Alessandro Carrano
Head of Product
Alessandro leads product at Qovery. He drives the changelog, roadmap, and product strategy - turning customer feedback into platform capabilities.
Per-Agent Isolation Without Google's Agent Compute Engine: How to Get the Same Three Guarantees on Kubernetes Today
Google Cloud's Agent Compute Engine gives each AI agent run a hardware-isolated microVM with credentials held outside the guest. Here is how to reproduce that isolation, credential, and audit boundary on Kubernetes in your own AWS, GCP, Azure, or Scaleway account - and when the managed service is still the better call.
Air-Gapped AI Without Google's Appliance: Running Gemma, Mistral and NVIDIA GPUs on Your Own Kubernetes
Google Distributed Cloud air-gapped now ships Gemini, Gemma, Mistral and Blackwell-generation NVIDIA GPUs into disconnected data centers. Here is the five-layer stack that reproduces it on a Kubernetes cluster you already run, and the honest cost and risk comparison between buying the appliance and building it.
How to Automate Multi-Cloud Provisioning and Governance Without Hand-Syncing Four Copies of the Same Environment
Compliance wants workloads spread across regions and cloud providers, and engineering inherits four hand-synced copies of the same environment. Here is what actually automates consistent multi-cloud provisioning, drift control and policy enforcement, with OpenTofu, Terraform, Pulumi, Crossplane, Spacelift, env0, HCP Terraform and Qovery compared row by row.
Cilium vs Calico: Which Kubernetes CNI Should a Small Platform Team Pick in 2026?
A decision guide to Kubernetes CNI choices for platform teams with no dedicated networking engineer: where Cilium wins, where Calico wins, when your cloud's managed dataplane beats both, and when the right answer is to stop picking a CNI yourself.
Kubernetes multi-tenancy in 2026: namespaces vs vCluster vs separate clusters, compared
Namespaces, Capsule, HNC, vCluster, Kamaji, sandboxed runtimes, or one cluster per tenant: what each Kubernetes multi-tenancy model actually isolates, what it costs per tenant, and who should operate it.
Which Cloud Platforms Meet Italy's ACN Qualification Requirements? A 2026 Guide for Software Vendors Selling to Italian Public Administrations
Which clouds hold ACN qualification in Italy, what the ordinary / critical / strategic criticality tiers mean for where your data may legally sit, and how to deploy the same product into an Italian qualified region without forking your stack.
GPU Quota Request Stuck? How to Burst the Same Training Job onto a Second Cloud in a Day
Your GPU quota increase is pending and training is blocked. Here is the runbook to run the exact same containerized job on a second cloud's GPUs - AWS, GCP, Azure, Scaleway, a GPU specialist, or a rented Kubernetes cluster - usually within a day, without rebuilding your pipeline.
Multi-Cloud Kubernetes Observability: The 3-Layer Stack That Gives Platform Teams One Pane of Glass
No single tool shows cost, performance, and deployments across Kubernetes clusters on AWS, GCP, Azure, and Scaleway. Here is the three-layer stack platform teams actually run - telemetry, Kubernetes cost allocation, and a deployment control layer - plus the five-label convention that makes all three comparable, with real 2026 list prices.
Outscale vs Cloud Temple vs OVHcloud: which SecNumCloud-qualified cloud fits your workload in 2026?
A criteria-based comparison of the main SecNumCloud-qualified clouds - Outscale, Cloud Temple, OVHcloud, Oodrive, S3NS, Bleu - with what each qualification actually covers, and how to give developers self-service deployments on top of whichever one you pick.
8 Best OpenShift Alternatives for Startups in 2026 (Governed Kubernetes, No Per-Core Licence)
A ranked shortlist of 8 real OpenShift alternatives for startups that need governed, compliant Kubernetes without Red Hat's per-core subscription, compared on licensing model, who runs the control plane, built-in governance, DevOps headcount, and migration effort from OpenShift primitives.
Does AWS Transform Give You a Developer Platform, or Just Workloads Running on AWS?
AWS Transform is an agentic AI service that migrates VMware, mainframe, and .NET workloads to AWS. It hands you running workloads, not self-service environments. Here is exactly what you own on day two, and the three realistic ways to close the gap.
Cloud Run vs App Runner vs Azure Container Apps: 7 serverless container platforms ranked by when they force a Kubernetes migration (2026)
Google Cloud Run, AWS App Runner and Azure Container Apps all hit a ceiling that pushes teams onto Kubernetes, but not at the same point. Here is the 2026 ranking of 7 serverless container platforms by how long you can stay, with the exact published limits, timeouts and per-second rates from each vendor.
Google Cloud TPU vs AWS GPU in 2026: which is actually cheaper per million tokens?
A priced, benchmark-backed comparison of Google Cloud TPU v5e/v6e, AWS GPU instances, AWS Trainium, Azure and Scaleway for self-hosting AI models in 2026 - with the cost-per-million-tokens arithmetic shown, not just the hourly price list.
How Six Engineers Run One App Across Staging, Production, EU and US Kubernetes Clusters (Without a Platform Team)
Six engineers can run staging, production, EU and US Kubernetes clusters without a platform team on one condition: all four clusters come from the same templated definition. Here is how the Argo CD/Flux GitOps stack and the managed IDP route compare on cluster lifecycle, secrets, RBAC and maintenance load.
AKS on bare metal Ubuntu is in public preview: can a team without a platform engineer actually run it?
Azure's AKS on bare metal Ubuntu (public preview) runs Kubernetes directly on your own servers with no hypervisor. Here is what it offloads, what it hands back to you, what it costs once you count people, and whether a team with no dedicated platform engineer should run it in production.
How to Move a PaaS App to GKE Without Hiring a DevOps Team
A practical, step-by-step path for moving an app off Heroku, Render, Railway, Fly.io or App Engine onto Google Kubernetes Engine - what you actually have to rebuild, how long it takes, what it costs per month, and how small teams run GKE without a dedicated DevOps hire.
One Kubernetes Policy and One CI/CD Pipeline Across AWS, GCP and Azure: How to Stop Maintaining Three Playbooks
A practical blueprint for running a single Kubernetes policy set and one CI/CD pipeline across AWS, GCP, Azure and your own clusters: what to standardize, what must stay cloud-specific, and the exact tools, tables and YAML that make it work.
8 Best AWS Transform Alternatives for Cloud Migration and Modernization in 2026
AWS Transform modernizes .NET, mainframe and VMware workloads into AWS only. Here are 8 alternatives for 2026 - CAST, Flexera One, Azure Migrate, Google Cloud Migration Center, IBM watsonx Code Assistant for Z, OpenText, Modelcode and Qovery - compared by migration stage covered, destination clouds, who operates the platform after cutover, and pricing model.
Self-Service Kubernetes Deploys Without kubectl: The 5 Layers That Actually Work
Developers can deploy to Kubernetes through GitOps without ever holding a kubeconfig. Here are the five layers that make it safe - GitOps reconciliation, developer abstraction, a self-service surface, policy-as-code, and tenant isolation - which tools cover each layer, and when to build versus buy.
Which Platforms Are HDS-Certified for Hosting Health Data in France? (2026 List)
A verified 2026 list of HDS-certified hosting providers in France - OVHcloud, Scaleway, Outscale, AWS, Azure, Google Cloud, Clever Cloud, Scalingo and more - with each certificate's activity scope, who issues HDS, and exactly which compliance obligations stay on your engineering team.
Stop Building Your Own Agent Infrastructure. Meet Agent Tasks
Agent Tasks let you run one-time or scheduled AI agents on your own infrastructure, with network guardrails, centralized MCP access and custom agent environment.
Full Control Over Permissions, Welcome API Policy Tokens
API Policy Tokens let you control what a Qovery token can do action by action, using OPA and Rego, so an agent or script never gets more access than the one job it was built for.
Jira and Linear Are Now a Trigger Into Your Governed Infrastructure
Agent Triggers extend Qovery's control plane to a new entry point: a ticket. Tag it on Jira or assign it on Linear, and it triggers the execution of a governed environment on your own infrastructure, where an agent performs whatever action it's configured for, given the context of that ticket, under the same guardrails as any other workload.
Your Agents Need Infrastructure Too. Meet Qovery Blueprints.
AI agents are provisioning infrastructure now, not just writing code. Qovery Blueprints let you define what an agent, or a developer, is allowed to deploy and under what cost rules, so that self-service or delegation doesn't mean losing control.
Secret Manager Integration: One Source of Truth for Humans and Agents.
Production secrets should live in one place and stay there, whether your next deployment is triggered by a developer or an AI agent. The Secret Manager integration connects AWS Secrets Manager, AWS SSM, or GCP Secret Manager to Qovery so secrets are referenced, never copied, and enterprise governance holds regardless of who deploys.
Keep ArgoCD. Get Qovery. ArgoCD Integration Is Here.
Moving to a new platform shouldn't mean weeks of migration work before you see any value. Qovery now lets you connect your ArgoCD server and manage your existing applications directly alongside your Terraform modules, lifecycle jobs, and Qovery-native services, from a single control plane.
Stop Guessing, Start Shipping. AI-Powered Deployment Troubleshooting
AI is helping developers write more code, faster than ever. But writing code is only half the story. What happens after? Building, deploying, debugging, scaling. That's where teams still lose hours.We're building Qovery for this era. Not just to deploy your code, but to make everything that comes after writing it just as fast.
Scale What Matters, Not Just CPU - Welcome Keda autoscaling
Not every workload should scale on CPU. Qovery brings event-driven autoscaling into the application lifecycle, letting applications scale on real signals like queue depth or request latency.
Alerting with guided troubleshooting in Qovery Observe
Get alerted and fix issues with full context. Qovery Observe notifies you when something goes wrong and guides you straight to the metrics and signals that explain why, all in one place.
Announcing Qovery Observability: the simplest way to understand your application
We are thrilled to announce the next major milestone in our platform vision: Qovery observability! Qovery Observability is our new product, ready to give you the fastest way to gain a crystal-clear, unified understanding of your application and infrastructure. Fully managed, zero lock-in, you keep the data. Devs love it, no DevOps needed. Coming soon!
Troubleshoot Faster with the New Log Search and Filtering in Qovery Observability
Following the launch of Qovery Observability, we’re progressively adding new capabilities to help you better monitor, debug, and understand your applications. Today, we’re excited to announce a major improvement to the Logs experience: you can now search and filter directly within your application logs.
Stop tool sprawl - Welcome to Terraform/OpenTofu support
Provisioning cloud resources shouldn’t require a second stack of tools. With Qovery’s new Terraform and OpenTofu support, you can now define and deploy your infrastructure right alongside your applications. Declaratively, securely, and in one place. No external runners. No glue code. No tool sprawl.
RDS monitoring is now available in Qovery Observe
Starting today, get full visibility on your RDS databases directly inside Qovery. Troubleshoot app and database issues from one place without jumping into the AWS console
GPU workloads on EKS just got way simpler with Qovery
Running GPU workloads on EKS has never been easy, until now. With Qovery’s latest update, you can enable GPU nodes, configure GPU access, and optimize costs automatically, all without writing a single line of YAML or touching Helm charts. Qovery now handles everything behind the scenes so you can focus entirely on your applications.
All things you should know to be a Meeting Master
While meetings are part of today's organizations, they can also bring some frustration preventing one from scratching its TODO list. It can be a good idea to try to promote asynchronous mediums such as Notion pages, Slack channels, etc. This page aims to bring some insights regarding WHEN / WHY holding or not a meeting.
How to Deploy Helm Charts on Kubernetes the Easy Way with Qovery
Deploying Helm charts on Kubernetes can be complex, especially when dealing with configuration overrides, security, and environment-specific setups. In this article, we show how Qovery simplifies Helm chart deployment through a seamless developer experience, robust security defaults, and powerful automation, without sacrificing flexibility.