Nexo Control Plane
The Nexo Control Plane is the hosted management service for Nexo. It owns identity, projects, environments, desired configuration, release metadata, deployment orchestration, licensing, and operational history. It is not in the application database traffic path; MongoDB traffic remains inside the customer environment.
Responsibilities
| Responsibility | What the Control Plane does |
|---|---|
| Identity and tenancy | Authenticates users and API keys, manages teams and members, and enforces project and environment access. |
| Project and environment management | Creates projects, registers environments, applies selectors and labels, and tracks heartbeat health. |
| Configuration lifecycle | Stores pipeline configuration, validates supported fields, previews changes, versions revisions, compares revisions, and initiates rollback. |
| Deployment orchestration | Resolves the desired release bundle and configuration into commands for the correct environment, then tracks acknowledgement and rollout status. |
| Compatibility checks | Resolves desired configuration against release metadata and the runtime inventory available from the target environment. |
| Release and registry services | Publishes release metadata and issues scoped registry credentials used to install or upgrade Nexo Edge. |
| Commercial controls | Enforces licenses, tier limits, trials, billing state, and feature availability. |
| Governance and observability | Records project audit history, fleet metrics, administrative alerts, and deployment health. |
Features
Environment registration
Each environment has its own identity and connect-token lifecycle. The service tracks cluster binding, Manager heartbeat, installed component versions, capabilities, and deployment state.
Configuration and revision management
- Author or update a project pipeline.
- Validate configuration and preview the expected change.
- Save a versioned revision.
- Resolve the revision against the target environment and release bundle.
- Check release compatibility and authorization using the evidence available in 0.2.0.
- Deliver the operation to Manager and track its acknowledgement.
- Compare or roll back configuration revisions when needed.
Security and governance
- role- and project-scoped authorization;
- rate limits and tier enforcement;
- environment-scoped registry credentials;
- project audit history;
- license heartbeat and revocation checks;
- no dependency on the hosted service for application-to-database traffic.
0.2.0 service context
Control Plane is an always-current hosted service, not a component pinned by the documentation dropdown. This snapshot describes the service capabilities used to manage the Nexo Edge 0.2.0 bundle. Later hosted-service changes appear in the current documentation and What's New.