For Regulated Teams
Regulated teams: agents in your own cluster
Run the agent runner and the Terraform executor in your own Kubernetes cluster, with your own model account, and keep the InfraDots workflow.
Your cluster
Agent runner and Terraform executor
Your model account
Anthropic, Bedrock, Vertex AI or Azure AI Foundry
HTTPS out only
Runners connect outbound
Your compliance rules limit where code and credentials can run
Credentials stay inside your network
Terraform runs need cloud credentials and state access. Handing those to a shared runner fleet is a hard conversation with security.
Model access has to go through your account
You already have an approved model provider agreement and do not want a second one for infrastructure agents.
Self-managing everything is costly
Building and maintaining your own Terraform automation to meet these constraints takes the team away from real work.
How InfraDots solves it
- 1
Install the runner with the public Helm chart
Run `helm repo add infradots https://infra-dots.github.io/helm-charts` and install the infradots-runner chart in your Kubernetes cluster.
- 2
Run the agent runner and Terraform executor in your cluster
Both run in your cluster. Runners connect out to InfraDots over HTTPS only, so no inbound access to your cluster is needed.
- 3
Bring your own model account
Point agents at your Anthropic, AWS Bedrock, Google Vertex AI or Azure AI Foundry account.
- 4
Use the same workflows as everyone else
Workspaces, approvals, the review and implement agents, Slack, CLI and web all work the same. Self-hosted runners are available on Growth and Enterprise.
Set up self-hosted runners
Included with every plan: a guided infrastructure review with our engineers.
Frequently asked questions
What runs in our cluster?
The agent runner and the Terraform executor, installed with the public infradots-runner Helm chart.
Which model providers can we use?
Anthropic, AWS Bedrock, Google Vertex AI and Azure AI Foundry, with your own account.
Do we need to open inbound ports?
No. Runners connect out to InfraDots over HTTPS only.
Which plans include self-hosted runners?
Growth and Enterprise.