Platform Roadmap — milestones overview Where we are: the dependencies that cross a roadmap item, and the items with no plan yet.
As of 2026-10-22 · today
done in progress planned waiting on a dependency slipped (target date passed) waits for today Cross-item dependencies
Only milestones joined by a dependency that crosses a roadmap item appear here. A dashed elbow means the lower milestone cannot complete before the upper one; it says nothing about when work starts. Every milestone, with its own item, is on its theme page.
Q3 · 2026 Q4 · 2026 Q1 · 2027 Q2 · 2027 Q3 · 2027 Q4 · 2027 Q1 · 2028 Q2 · 2028 Q3 · 2028 Q4 · 2028 Q1 · 2029 Q2 · 2029 Q3 · 2029 Q4 · 2029 Q1 · 2030 Jul Aug Sep Oct Nov Dec Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec Jan Feb cross-team cross-team cross-team cross-team cross-team cross-team cross-team 02 · Rebuild Existing Services under IaC 2.3 Remaining services rebuilt in waves 2027-01-15 waiting 2.2 2.4 Sweep complete, clean-slate rebuild rehearsed 2027-02-26 · waiting 2.3 03 · Reclaim Wasted Capacity 3.1 Utilisation baseline and reclaim accounting 2026-10-16 slipped 3.3 Services re-provisioned at measured demand 2027-01-29 · waiting 2.3, 3.1 3.5 Taichung IDC retired 2029-06-01 · planned · 0/4 waiting 31.3, 10.4 04 · Declarative Infrastructure Framework 4.1 Cloud resources under Terraform 2026-10-30 · in progress · 2/4 4.2 VMs under Terraform 2027-01-15 · waiting 4.1 4.3 Database infrastructure under Terraform 2027-02-26 · waiting 4.1 05 · Bare-Metal Infrastructure as Code 5.1 Netbox as the hardware source of truth 2026-10-23 5.3 Unattended OS provisioning over iPXE 2027-02-12 · waiting 4.1, 5.2 5.4 Racked to cluster member with nobody logging in 2027-02-26 · waiting 5.3 06 · Database Infrastructure as Code (Database IaC & DBaaS) 6.3 Replication, backup and lifecycle under GitOps 2027-07-16 · planned · 0/4 waiting 4.3 07 · Network Infrastructure as Code 7.1 Netbox holds the network's intended state 2027-01-01 · planned · 0/4 waiting 5.1 7.4 Default-deny segmentation, and network requests as self-service 2028-01-14 · planned waiting 7.3, 22.2 08 · Enterprise-Grade Harvester HCI 8.2 First rack group on L3 fabric 2027-02-12 8.4 Harvester ready to take production traffic 2027-04-09 · waiting 8.2 8.3 All server racks on L3 fabric 2027-05-21 · waiting 8.2 09 · KVM to Harvester Migration 9.1 Harvester fixed as the default destination for rebuilds 2027-04-23 · planned · 0/4 waiting 8.4 9.2 VM workloads rebuilt on Harvester and cut over 2027-10-08 · planned · 0/4 waiting 2.3, 4.2, 9.1 9.4 Retired KVM hosts reinstalled as Harvester nodes 2028-04-07 waiting 5.4, 9.3 10 · DNS Architecture Refactoring 10.2 Zone records under Terraform 2027-02-12 waiting 4.1 10.3 Clients cut over, old resolver retired 2027-07-16 · planned · 0/4 waiting 2.3, 10.1 10.4 Taichung Site B decommissioned 2028-01-14 · planned · 0/4 waiting 10.3 11 · Kubernetes cluster migration to the L3 fabric 11.1 L3-mode K8s cluster provisioned 2027-02-19 · waiting 8.2 11.3 Cutover complete, legacy cluster retired 2027-07-16 waiting 8.3 12 · Dynamic Secrets Engine (Vault) 12.1 Vault highly available and audited, with no long-lived root tokens 2026-11-27 · in progress · 1/4 12.2 Database credentials issued dynamically 2027-01-29 · in progress waiting 12.1 12.4 SSH certificates, short-lived and issued per session 2028-01-14 · planned waiting 12.3 12.5 Backstage carries the request and approval; Vault grants without showing 2028-05-19 · planned waiting 12.3, 22.3 13 · Zero-Trust Network Access (NetBird) 13.3 NetBird required for all access; Warpgate brokers the services that 2028-03-10 · planned · 0/5 waiting 12.4, 13.2 14 · Declarative GitOps Continuous Deployment (CD) 14.1 ArgoCD reconciling from Git, SSO on, manual sync closed 2026-11-27 · in progress 14.2 Platform components reconciled, not applied by hand 2027-05-21 · planned · 0/4 waiting 14.1 14.3 Single-application deployment triggered by a merge or a catalog 2027-11-19 · planned · 0/5 waiting 14.2, 22.2 15 · CI/CD Pipeline Optimization 15.5 First canary release on the application clusters 2027-03-21 · planned · 0/4 15.1 Progressive delivery on Kubernetes, with automated rollback 2027-07-16 · planned waiting 14.1, 21.3 15.6 Canary is the default for every service that moves to Kubernetes 2028-02-25 · planned · 0/3 waiting 15.5 15.3 Pipelines on GitLab CI, Jenkins retired 2028-05-19 waiting 15.1 15.4 Artifacts signed at build, verified before deploy 2028-09-08 waiting 15.3, 32.6 17 · Telemetry Collection Infrastructure 17.1 Alloy the only collector, deployed at every source 2026-12-18 · in progress · 1/4 17.2 Every source reporting, or named as an exception 2027-07-16 · planned · 0/4 waiting 3.1, 17.1 18 · Unified Monitoring Platform 18.1 SLIs and SLOs agreed with service owners, starting from none 2027-11-19 · planned · 0/4 waiting 17.2 18.3 Dashboards as code, not clicked together 2028-03-10 waiting 14.2, 18.1 19 · ELK & Pinpoint Migration to Grafana LGTM 19.1 Applications instrumented once, with OpenTelemetry 2027-09-10 · planned · 0/4 waiting 17.1 19.2 Old and new side by side, parity verified per service 2028-05-19 · planned · 0/4 waiting 18.3, 19.1 20 · End-to-End Build Auditing 20.3 Every build and deployment emits an event, from the shared template 2028-09-08 · planned · 0/4 waiting 15.3, 20.2 20.4 Request to deployment answerable as one query 2029-01-12 · planned waiting 20.3, 22.3 21 · Vulnerability Management (DefectDojo) 21.3 SLA policy live and the release gate reads DefectDojo 2027-02-12 · waiting 21.2 22 · Backstage Internal Developer Platform (IDP) 22.1 Backstage online, catalog and identity wired 2026-12-18 · in progress · 2/4 22.2 Templates cover what the backends can provision 2027-09-10 · planned · 0/4 waiting 22.1 22.3 Request and approval are a Backstage flow, recorded 2028-03-10 · planned · 0/4 waiting 22.2 23 · Cogwork Desktop Application 23.1 Cogwork executes a release in the order the ticket sets 2027-05-28 · in progress · 1/4 waiting 24.2 23.3 Cogwork's credential and network path under zero trust 2028-07-14 · planned · 0/3 waiting 13.3 23.2 Cogwork triggers GitLab CI where it triggered Jenkins 2028-09-08 · waiting 15.3, 23.1 24 · Release Ticket System 24.2 The release order is data the executor can rely on 2027-09-10 · planned · 0/4 waiting 24.1 24.3 Triggering moves to GitLab CI as Jenkins retires 2028-09-08 · planned · 0/4 waiting 15.3, 24.2 25 · Application Containerization 25.1 The paved road exists: base images, chart and CI templates 2027-05-21 · planned · 0/4 waiting 32.2 25.2 Applications reach the container-ready conditions 2028-02-25 · planned · 0/5 waiting 25.1 25.5 Every application removes its sticky-session dependency 2028-02-25 · planned · 0/4 26 · Application Migration to Kubernetes 26.7 goods API Phase 11–12 cut over by canary 2027-03-21 · planned waiting 26.4, 15.5 26.1 Migration waves planned from the 25.2 classification 2028-02-25 · planned · 0/7 waiting 25.2, 25.5 26.2 Stage 2 through GitOps, cut over by canary, VM retired 2028-12-10 · planned · 0/5 waiting 26.1, 15.6 30 · API-First Data Access 30.2 The contract is written before the code, and CI blocks a breaking change 2027-09-10 · planned · 0/5 waiting 30.1, 22.1 30.5 A new direct grant cannot be issued 2029-01-12 · planned waiting 12.2, 30.1 31 · Disaster Recovery Automation 31.1 Service tiers, recovery objectives and recovery order recorded 2027-07-16 · planned · 0/4 waiting 2.4 31.3 A whole-estate rehearsal against a cold target, timed 2028-12-01 · planned · 0/4 waiting 31.2, 6.3, 8.4, 12.1 32 · Unified Artifact Management 32.2 Repositories, identity and private access under IaC 2027-03-21 · waiting 32.1, 4.1 32.6 Every pipeline, developer machine and host cut over 2028-01-14 · planned · 0/7 waiting 32.4, 32.5 today Unplanned items
Roadmap items with no milestone yet. They are neither done nor in progress; the team either adds milestones or states that the item is out of this half-year.
Themes