Mr.PlanB Logo

    #10 of 28 infrastructure automation tools · Updated October 2026

    Crossplane review 2026

    Crossplane (CNCF) · Dependable builder

    Crossplane ranks #10 of 28 infrastructure automation tools in the Infrastructure Automation Ledger 2026, with a Ledger Index of 57.2 out of 100. Crossplane makes a Kubernetes cluster a provisioning control plane that repairs drift continuously; v2 in 2025 rebuilt the model and the CNCF graduated it.

    Scores

    Ledger Index
    57.2/100
    #10 of 28
    Capability
    50.1/100
    Credibility
    20/25
    Commercial risk
    9/25
    lower is better
    Lock-in
    11.5/25
    lower is better
    AI delivery
    2/20

    Source: Infrastructure Automation Ledger 2026, edition 2026-10-16. How each score works: methodology.

    Pros

    • Orchestration and self-service4/5

    Cons

    • AI assistance0/5
    • Bare metal and day-2 operations0.5/5
    • Configuration management depth1/5

    What the Ledger says

    Crossplane scores highest in this group on orchestration and self-service because the product is a Kubernetes API that platform teams expose to tenants, and it is the only one that repairs drift continuously rather than reporting it. It scores lower on state and planning because there is no plan or diff before a change reaches the cluster, and on breadth because the on-prem hypervisor providers are maintained by individuals. The cadence record is the best in the group, with dates published two years ahead and kept. Check your dependence on Upbound before adopting: the Official Providers for the big clouds are free only in their latest version and, from UXP 2.0, run only on Upbound's distribution.

    The project's own position is that a Kubernetes API is the agent interface, and it ships no AI feature. Upbound announces AI insights and an MCP server for its distribution, but no status, date or documentation page could be verified in this pass.

    Capability by area

    Provisioning breadth2.5/5
    Configuration management depth1/5
    State, planning and safety3/5
    Language and authoring3.5/5
    Orchestration and self-service4/5
    Scale and control plane3.5/5
    Security and compliance3/5
    Bare metal and day-2 operations0.5/5
    Ecosystem and integrations3.5/5
    AI assistance0/5

    Buying, lock-in and release record

    Buying and licence (commercial risk)(lower is better)

    Maintainer concentration3.5
    Upbound is the creator and primary maintainer and the graduation post names no other maintainer organisation; 3,000+ contributors from 480+ companies are vendor-reported
    Backer health2
    Upbound is venture backed with $69 million raised; the CNCF hosts the project; no sponsor list read
    Licence-change risk1.5
    Apache 2.0 held by the CNCF; the risk sits in the providers, where Upbound gated Official Providers in 2025 and tied them to UXP
    Abandonment signs0.5
    Quarterly releases kept, calendar published to 2027, CNCF Graduated in 2025
    Security response1.5
    Two security audits before graduation; 2.4 hardened garbage collection; maintenance is best effort with no response SLA

    Technical lock-in(lower is better)

    Formats2.5
    Kubernetes YAML, but XRDs, Compositions and functions are Crossplane specific
    Export path3
    No documented path to another IaC tool; managed resources can be left in place when a claim is deleted
    Stack coupling3
    Requires a Kubernetes control plane
    Hardware / cloud coupling0.5
    Any cluster, offline capable; the engine needs no Upbound account
    Skills and tooling coupling2.5
    Kubernetes skills are common; composition and function authoring skills are scarce

    Release credibility

    Cadence5
    Published 13-week cycle with a calendar to May 2027; v2.2, v2.3 and v2.4 shipped on their dates
    Roadmap transparency4
    Public release calendar, open repository and release notes; the feature roadmap was not read
    Say-do4
    Release dates held through 2026; composition functions went alpha to v1 in 19 months; Upbound's AI items have no stated status
    Velocity4
    Several capabilities in 2.0 and 2.4; 2.2 and 2.3 content read only in part
    Lifecycle stability3
    Nine months per minor, three supported; v1 to v2 upgrade only from v1.20; CLI renamed in 2.4; native patch and transform deprecated in 1.17

    Partners and services

    Partner programme openness2.5
    Foundation project with open downloads; Upbound's partner terms not found and its Official Providers are gated
    Multi-tenancy and self-service4
    Namespaced composite resources in v2 give per-tenant APIs under Kubernetes RBAC
    API and infrastructure-as-code4.5
    The Kubernetes API is the whole interface; any client and any GitOps tool works
    Skills and certification2
    No certification found

    Alternatives to Crossplane

    Questions about Crossplane

    Is Crossplane any good?

    Crossplane ranks #10 of 28 infrastructure automation tools in the Infrastructure Automation Ledger 2026, with a Ledger Index of 57.2 out of 100. Its strongest areas are orchestration and self-service. Its weakest are ai assistance, bare metal and day-2 operations, configuration management depth.

    What are the best alternatives to Crossplane?

    The closest by Ledger Index are Puppet (57), Scalr (56.7), OpenTofu (55.8), Ironic (55.7).

    How is Crossplane licensed and sold?

    Upbound is the creator and primary maintainer and the graduation post names no other maintainer organisation; 3,000+ contributors from 480+ companies are vendor-reported.

    How much lock-in does Crossplane bring?

    Crossplane scores 11.5 out of 25 on technical lock-in (lower is better). Export path: No documented path to another IaC tool; managed resources can be left in place when a claim is deleted.

    User reviews of Crossplane

    No reviews yet

    Be the first to say how Crossplane worked for you.

    Write a review

    No account needed and no email asked. We read every review before it appears and remove adverts, spam and personal attacks.

    Your rating