RedactedJARedacted.pdf

DEFENSE LOGISTICS AGENCY

DLA CONTRACTING SERVICES OFFICE - PHILADELPHIA

700 ROBBINS AVENUE

PHILADELPHIA, PENNSYLVANIA 19111-5092

CUI

JUSTIFICATION AND APPROVAL

FOR OTHER THAN FULL AND OPEN COMPETITION

1. IDENTIFICATION OF THE AGENCY AND CONTRACTING ACTIVITY.

Requiring Activity:

DLA Logistics Information Operations

DevSecOps Program Manager

Contracting Activity:

DLA Contracting Services Office, Philadelphia (DCSO-P) 700 Robbins Avenue Philadelphia, PA 19111

2. NATURE AND/OR DESCRIPTION OF THE ACTION BEING APPROVED.

This justification and approval for other than full and open competition authorizes and approves the procurement of brand name Tetrate-Istio for Development, Security and Operations (DevSecOps) mission essential software. This requirement is for Tetrate-Istio product offered through authorized reseller Tetrate.io. The placement of a fixed price contract is anticipated. The procurement will be solicited as a Firm-Fixed Price (FFP), small business set-aside acquisition posted to the Contract Opportunities website (sam.gov).

3. A DESCRIPTION OF THE SUPPLIES OR SERVICES REQUIRED TO MEET THE

AGENCY’S NEEDS/ESTIMATED DOLLAR AMOUNT:

Procurement is for the Tetrate vendor version of Isito Cloud Native Computing Foundation (CNCF) where they have compiled libraries inside that are Federal Information Processing Standards (FIPS) compliant and to ensure DevSecOps meets the security requirement of utilizing FIPS for our platform as well as provide service mesh capabilities.

The versions are also in the Ironbank (trusted source) and require a license.

CUI

DLA Contracting Services Office SUBJECT: J&A – Tetrate.Itsio Software and Licenses

CUI | Source Selection Sensitive Information – See FAR 2.101 & 3.104

The required subscription software and licenses will be procured using a one-year firm fixed price (FFP) order composed of one 12-month period commencing on 30 September 2025. The dollar value of this requirement is and will be funded utilizing FY25 funds.

4. IDENTIFICATION OF STATUTORY AUTHORITY PERMITTING OTHER THAN

FULL AND OPEN COMPETITION:

The statutory authority permitting other than full and open competition is 10 U.S.C. 2304(c)(1), as implemented by FAR 6.302-1 “Only one Responsible Source and no other supplies or services will satisfy agency requirements”. Tetrate.io Software and licenses for DevSecOps subscription software is a brand name product of Tetrate.io. No other firm can provide this brand name product due to the proprietary nature of the software. Use of this brand name description in the acquisition is essential to the Government’s requirements, thereby precluding consideration of a product of another company. A brand name item peculiar to Tetrate.Itsio Software and licenses for DevSecOps is essential to the Government’s requirement because other products do not meet or cannot be modified to meet the Agency’s needs without assuming unnecessary operational risks. Tetrate.io is the only authorized reseller to provide a market research quote of the required Tetrate.io Software and licenses for DevSecOps subscription software.

5. DEMONSTRATION THAT THE PROPOSED CONTRACTOR’S UNIQUE

QUALIFICATIONS OR THE NATURE OF ACQUISITION REQUIRES USE OF CITED

AUTHORITY:

This acquisition is restricted to one brand name or product, Tetrate.Itsio Software and licenses for DevSecOps Subscription Software.

Tetrate.Istio software provides a licensed Kubernetes Ingress controller and service mesh that is FIPs certified. It replaces the existing Nginx Ingress Controller which does not support FIPS nor provide any service mesh capabilities.

All versions are in the Ironbank and maintain the latest four versions continuously patched for CVE findings and do require a licensed version.

Failure to acquire the software will result in the DevSecOps Platform not being compliant with security requirements mandated by the Department of Defense (DoD) and DLA, which could lead to the loss of the Programs Authority to Operate (ATO).

6. DESCRIPTION OF EFFORTS MADE TO ENSURE THAT OFFERS ARE

SOLICITED FROM AS MANY POTENTIAL SOURCES AS IS PRACTICABLE:

Market research was conducted via Tetrate OEM and resellers of Tetrate.Itsio Software and licenses for DevSecOps subscription software. The requirement will be synopsized to solicit within SAM.GOV. All authorized resellers will be given an opportunity to submit an offer.

SUBJECT: J&A – Tetrate.Itsio Software and Licenses

CUI | Source Selection Sensitive Information – See FAR 2.101 & 3.104

7. DETERMINATION BY THE CONTRACTING OFFICER THAT THE

ANTICIPATED COST TO THE GOVERNMENT WILL BE FAIR AND REASONABLE:

As the Contracting Officer, I hereby determine that pricing will be fair and reasonable based on pricing analysis in accordance with FAR 15.404-1. It is anticipated that the Government will use various price analysis techniques including, but not limited to: 1) comparison of proposed prices received in response to the solicitation (FAR 15.404-l(b)(2)(i)); 2) comparison with competitive published price lists (FAR 15.404-l(a)(2)(iv)); and 3) comparison of proposed prices within prices obtained through market research of the same or similar items (FAR l 5.404- l(b)(2)(vi)) in order to obtain a fair and reasonable price. The contracting officer will determine prices fair and reasonable prior to award using price history, IGCE, and published price lists (if available).

8. DESCRIPTION OF THE MARKET RESEARCH CONDUCTED AND THE

RESULTS:

Market research was conducted via Tetrate OEM and resellers of Tetrate.Itsio Software and licenses for DevSecOps subscription software. However, Tetrate.io may have authorized resellers of its products by the time the RFQ is posted. DLA has and continues to exercise competition as often as possible and is required to conduct ongoing reviews to keep abreast of new technology, both in industry and in the Government as a continuing effort within DLA.

DLA always uses a variety of vendors, manufacturers, and contracts to fulfill its requirements and will continue its practice of surveying the market to ensure full and open competition. No other sources have demonstrated the capability necessary to provide the subscription software and software subscription support, currently.

SUBJECT: J&A – Tetrate.Itsio Software and Licenses

CUI | Source Selection Sensitive Information – See FAR 2.101 & 3.104

9. CERTIFICATIONS: