Skip to content
Cloudkeel-DD Docs

Cloudkeel-DD documentation

Cloudkeel-DD is self-hosted configuration-drift detection for teams who run Terraform or Kubernetes on Azure, AWS, or GCP. It compares the state you declared against the state that is actually running, and reports three things: resources that no longer match your code, resources no state declares at all, and resources that break a policy you enabled. It runs inside your own cluster, reads with read-only credentials, and never writes to your cloud.

Where to start

Section titled “Where to start”
  • Pilot quickstart — install on your own cluster and read your first drift finding.
  • Connecting integrations — the desired-vs-actual model, then per-cloud setup with the exact read-only permissions each one needs.
  • The drift lifecycle — how a finding is scored, attributed, and resolved.
  • Coverage — exactly which resource types are checked field-by-field, and which are tracked as inventory.

Reference

Section titled “Reference”