Deploy · self-host anything
Deploy any software to any cloud — or your customer’s.
Managed Kubernetes, GitOps that keeps every install in sync, and one versioned package per app. It runs in your cloud, on your cluster, with your keys.
Self-hosting anything is a bespoke build every time.
A custom setup per customer; config that drifts between environments; a manual upgrade for every install — and no one notices the drift until something breaks at 2am.
Run the same app across AWS, Hetzner, and a customer’s on-prem rack, and you’re maintaining three variants of one thing. What you can run here is anything that runs on Kubernetes — your own product, or third-party software your platform team has to operate.
# the whole app — one versioned package
akua.toml # intent + typed inputs
akua.lock # resolved digests + signaturesHow it works.
Package once, install anywhere, let GitOps keep it true.
-
Package it once
A versioned, signed release: akua.toml records intent, akua.lock records resolved digests and signatures. Your existing Helm charts are wrapped as-is — the package adds typed inputs around them; the chart itself is unchanged.
-
Install it anywhere
Get managed Kubernetes in minutes, or bring your own cluster. The customer picks the cloud; the package does not change.
-
Let GitOps keep it true
The platform renders each install into its own git repository, and Argo CD reconciles it. Updates land as a reviewed change, never a push straight to main.
You can run the render yourself — akua render is deterministic, and the rendered repository
is the deploy artifact you can read, diff, and keep.
What you get.
-
Install
Helm charts, without the values sprawl. Inputs are typed and validated up front.
-
Update
Bump the version once; the platform proposes the change to every install.
-
Reconcile
Drift is corrected automatically, so live state always matches the repository.
-
Roll back
A revert of rendered state — not a guess at the last good inputs.
-
Observe
Every install’s sync state and health in one view.
-
Export
Standard manifests, your images, your cluster. Leave anytime — it keeps running with us or without us.
Run anywhere. Keep the exit.
AWS · Azure · GCP · Hetzner · IONOS · OVH · Scaleway · on-prem · your own.
- KaaS — we run the control plane; your machines join as workers.
- Bring your own cloud or machines — it runs in your account, on your credentials, never ours.
Take the export anytime: standard manifests, your container images, your cluster. It keeps running with us or without us.
Proof.
Code Zero ships its software onto customers’ own infrastructure this way — packaged once, installed into the customer’s cloud, kept in sync from one place.
Operate by intent.
Open the dashboard and say “why is this install failing.” An agent reads the install’s repository, its sync status, and its events, drafts a change, and asks for the same review a person would. Same git history, same approval gate — an agent can’t do anything a human couldn’t audit.
You own it.
Standard formats end to end, and a bill you can read. Nothing here is ours to hold over you.
- Admin keys
- Yours. Not ours, not shared, not escrowed.
- Formats
- Standard end to end — no proprietary lockfile you can’t read, no console you can’t leave.
- Network
- The install only ever connects outbound; nothing reaches in.
- Billing
- We charge for the platform. You pay your cloud provider directly. No markup on compute.
FAQ.
What do I have to run?
Bring your own cluster, or get a managed one. Your machines stay yours either way.
Does it take my existing Helm charts?
Yes. A package wraps what you already ship; its inputs become a typed setup screen.
On-prem?
Yes — the install runs on the customer’s own servers and only ever connects outbound; nothing reaches in. Fully air-gapped is an enterprise conversation — talk to the founders.
Why not just run Argo CD myself?
You can — and you’d own the rendering, the per-install repositories, the drift detection, and the upgrade choreography by hand. This is that, kept in sync, with the repository still yours to take.
What if you disappear?
Every install keeps running. The repository, the rendered manifests, and the credentials are already yours.
Deploy any software to any cloud,
and keep the keys.
One versioned package per app. Managed Kubernetes or your own cluster. The export stays yours the whole way down.