OpenChoreo
Profile
OpenChoreo is designed for platform engineering teams building an Internal Developer Platform from scratch or modernizing an existing one. Its ready-to-use control plane, reusable building blocks, and integrated developer experience help teams get started quickly without building the underlying platform architecture from scratch.
Built for composability and modularity, OpenChoreo allows platform teams to integrate, extend, or replace existing CI systems, observability platforms, gateways, and other tools without disrupting the developer experience. Teams retain control over how their infrastructure and golden paths are configured while developers and AI agents interact with a consistent platform experience.
Unlike standalone developer portals that primarily aggregate data from different tools, OpenChoreo’s control plane owns and continuously reconciles the desired state of applications and infrastructure resources. Every interface reflects the same platform state, eliminating configuration drift and giving developers and AI agents a consistent way to build, deploy, and operate applications. OpenChoreo’s abstractions simplify interactions with Kubernetes and underlying tools without hiding them, allowing users to inspect and troubleshoot the underlying resources when needed.
OpenChoreo supports deployment sovereignty, running on any Kubernetes distribution across public clouds, private clouds, and on-premises environments. It is able to orchestrate workloads across multiple clusters while acting as a central control plane.
Background
OpenChoreo was originally developed by WSO2 and donated to the CNCF Sandbox to establish a vendor-neutral home for the project. It draws on years of experience building and operating Choreo, WSO2’s former commercial SaaS developer platform.
Building Choreo and working with enterprise customers exposed a recurring challenge: while Kubernetes provides powerful infrastructure primitives, building an Internal Developer Platform on top of it requires significant engineering effort. Platform teams must develop higher-level abstractions, integrate fragmented toolchains, and maintain the custom code connecting them. The rise of AI-assisted and agent-driven software development introduced another challenge: enabling AI agents to participate in software delivery while maintaining organizational governance and security controls.
OpenChoreo was built from the ground up to address these challenges. Rather than a fork of Choreo, it is a complete rewrite designed as an open-source, Kubernetes-native platform orchestration framework, with composability, extensibility, and a unified control plane for developers and AI agents at its core.
WSO2 remains a major contributor to OpenChoreo and offers commercial enterprise support for self-hosted deployments and WSO2-managed private deployments through WSO2 for OpenChoreo.
Main Features
Extensible platform orchestration, developer abstractions, and golden paths
OpenChoreo provides a Kubernetes-native control plane for orchestrating how applications, infrastructure resources, and AI workloads are built, deployed, and operated. Platform teams can define reusable building blocks such as ComponentTypes, ResourceTypes, DeploymentPipelines, Environments, and Workflows to establish golden paths that encapsulate infrastructure complexity and organizational standards. Developers work with simpler abstractions such as Projects, Components, Endpoints, and Dependencies, which OpenChoreo translates into the underlying Kubernetes resources and platform tooling. This allows
organizations to tailor their developer experience without building their own orchestration framework.
Unified platform experience and governance for developers and AI agents
OpenChoreo provides a ready-to-use developer experience through a Backstage-powered developer portal, CLI, APIs, and Model Context Protocol (MCP) servers. Developers can build, deploy, operate, and observe applications through consistent self-service interfaces, with support for both interactive operations and declarative GitOps workflows.
Unlike developer portals that primarily aggregate tools, these interfaces are backed by the same control plane, which continuously reconciles the desired state of applications and infrastructure. This ensures that developers and AI agents interact with consistent platform capabilities and operational state, regardless of the interface they use.
Built-in multi-tenancy, granular role-based and attribute-based access control (RBAC/ABAC), and centralized audit logging enable organizations to enforce governance across teams and environments. AI agents operate through the same platform abstractions and authorization policies as developers, enabling AI-driven software delivery without granting unrestricted infrastructure access.
Modular architecture and open ecosystem
OpenChoreo provides a modular, extensible architecture that allows organizations to build an IDP around their existing technology investments rather than adopting a fixed toolchain. It includes ready-to-use capabilities for CI/CD, GitOps, observability, identity, and more, while allowing platform teams to integrate or replace them with their preferred tools. Its ecosystem supports integrations with CI systems, API and AI gateways, infrastructure provisioners, identity providers, observability platforms, and networking and security tools. OpenChoreo’s architecture separates the control plane from the infrastructure used to run workloads, execute workflows, and collect observability data. These capabilities can be deployed and scaled independently across multiple Kubernetes clusters, cloud providers, and on-premises environments, giving organizations control over where their workloads and data reside. Beyond orchestration, OpenChoreo provides integrated operational capabilities, including contextual logs, metrics, traces, and alerts, DORA metrics, and infrastructure cost insights. Optional AI-powered SRE and FinOps agents assist with troubleshooting and cost optimization, with support for organizations to use their own AI models.
