Everyday SDLC/DevOps (CI/CD, registry, secrets, K8s)

Why important?

Teams need a build-and-run pipeline: build, deploy, rollback, secrets, containers. If missing, time-to-production and operating cost rise.

How measured?

• 0 = Core DevOps services missing
• 1 = Very limited (basics only), heavy DIY
• 2 = Partially available, key building blocks missing
• 3 = DevOps core (CI/CD, registry, secrets, K8s) available for core scope
• 4 = Strongly integrated + good developer experience, broad scope
• 5 = Very comprehensive + mature + verifiably evidenced (docs/evidence)
• N/A = no reliable evidence

Sources / Evidence

• https://docs.stackit.cloud/stackit/de/secrets-manager-114819469.html
• https://docs.stackit.cloud/products/storage/object-storage
• https://docs.ionos.com/cloud
• https://aws.amazon.com/products/developer-tools/
• https://www.ovhcloud.com/en/architecture-center/
• https://www.ovhcloud.com/en/public-cloud/managed-private-registry/
• https://www.ovhcloud.com/en/identity-security-operations/secret-manager/
• https://registry.terraform.io/providers/exoscale/exoscale/latest/docs
• https://registry.terraform.io/providers/hetznercloud/hcloud/latest/docs
• https://www.scaleway.com/en/security-and-resilience/
• https://www.deloscloud.de/products/portfolio.html

Validation questions (RFP)

• Which CI/CD, registry, secrets, and K8s services are available? What is the developer experience?

Scores comparison