you to configure and deploy cloud services (such as S3 and RDS) through custom Kubernetes manifests. With CStack operators and GitOps integration, the platform automates and maintains the alignment of cloud services with the configuration code in your repositories.

Secure cluster communication that is compliant with Government Zero Trust Architecture (GovZTA) using service mesh technologies

CStack offers an integrated and managed Service Mesh, simplifying the setup of Mutual Transport Layer Security (mTLS) for service-to-service communication. Instead of configuring and maintaining mTLS yourself, you can rely on the CStack platform to handle this for your team.

Read more about GovZTA here.

Monitoring and troubleshooting applications via dashboards/logs and remote access to Kubernetes

From build to deployment, CStack offers all the essential tools and automation. Once your applications are launched on CStack, you can access application logs, which are pushed to StackOps. You can view and search these logs using “managed dashboards” on either CStack or StackOps. For troubleshooting deployments, CStack provides a managed service that allows you to remotely connect from your developer machine to our clusters for executing CLI commands with kubectl.