W'xOps
W'xOps is an internal developer portal for teams that already run Kubernetes, with self-hosted deployment on a hub Kubernetes cluster.
What W'xOps is
W'xOps is an internal developer portal for teams that already run Kubernetes, with self-hosted deployment on a hub Kubernetes cluster. Its searchable service catalog reads Backstage-compatible YAML from a gitops-infra repository without requiring a database or catalog server. Pinniped group membership supplies identity, while Kubernetes RBAC controls what users can see on spoke clusters. The portal avoids direct Kubernetes writes: configuration changes go through Gitea pull requests and ArgoCD sync. A scaffold wizard previews generated manifests, creates a service repository and deployment configuration, and opens a pull request. Lifecycle promotions are role-gated and PR-driven, with platform-team review at later stages. Darlane supports on-demand parallel debug deployments alongside live workloads. The portal can write to Vault but cannot read secrets back or delete secret paths; write actions are logged as structured JSON to stdout. The catalog supports Component, API, Resource, System, Group, User and Doc kinds, but not Location or Template kinds. W'xOps includes a CLI and API reference, and the documentation says it is open source from version 0.6.x. Pricing is on request; enterprise deployment image access is granted case by case.
Good
- Self-hosted portal runs on a Kubernetes cluster
- Catalog reads Backstage-compatible YAML
- Configuration changes go through pull requests and GitOps sync
- Write actions are logged as structured JSON
- Open source from version 0.6.x
Watch out
- Requires a Kubernetes environment
- Lacks a broad third-party plugin ecosystem
- Location and Template catalog kinds are not implemented
- Enterprise image access is granted case by case
Who it suits
W'xOps suits teams already operating Kubernetes, especially those that need data to stay within their infrastructure. It may not suit teams that do not plan to run Kubernetes or need a broad third-party plugin ecosystem.
Verdict
W'xOps offers a Kubernetes-centered portal with catalog, scaffolding and role-gated workflows while keeping configuration changes in reviewed pull requests. Its Kubernetes requirement and limited plugin ecosystem are important fit considerations.
The facts
Each one read from W'xOps's own pages, with the date it was checked.
What it does
- Audit
- The documentation says write actions are logged as structured JSON to stdout, including scaffolding, Vault writes, and promotions.checked 8 Oct 2026
- Availability
- The deployment guide says the portal image is in a private registry and access is granted case by case for enterprise deployments.checked 8 Oct 2026
- Catalog limits
- The catalog supports Component, API, Resource, System, Group, User, and Doc kinds; Location and Template kinds are not implemented.checked 8 Oct 2026
- CLI and API
- The documentation provides a wxops command-line interface and an API reference.checked 8 Oct 2026
- Cluster security
- The portal does not write to Kubernetes; configuration changes go through Gitea pull requests and ArgoCD sync.checked 8 Oct 2026
- Debugging
- Darlane provides on-demand parallel debug deployments alongside live workloads, with role gating and copyable kubectl and mirrord commands.checked 8 Oct 2026
- Deployment
- W'xOps is described as a single Go binary with an embedded Next.js frontend and no database, cache, or message queue.checked 8 Oct 2026
- Identity
- W'xOps derives permissions from Pinniped group membership and uses Kubernetes RBAC to control what users can see on spoke clusters.checked 8 Oct 2026
- Integrations
- The documented platform ecosystem includes Gitea, ArgoCD, Crossplane, Vault, Pinniped, and Kubernetes.checked 8 Oct 2026
- Intended users
- The maker says W'xOps is suited to teams already running Kubernetes, especially those that need data to stay inside their infrastructure.checked 8 Oct 2026
- Lifecycle promotion
- Lifecycle promotion is PR-driven and role-gated, with platform team review for later stages.checked 8 Oct 2026
- Limits
- The maker says W'xOps is Kubernetes-native and may not suit teams without Kubernetes; it also notes that it lacks a broad third-party plugin ecosystem.checked 8 Oct 2026
- Multi-cluster access
- The portal uses Pinniped for shared identity across Kubernetes clusters and derives access from Kubernetes RBAC.checked 8 Oct 2026
- Notable limitation
- The maker says W'xOps may not fit teams that need a broad third-party plugin ecosystem or do not plan to run Kubernetes.checked 8 Oct 2026
- Open source
- The documentation states that from version 0.6.x W'xOps is open source and open for contributions.checked 8 Oct 2026
- Product
- W'xOps describes itself as an internal developer portal for Kubernetes-native teams.checked 8 Oct 2026
- Scaffolding
- The scaffold wizard creates a service repository and deployment configuration through a workflow that previews generated manifests and opens a pull request.checked 8 Oct 2026
- Secret handling
- The maker says the portal does not read secrets, to avoid making it a secret exfiltration path.checked 8 Oct 2026
- Secrets
- The portal can write to Vault but cannot read secrets back or delete secret paths.checked 8 Oct 2026
- Security design
- The maker says the portal does not write directly to Kubernetes; configuration changes go through reviewed Gitea pull requests and GitOps sync.checked 8 Oct 2026
- Service catalog
- The searchable catalog reads Backstage-compatible YAML from a gitops-infra repository and requires no database or catalog server.checked 8 Oct 2026
- What it does
- W'xOps describes itself as an internal developer portal for Kubernetes-native teams.checked 8 Oct 2026
The company
- Maker and location
- The documentation footer identifies the W'xOps Platform Team and says the project is made in Vietnam; it does not state a headquarters or founding date.checked 8 Oct 2026
Alternatives to W'xOps
- 1
Northflank
Free planWebAPILinuxmacOS8.0From $2.70 a month - 2
Wayfinder
Free planWebAPISelf-hosted7.5From £399 a month - 3
Qovery
WebAPILinuxmacOS7.1From $299 a month - 4
Skyhook
Free planWebAPILinuxmacOS7.1From $1 a month - 5
Cycloid
Free planWebAPILinuxSelf-hosted6.9From $45 a month - 6
Port
Free planWebAPIExtension6.9From $30 a month