Full Platform Capabilities·32+ Production Capabilities

Enterprise Feature Catalog

Explore every capability built into AetherKube across autonomous healing, multi-cluster fleet management, dual-engine AI reasoning, CIS security hardening, and GitOps workflows.

Download v1.0.0 (Windows & Docker)
Showing 32 of 32 enterprise capabilities
Autonomous Operations

Autonomous Healing Engine

Continuous reconciliation that watches pod crash patterns, identifies Exit Code 137 (OOM) and Exit Code 1 crashes, and autonomously applies safe remediation policies within strict cooldown boundaries.

Key Capabilities
  • Dynamic memory burst ceiling mitigation for recurrent OOM pods
  • Configurable cooldown gates preventing cascade restart storms
  • Zero-restart replica rebalancing across surviving healthy nodes
  • Complete auditable remediation timeline exported to cluster logs
Read Documentation
Autonomous Operations

Automated Policy Remediation

Trigger declarative multi-step playbooks when synthetic alerts or Prometheus thresholds breach, eliminating manual on-call runbook execution.

Key Capabilities
  • Declarative YAML playbook engine triggered by Prometheus webhook alerts
  • Automated node cordon and drain workflows on persistent hardware faults
  • Staged rollout rollback upon error budget degradation
  • Dry-run simulation mode before executing active cluster interventions
Read Documentation
Autonomous Operations

Chaos Engineering & Fault Injection

Validate cluster resilience before outages strike. Simulate network latency, packet loss, DNS blackholes, and random pod evictions in controlled environments.

Key Capabilities
  • Configurable blast radius restricting experiments to staging namespaces
  • Simulate split-brain networking and inter-node latency spikes
  • Automated abort switch on production error budget consumption
  • Generates resilience scorecards with architectural recommendations
Read Documentation
Autonomous Operations

Disaster Recovery & Snapshots

Automate etcd cluster state snapshots, PVC volume backups, and 1-click cross-region recovery with cryptographic integrity validation.

Key Capabilities
  • Scheduled encrypted object storage export to AWS S3, Azure Blob, or MinIO
  • Namespace-level and volume snapshot restoration workflows
  • Cross-cloud cluster migration and recovery runbooks
  • Automated recovery rehearsal testing without production interference
Read Documentation
Autonomous Operations

In-Place Component Upgrades

Guided in-place upgrades for cluster components, CoreDNS, CNI plugins, and ingress controllers with pre-flight API deprecation validation.

Key Capabilities
  • Identifies deprecated Kubernetes API versions in running manifests
  • Automated sequential control plane and worker node rollouts
  • Instant rollback on ingress connectivity or probe failures
  • Zero-downtime rolling node surge upgrade coordination
Read Documentation
Multi-Cluster Fleet

Multi-Cluster Fleet Orchestration

Unify disparate Kubernetes clusters across AWS EKS, Azure AKS, Google GKE, Bare-Metal, Kind, and Minikube into a single management plane with live telemetry streams.

Key Capabilities
  • Lightweight outbound WebSocket agent requiring zero public ingress
  • Unified cross-cluster namespace and workload inventory
  • Matrix rollouts deploying releases progressively across regions
  • Multi-tenant RBAC segregation isolating teams and environments
Read Documentation
Multi-Cluster Fleet

Zero-Inbound Mesh Connectivity

Connect air-gapped, on-premise, or private VPC clusters securely back to the operations hub without opening firewall ports or provisioning public IPs.

Key Capabilities
  • Outbound mTLS WebSocket connection initiated by in-cluster daemon
  • Zero LoadBalancer or NodePort infrastructure attack surface
  • Sub-second reconnect resilience on network interface flips
  • End-to-end token rotation with ephemeral cryptographic handshake
Read Documentation
Multi-Cluster Fleet

Fleet Matrix Canary Rollouts

Deploy microservice releases across dozens of regional clusters simultaneously with progressive canary stages and automatic health gating.

Key Capabilities
  • Phased rollouts (e.g. 10% staging -> 50% EU -> 100% Global)
  • Automated deployment pause upon elevated HTTP 5xx or latency spikes
  • Uniform environment variable and config map templating
  • Unified deployment rollout status dashboard across clusters
Read Documentation
Multi-Cluster Fleet

Multi-Tenant Isolation & Quotas

Partition compute clusters safely among engineering squads with strict namespace boundaries, ResourceQuotas, and LimitRanges.

Key Capabilities
  • Enforce CPU, memory, and storage resource consumption ceilings
  • Custom RBAC roles restricting developer actions per namespace
  • Multi-tenant cost attribution and usage tracking
  • Self-service namespace provisioning with automated security guardrails
Read Documentation
AI & Diagnostics

Dual AI: 100% Free BYOK & Instant Cloud AI

Complete flexibility: 100% free forever with Bring-Your-Own-Key (Ollama local, OpenAI, Claude 3.5, Gemini), or Instant Cloud AI with zero configuration required.

Key Capabilities
  • 100% Free BYOK: Run local Ollama offline with zero tokens and zero external calls
  • Instant Cloud AI: Immediate diagnostic reasoning without managing API keys or billing accounts
  • Deterministic fallback: Core cluster operations work 100% offline with zero AI required
  • Zero sensitive credential egress: Prompts are sanitized with strict cluster privacy boundaries
Read Documentation
AI & Diagnostics

Autonomous Platform Advisor

Continuous heuristic engine evaluating cluster topology, alerting on single points of failure, unconstrained pods, and anti-affinity deficits.

Key Capabilities
  • Scans for pods lacking high-availability podAntiAffinity rules
  • Detects stateful workloads without persistent volume claim protection
  • Highlights missing readiness/liveness probe configurations
  • Generates 1-click patch recommendations in clean Kubernetes YAML
Read Documentation
AI & Diagnostics

Live Node & Pod Diagnostics

Instant cluster health checks assessing API server latency, etcd leader elections, kubelet memory pressure, and CNI overlay routing.

Key Capabilities
  • Deep diagnostic evaluation of kube-system infrastructure pods
  • Detects zombie processes, container socket leaks, and inode starvation
  • Network packet round-trip time benchmarks across worker nodes
  • Comprehensive health grade score computed in real time
Read Documentation
AI & Diagnostics

AI Token & Cost Intelligence

Full visibility and cost tracking for all AI Copilot interactions, token budgets, model latency benchmarking, and per-user prompt rate limits.

Key Capabilities
  • Real-time token count metrics and estimated dollar expenditure
  • Compare inference response latency across GPT-4o, Claude, and local Ollama
  • Set enterprise token spend caps per team or namespace
  • Auditable query logs with sensitive data redaction verified
Read Documentation
AI & Diagnostics

Private BYOK & Local Ollama Config

Bring Your Own Key (BYOK) architecture. Configure OpenRouter, Anthropic, OpenAI, Google Gemini, or run 100% offline with local Ollama or vLLM.

Key Capabilities
  • Encrypted local API key storage with zero vendor vendor lock-in
  • Connect to air-gapped local Ollama instances running Llama 3 or Mistral
  • Custom temperature, context window, and system prompt tuning
  • Instant model fallback upon upstream API downtime
Read Documentation
Security & Governance

Security Guardian & Runtime Audit

Continuous runtime threat prevention detecting privileged containers, hostPath volume abuses, hostPID namespace sharing, and root user execution.

Key Capabilities
  • Enforce Pod Security Standards (Privileged, Baseline, Restricted)
  • Detect and block unexpected root execution and capabilities (CAP_SYS_ADMIN)
  • Audit exposed Docker socket mounts threatening host breakout
  • Generates drop-in SecurityContext patches to harden manifests
Read Documentation
Security & Governance

Automated CIS Benchmark Scans

Continuous automated scanning against official Center for Internet Security (CIS) Kubernetes Benchmarks and SOC2 compliance controls.

Key Capabilities
  • Detailed pass/fail breakdown across control plane and worker nodes
  • Evaluates encryption at rest, anonymous auth, and admission controllers
  • Export audit-ready compliance reports in PDF, CSV, and JSON
  • Continuous drift tracking with alerting on compliance regressions
Read Documentation
Security & Governance

Encrypted Key Vault & Secret Sync

Manage credentials centrally with client-side AES-256 encryption and push them securely into target cluster v1/Secret objects with a single click.

Key Capabilities
  • Client-side encryption with zero plaintext logs or unencrypted caching
  • One-click synchronization across multiple regional clusters
  • Secret rotation history and automated expiry warnings
  • RBAC-controlled access policies restricting secret visibility
Read Documentation
Security & Governance

Container Hub & Vulnerability Scanner

Integrated container image inventory that inspects running container digests, detects outdated base images, and scans for critical CVE vulnerabilities.

Key Capabilities
  • Continuous CVE vulnerability scanning against official NVD feeds
  • Flags containers running with :latest mutable tags in production
  • Integration with private registries (ECR, ACR, GCR, Harbor, Docker Hub)
  • Automated image pull secret generation for private clusters
Read Documentation
Security & Governance

Immutable Operations Audit Log

Tamper-evident audit logging capturing every user action, kubectl exec session, secret change, and automated remediation event across the fleet.

Key Capabilities
  • Cryptographically signed chronological timeline of all platform events
  • Records user identity, source IP, affected resource, and action diff
  • Stream audit logs directly to external SIEMs (Datadog, Splunk, Elastic)
  • Compliance-grade retention meeting SOC2 Type II audit standards
Read Documentation
Security & Governance

CloudTrail & Cloud Audit Correlation

Correlate in-cluster pod events with underlying cloud provider API calls (AWS CloudTrail, Azure Activity Log, GCP Cloud Audit).

Key Capabilities
  • Trace IAM role assumption and STS credential generation per pod
  • Correlate security group changes with cluster ingress failures
  • Pinpoint out-of-band node group scaling or deletion events
  • Unified cross-layer timeline uniting Kubernetes and Cloud infrastructure
Read Documentation
Observability

Application Performance Monitoring (APM)

Real-time CPU, memory, network I/O, and disk throughput metrics streamed directly from node kubelets and metrics-server without external agents.

Key Capabilities
  • Live sub-second telemetry graphs for pods, deployments, and nodes
  • Historical resource consumption curves identifying traffic peaks
  • Network interface packet drop and retransmit rate monitoring
  • Zero heavyweight third-party sidecar injection required
Read Documentation
Observability

Real-Time Alerting & Routing

Intelligent alert routing engine that groups noisy pod crash storms, deduplicates alerts, and routes actionable signals to Slack, PagerDuty, or Webhooks.

Key Capabilities
  • Alert deduplication suppressing redundant restart notifications
  • Rich notification cards with root cause summaries and kubectl snippets
  • Configurable severity routing (Info, Warning, Critical)
  • Native webhook integrations with Slack, Discord, Microsoft Teams, PagerDuty
Read Documentation
Observability

FinOps Cost Governance & Right-Sizing

Compare actual CPU and memory utilization against requested resource limits to identify overprovisioned workloads and eliminate wasted cloud budget.

Key Capabilities
  • Namespace and workload cost attribution and over-allocation analysis
  • Automated right-sizing recommendations based on real usage curves
  • Idle pod and orphaned replica detection cutting cloud waste
  • Estimated monthly dollar savings calculated per cluster
Read Documentation
Observability

SLO & Error Budget Management

Define Service Level Objectives (SLOs) and Service Level Indicators (SLIs). Track real-time burn rates and freeze rollouts when error budgets are exhausted.

Key Capabilities
  • Standardized latency and availability SLI metric collectors
  • Real-time burn rate gauges with proactive warning thresholds
  • GitOps deployment freeze hooks on critical budget deficits
  • Detailed historical compliance reporting for stakeholders
Read Documentation
Observability

Distributed Tracing & OpenTelemetry

Visualize distributed request spans across microservices with native OpenTelemetry collector support and trace-to-log correlation.

Key Capabilities
  • End-to-end request latency waterfalls across service hops
  • Pinpoint bottleneck database queries and slow downstream APIs
  • 1-click jump from a failed trace span to exact container logs
  • Support for Jaeger, Zipkin, and OTLP gRPC export formats
Read Documentation
GitOps & Developer Tools

Visual Topology Designer

Interactive visual drag-and-drop canvas to design Deployments, Services, ConfigMaps, and Ingress routes with live Kubernetes YAML manifest generation.

Key Capabilities
  • Bi-directional sync between visual canvas and production YAML
  • Integrated schema validation catching specification errors
  • Export manifests directly to GitOps repositories or local disks
  • Interactive relationship mapping between services and pods
Read Documentation
GitOps & Developer Tools

GitOps Sync & Drift Detection

Continuously audit live cluster state against source control git repositories, flagging manual kubectl interventions and configuration drift.

Key Capabilities
  • Real-time visual diff showing live state vs desired git commit
  • Detect unauthorized manual kubectl edit or patch commands
  • Automated reconciliation reconciling live cluster back to git state
  • Compatible with GitHub, GitLab, Bitbucket, and private SSH repos
Read Documentation
GitOps & Developer Tools

Helm Store & Catalog

Browse, configure, and install popular Helm charts (Redis, PostgreSQL, NGINX Ingress, Cert-Manager) with a clean graphical values editor.

Key Capabilities
  • Pre-configured values schema forms simplifying complex charts
  • Track installed Helm releases, revision history, and rollbacks
  • Add custom internal OCI and HTTP Helm chart repositories
  • Automated chart upgrade notifications upon new upstream releases
Read Documentation
GitOps & Developer Tools

Live Kubernetes Resource Explorer

Sub-second searchable inventory of every resource in your cluster (Pods, Nodes, Services, Ingresses, PVCs, CRDs) with real-time status updates.

Key Capabilities
  • Instant fuzzy search across thousands of workloads simultaneously
  • Detailed inspection of metadata, labels, annotations, and events
  • Direct YAML editor with live validation and dry-run apply
  • Filter by namespace, label selectors, or operational health state
Read Documentation
GitOps & Developer Tools

Live Container Shell & Log Streaming

Secure browser-based interactive terminal exec into running containers and real-time colorized multi-pod log streaming with regex filtering.

Key Capabilities
  • Interactive xterm-compatible terminal into any running container
  • Simultaneous log streaming across all replicas of a deployment
  • Regex search, timestamp formatting, and log download capabilities
  • Strict RBAC logging of all interactive shell commands for audits
Read Documentation
GitOps & Developer Tools

Custom Operational Dashboard Builder

Construct personalized engineering dashboards by dragging and pinning telemetry widgets, log streams, cluster status gauges, and alert feeds.

Key Capabilities
  • Grid layout editor with responsive resizing and customizable widget tiles
  • Pin specific deployments, namespace metrics, or SLO burn rate cards
  • Share custom operational dashboards across team members
  • Full-screen kiosk mode optimized for NOC and operations room monitors
Read Documentation
GitOps & Developer Tools

Fleet Inventory & Resource Reports

Export exhaustive inventory reports summarizing node hardware, CPU core counts, memory capacity, kernel versions, and pod densities.

Key Capabilities
  • Generate comprehensive fleet-wide hardware audit reports
  • Identify nodes approaching maximum pod capacity limits
  • Export structured reports in CSV, JSON, and Excel formats
  • Historical node addition and decommissioning trend analysis
Read Documentation

Need a custom operator feature or custom CRD integration?

Tell us what your platform engineering team needs. We build and prioritize platform features based directly on community and enterprise feedback.

Community & Ecosystem Supported100% Free Software

AetherKube is 100% free and open-source software supported by community backers. No paywalls, ever.