Latest articles

SecurityAndCompliance
DevSecOps
 minutes
Qovery Achieves SOC 2 Type II Compliance

Qovery is officially SOC 2 Type II compliant with an Unqualified Opinion. Get the highest assurance of continuously verified security controls for enterprise-grade application deployments and simplify due diligence.

Pierre Mavro
CTO & Co-founder
Product
AWS
Kubernetes
3
 minutes
AWS EKS Auto Mode with Qovery - Valuable Or Not?

At Qovery, we are closely following the development of EKS Auto Mode, a new feature from AWS designed to simplify Kubernetes management by automating various foundational components. While we recognize the effort AWS has put into this, our initial evaluation shows that EKS Auto Mode is still in its early stages and does not yet offer sufficient value to be a strong consideration for our users.

Pierre Mavro
CTO & Co-founder
Engineering
Kubernetes
AWS
6
 minutes
Our migration from Kubernetes Built-in NLB to ALB Controller

Working with Kubernetes Services is convenient, especially when you can deploy Load Balancers via cloud providers like AWS. At Qovery, we initially started with Kubernetes’ built-in Network Load Balancer (NLB). However, we decided to move to the AWS Load Balancer Controller (ALB Controller). In this article, I explain why we made this switch and how it benefits our infrastructure. We will discuss the reasons for the transition, the features of the ALB Controller, and provide a guide for deploying it. This shift has helped us simplify management, reduce costs, and enhance performance. By understanding these points, you can decide if the ALB Controller is right for your Kubernetes setup.

Pierre Mavro
CTO & Co-founder
Qovery
Community
5
 minutes
Meet the Qovery Team: Marie, People Manager

In today's portrait, meet Marie, our People Manager at Qovery! She is the 1st HR person in place, and she was hired to create the function and make Qovery a great place to work for all its team members! She loves the tech ecosystem, drinking coffee, hiking in the mountains, and returning occasionally to breathe the Paris air.

Pierre Mavro
CTO & Co-founder
Engineering
6
 minutes
How To Make Rust Multi-Arch Release Easy

At Qovery, we're using Rust for 10+ projects. If you are familiar with Rust, you know how painful it is to release a binary for multiple architectures. Even if the toolchain natively supports it.

Pierre Mavro
CTO & Co-founder
Engineering
Product
11
 minutes
How to Achieve Zero-Downtime Application with Kubernetes

I’ve worked on on-premised and managed Kubernetes clusters for more than seven years. What I can say is that containers have drastically changed the hosting landscape! It has brought a lot of facilities where complex setups were required. Having several instances, with rolling restart, zero downtime, health check, etc. It was such a pain and time effort before (implementing VRRP solution, application monitoring restart with monit like, load balancing haproxy like)! So everything is more accessible with Kubernetes now, but if you want to build the perfect setup for your application’s lifecycle, you must still understand how it works and which strategy you should follow depending on your situation. In this article, I’ll explain why and how you can achieve a zero-downtime application with Kubernetes and what Qovery handles for you if you use it.

Pierre Mavro
CTO & Co-founder
Engineering
5
 minutes
Understanding the Basics of Application Autoscaling

Application autoscaling is a considerable subject. At first, it looks simple because everyone understands the goal and how conceptually it works, but it’s not that simple in practice.

Pierre Mavro
CTO & Co-founder
Qovery
2
 minutes
Qovery Achieves SOC2 Compliance

I am thrilled to announce that Qovery's DevOps automation software has successfully achieved SOC2 Type I compliance, an important milestone demonstrating our commitment to the highest security and data privacy standards. As the CTO of Qovery, I am proud of our team's dedication to ensuring our platform remains secure and reliable for all users.

Pierre Mavro
CTO & Co-founder
Product
AWS
2
 minutes
Qovery now supports AWS STS: Protect your resources with temporary access keys

We are excited to announce that Qovery now supports AWS Security Token Service (STS) for all our plans! AWS STS is a web service that enables you to request temporary, limited-privilege credentials for AWS Identity and Access Management (IAM) users or for federated users who sign in using Single Sign-On (SSO). These credentials are then used to access AWS resources and services.

Pierre Mavro
CTO & Co-founder
Engineering
DevOps
Platform Engineering
Kubernetes
10
 minutes
Everything I Wanted To Know About Kubernetes Autoscaling

Kubernetes is today the most well-known container scheduler used by thousands of companies. Being able to quickly and automatically scale your application is something standard nowadays. However, knowing how to do it well is another topic. In this article, we'll cover how pod autoscaling works, how it can be used, when it's exciting and not, and finally, we'll cover it with a Qovery usage we have internally.

Pierre Mavro
CTO & Co-founder
Kubernetes
AWS
Engineering
Product
2
 minutes
Kubernetes Cluster Autoscaler vs Karpenter

One of the most exciting things when using Kubernetes is the ability to scale up and down the number of nodes based on application consumption. So you don’t have to manually add and remove nodes on demand and let it go on usage. Obviously what you want is to keep control on the minimum and the maximum number of nodes to avoid an unexpected bill.

Pierre Mavro
CTO & Co-founder
Engineering
6
 minutes
The importance of SemVer for your applications

For some developers, SemVer can look just cosmetic, nice to have, or simply useless. But SemVer format is mandatory to make reliable software. I'll explain how over one year, we encountered 2 issues related to SemVer. The first one was critical and led to a production outage, while the other was a lot of trouble for several companies to upgrade a managed service.

Pierre Mavro
CTO & Co-founder
Engineering
7
 minutes
How we manage CI sensitive data for our Open Source deployment Engine

Making an Open Source Software with sensitive data and dozens of external integrations is a real challenge, here are feedbacks and tradeoffs we've made.

Pierre Mavro
CTO & Co-founder
Engineering
4
 minutes
helm-freeze - manage Helm Charts and Repositories with ease

Since the beginning of Kubernetes, a lot of different tools have emerged to manage Kubernetes deployments. They all propose their mindset, workflow, and usage.

Pierre Mavro
CTO & Co-founder
Kubernetes
Engineering
3
 minutes
Kubernetes - Network isolation with NetworkPolicy

As your number of deployed applications within Kubernetes grows, you may want to isolate them from a network point of view. By default, Kubernetes does not offer any network isolation, all pods of all your namespaces can talk to each other without any isolation, and even on network port that you have not defined. Yes, that's scary! There are different approaches and tools to do network isolation; let's take a look at the NetworkPolicy.

Pierre Mavro
CTO & Co-founder
Engineering
Terraform
8
 minutes
Terraform is Not the Golden Hammer

Terraform is probably the most used tool to deploy cloud services. It's a fantastic tool, easily usable, with descriptive language (DSL) called HCL, team-oriented, supporting tons of cloud providers, etc. On paper, it's an attractive solution. And it's easy to start delegating more and more responsibilities to Terraform, as it's like a swiss knife; it knows how to perform several kinds of actions against several varieties of technologies.

Pierre Mavro
CTO & Co-founder
Engineering
7
 minutes
How we extended Helm lifecycle with Rust

Helm has some limits, discover how we extended functionnalities with Rust

Pierre Mavro
CTO & Co-founder
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.