The honest version of build versus buy
If you have a strong platform team and unusual requirements, building on Argo CD or Flux is a good choice, and many excellent teams run that stack. This page is not an argument that DIY is wrong. It lists what the DIY route includes once it covers everything a production platform does.
GitOps engines are no longer the hard part. Argo CD installs in minutes, and managed versions exist: in Amazon EKS, Argo CD runs in the AWS control plane rather than on your nodes, and Akuity and ControlPlane sell supported Argo CD and Flux. The work is in everything around the engine.
What the full toolchain includes
A platform that covers what Ankra covers usually needs these pieces.
- Clusters. Terraform or Crossplane modules per provider, kubeadm or k3s bootstrapping where there is no managed service, and an autoscaler set up for each cloud.
- Delivery. Argo CD or Flux, a repository layout, promotion with Kargo or conventions, and a secrets operator.
- CI. Runners, image builds, Semgrep, Checkov and Trivy, a gate that blocks a failing image, a registry and preview environments.
- Security posture. A workload scanner, somewhere to store and triage findings, and a way to rank them by real exploitation.
- Cost. OpenCost for allocation, plus your own analysis for right-sizing and provider choices.
- Backups. Velero, database-aware backups and restore tests.
- Alerts. Alertmanager routing to the right channel for each team.
- Portal. Usually Backstage, for a service catalogue, templates and docs.
- AI. MCP servers for each tool, an AI client and rules for what it may change.
Each piece is good software, and each has its own upgrade cycle. Argo CD ships a minor release roughly every quarter: 3.6 arrived on 3 November 2026, the same day 3.3 reached end of life, six months after a critical advisory for 3.2 and 3.3. Flux 2.10, released on 26 October 2026, changed a default RBAC permission in a breaking way. External Secrets Operator paused releases in 2025 for lack of maintainers before it recovered. In March 2026 a compromised Trivy release (CVE-2026-33634) showed that scanners themselves need watching. Somebody on your team owns all of that.
Where Backstage fits
DIY often means Argo CD or Flux for delivery and Backstage for the portal. Backstage is a framework rather than a product: you build it as your own TypeScript app, choose plugins and keep it current. In 2026 its new frontend system became the default for new apps, and the 1.56 release in October carried breaking changes to filter predicates and a sign-in resolver. Spotify sells Portal for Backstage, a managed version, for teams that want the catalogue without running it.
Ankra does not replace a portal. It has no service catalogue, scorecards or plugin framework. What it replaces is the delivery and operations layer that a portal links to: the clusters, pipelines, add-ons, security findings, cost and backups. A team that wants a portal can run one on top of Ankra, and the work behind each portal link becomes smaller.
What stays the same with Ankra
The parts of GitOps you want are unchanged. With a repository connected, Git holds every change, and commits you push are applied. Add-ons are standard Helm releases, so helm list and helm rollback still work, and your configuration is plain Helm values and Kubernetes YAML in an Ankra-defined layout. Hand edits are kept, because Ankra only overwrites the files it owns, and diverged files can be listed and decided from the CLI. A sync that would remove a large share of a cluster is held for confirmation.
What changes
The pieces you would build become the product.
The engine is built in. Ankra’s deployment engine runs through its agent. Changes apply immediately, and drift is checked on a schedule that backs off to every 30 minutes once a stack is stable. There is no Argo CD or Flux to run. Clusters created before the native engine keep Argo CD until they are migrated.
Stacks set the order. A stack declares which add-on depends on which, so the database comes up before the service that needs it. A versioned stack profile is instantiated on each cluster with its own inputs, and Ankra shows which deployments have fallen behind the latest version.
Delivery is one path. Applications generate build files for your repository, or keep the CI it already has. Ankra Pipelines test, build and scan in your own cluster, only the image that passed the gate is published, and every successful build deploys. A merge train on GitHub tests each pull request as the exact commit it will merge, and a tested image is promoted rather than rebuilt. Pull-request previews exist for GitHub Applications, though Ankra’s docs say not to rely on them yet. Ankra can also convert existing workflows from GitHub Actions, GitLab CI, Bitbucket Pipelines and CircleCI.
Day two is included. The Security Center ranks running-workload vulnerabilities by CISA KEV and EPSS. Cloud Cost estimates spend from list prices and reprices clusters on other providers. Backups go to a bucket you own, and notification routing sends each alert to the right channel.
The AI sees all of it. Ankra’s assistant reads logs, events, manifests, stack history, Git and pipeline runs from one place. It drafts stacks from a description, analyses alerts and fixes failing pull requests on GitHub. In-product AI writes wait for a person by default. Writes through the MCP server are audited, and the MCP client decides how to confirm them.
Limits to check
Ankra makes choices that a DIY toolchain leaves open. Check them against your requirements.
- the GitOps repository must be on GitHub or Bitbucket Cloud, and Applications and previews need GitHub
- several documented pipeline stage kinds, including in-pipeline approval, verify and preview stages, do not run yet; deploy stages do run, and roll releases out to hosts outside Kubernetes that run
ankra-host-agent - agent auto-upgrade is on by default only for organisations created since 7 September 2026; older organisations turn it on, and a cluster can opt out (cluster agent)
- Ankra’s control plane is a hosted service in the EU by default, and running Ankra self-hosted, including air-gapped, is an Enterprise add-on on the pricing page
When DIY is still the right call
- You have platform engineers whose full-time job is the platform, and you want it that way.
- Your delivery model is deeply custom, for example progressive delivery you have invested years in.
- You need a fully custom developer portal and are ready to maintain Backstage as an application.
- Your GitOps repository has to live on a Git host Ankra does not support, such as GitLab.
If none of those apply, compare the full toolchain, not just the engine, with keeping Git as the source of truth on a platform that runs the rest.
Try the comparison yourself
The free plan includes 30 worker vCPU for good. Beyond that, Startup costs €0.01 per worker vCPU-hour (about €7.20 a month), and your provider bills the servers. Try it without a card in a small trial; adding one unlocks full access and €59 of welcome credit. Import an existing cluster with one Helm command, connect your Git repository, and compare a real release with your current process. See Ankra’s pricing.
Reviewed 9 November 2026 against Argo CD 3.6, Flux 2.10, Kargo 1.12, Backstage 1.56 and the linked documentation. Tools and features change.