# Getting Akri Production Ready
Currently, Akri is a pre-release project. The following are some tasks that should be completed for Akri to be production ready.
1. **ONGOING**: Enable Akri's discovery handlers to authenticate with devices before marking them as discovered. This requires a credentials solution with identity mapping (device to certificate).
2. Enable providing Akri brokers (customer workloads deployed by Akri) appropriate credentials for authenticating with devices. Currently, Akri's OPC UA demo uses Kubernetes secrets
3. **COMPLETED**: Ensure Akri's Helm templates use the most restrictive settings rather than defaults, using Akri's Snyk report for guidance. Akri [maintainers](https://github.com/project-akri/akri/blob/main/CODEOWNERS) have access to the CNCF Akri Snyk account. For example, explicitly setting `securityContext.allowPrivilegeEscalation` to `false`.
4. **ONGOING**: Investigate and conduct a size reduction of Akri containers. Most Akri binaries are < 25MB; however, the containers can be > 140 MB. There is bloat that can be removed as confirmed by this [Issue's investigation](https://github.com/project-akri/akri/issues/491)
5. Performance testing and stress testing to know Akri's limits and have a benchmark for a v1.
6. Nice to have: Prune Akri's dependencies. This includes being explicit about which features of each crate are used. https://github.com/project-akri/akri/issues/237

## Making Akri Feature Full
1. More deployment strategies, so can deploy one broker for 3 IP cameras for example. [Proposal](https://github.com/project-akri/akri-docs/blob/main/proposals/broker-deployment-strategies.md)
2. Enable or document a scenario with 1 network based discovery handler across the cluster rather than one per node. The Discovery Handlers and Agent should support a network based connection. The DH could even run external to the cluster.
3. Job style discovery handlers that discover devices and then terminate. Maybe cronjob to periodically recheck existence.
4. Make device offline grace period configurable