Preview & roadmap features

Cloud Control ships in rounds. Some surfaces exist with representative data while their real engines are built (preview); others are planned but not yet built (on the roadmap). This page states the honest status of each so you never mistake a preview for a shipping feature.

Terraform

Preview. The Terraform screen and a plan/apply drawer exist with representative workspaces and drift indicators. There is no real Terraform/OpenTofu engine, state backend or drift detection yet — plan/apply does not touch real infrastructure.

Pipelines

Preview. The Pipelines screen shows freight and stage visuals. There is no builder wizard, real runners, deployment strategies or YAML sync engine behind it yet.

Git connections

The Git-connections screen connects real GitHub, GitLab and Bitbucket repositories with a personal access token (stored encrypted, never echoed). Until you connect a repository the screen shows an empty state — there is no demo data.

AI assistant

The assistant overlay is wired to a real OpenAI-compatible model (Gemini, Ollama, vLLM or a hosted endpoint by configuration) and grounds each answer on a compact, read-only, org-scoped summary of your real infrastructure plus a retrieval of your prior questions (RAG). When no backend is configured it says so honestly — it never fabricates an answer.

Image attachments. Attach up to 4 images (PNG, JPEG, WebP or GIF, ≤5MB each) to a question — click the 📎 button in the assistant composer. The images are validated and forwarded server-side to the model as multimodal content, so you can ask about a screenshot, an architecture diagram or an error dialog. Attachments are transient (sent with the turn, never stored); a turn may be image-only with no text.

Monitoring & incidents

For a connected organization the Incidents screen shows real correlated incident timelines (alerts plus change events) from the monitoring engine; a never-connected organization sees an empty state — there is no demo timeline.

SAML & SCIM

On the roadmap. OIDC single sign-on is real (see Single sign-on); SAML, SCIM provisioning and IdP group-to-role mapping are planned. Today JIT provisioning uses the organization's default role.

Azure & Alibaba connections

Real now. All four cloud connection adapters — AWS, GCP, Azure and Alibaba — are live. Azure uses OIDC workload-identity federation to an Entra app/service principal (no client secret); Alibaba uses RAM AssumeRoleWithOIDC via a customer RAM OIDC provider and role (no AccessKeySecret). Each connects, syncs inventory + network topology, reports cost, and can deploy (bucket / compute / VPC blueprints). Cross-cloud connectivity is real — a site-to-site IPsec VPN across all six cloud pairs (see the *Cross-cloud connections* guide); self-service account vending remains on the roadmap.

Marketplace

On the roadmap. Not started.