Editorial take
Why it stands out
Tag namespaces and labels for chargeback—finance will ask which team owns which node pool.
Loading
Tool profile
Container orchestration platform for deploying, scaling, and managing applications across clusters.
Microservices platforms needing independent deploy cadences
Portable orchestration for containers: scheduling, service discovery, autoscaling, and rolling deploys—industry default when you outgrow single VMs.
The Kubernetes project is Apache License 2.0 open source—no per-cluster license to the CNCF codebase. What you pay is cloud economics: managed control plane hourly fees (for example GKE Standard control plane fees per zonal cluster, EKS per-cluster management charges in us-east-1, AKS control-plane models that are often $0 with paying node pools—verify each vendor’s current matrix), plus worker VMs, disks, load balancers, and egress.
k8s.io and each hyperscaler’s Kubernetes pricing page stay authoritative; this entry is the orchestrator, not a single SKU.
Quick fit
Editorial take
Tag namespaces and labels for chargeback—finance will ask which team owns which node pool.
What it does well
Primary use cases
Fit notes
Compare with
Pressure-test this pick against nearby alternatives.
Apache Kafka
Free planEvent streaming and event-driven architectures
Open-source distributed event streaming platform for high-throughput pipelines, pub/sub, and stream-processing ecosystems.
Choose Kafka when replayable event streams and ecosystem breadth matter more than the lightest possible operational footprint.
Pricing snapshot
Kubernetes is open source under the Apache 2.0 license, so the orchestration software itself has no license fee. The real bill comes from managed control plane fees if you use a hosted service, plus worker nodes, storage, networking, load balancers, observability, and the platform engineering time needed to run clusters well.
Arcjet
Free planApplication runtime security
Runtime security toolkit for modern applications and AI systems that helps teams enforce quotas, block bots, prevent prompt abuse, and ship app-level protections in code.
Closer to application-runtime security and abuse-prevention tooling than to classic perimeter appliances.
