Platform
DeploymentsGit, container image or Helm chart
WordPress from the catalogDatabase, snapshots, certificate in minutes
Cluster provisioningKapsule, secure by default
Managed databasesPostgres & MySQL, privately connected
SQL consoleQuery databases read-only
DNS & certificatesCloudflare zones, wildcard certificates
Networking & ingressnginx, Envoy, rate limits, CORS, Basic Auth
Object StorageBuckets, IAM keys, bucket policies
Operations
Tenant pipelinesOnboarding and offboarding as building blocks
Volumes & snapshotsPersistent data, a snapshot before every deletion
Backups & recoveryDatabases, volumes, earlier versions
Logs & monitoringLogs, usage, uptime checks
NotificationsWebhook, Slack, Teams, email
Cluster updatesNode pools, Kubernetes version, add-ons
SecretsSecret Manager, rotation, External Secrets
Security & accessRoles, mandatory 2FA, audit log, IP allowlist
New in ClusterwardSQL console: look at production data without sharing a passwordIts own read-only login, a read-only transaction and every query in the audit log – right in the cockpit.More on the SQL console All features at a glance
By role
SaaS vendorsEvery customer live in under a minute
Agencies & studiosMany client projects, one cockpit
Platform operatorsYour own workspace
CTOs & technical leadsPredictable costs, no single point of knowledge
By occasion
Migrating from QoveryConnect existing clusters, migrate step by step
Digital sovereigntyEU data centers, your project
Moving from AWS, Azure or Google CloudImport data, move hosts one by one
Audit & NIS2Evidence from operations
See it liveFrom an empty Scaleway project to your first deployment in 30 minutesWe show you Clusterward using your use case – cluster, database, domain and tenant onboarding.Book a demo All solutions at a glance
Pricing
Learn
Getting startedHow to get started with Clusterward
GlossaryTerms from the cockpit and the guides
ChangelogWhat’s new in Clusterward
Compare
All comparisonsClusterward, Qovery and DIY side by side
Clusterward vs. QoveryTwo ways to run apps on Kubernetes
Clusterward vs. DIYScripts and wikis versus a control plane
ComparisonA tenth of the price for three times as many clustersClusterward vs. Qovery: pricing, clusters, users, customer onboarding and data sovereignty – an honest comparison.See the comparison with Qovery All resources at a glance
Blog
Contact

DEEN

Book a demo

Tag

Secrets

← Clear filter

Security
Kubernetes Secrets: why Base64 is not encryption
A Kubernetes Secret is Base64, readable by anyone with the right permissions. Where secrets leak, and what a secret manager, rotation and clean permissions change.
- Secrets
- Kubernetes
- Scaleway

Product

Deployments
WordPress
Cluster provisioning
Cluster updates
Managed databases
Object Storage
Volumes & snapshots
Backups & recovery
Logs & monitoring
DNS & certificates
Networking & ingress
Secrets
Security & access
Tenant pipelines
Notifications

Solutions

SaaS vendors
Agencies & studios
Platform operators
For CTOs
Migrating from Qovery
Digital sovereignty
Moving from AWS, Azure or Google Cloud
Audit & NIS2

Resources

All resources
Getting started
Blog
Glossary
Changelog
All comparisons
Clusterward vs. Qovery
Clusterward vs. DIY

Company

Company
About us
Contact
Book a demo
Become a partner
Careers

Clusterward

Control plane for Scaleway

The control plane by BitKollegen for running SaaS applications on Scaleway. Deploy, provision, onboard customers – from one cockpit.

Contact

[email protected]
+49 511 51 53 20 63
BitKollegen GmbH Drostestr. 16 30161 Hannover

Certifications

ISO 27001
Information security management
ISO 25000
Software product quality
ISO 9001
Quality management
ISO 12207
Software life cycle processes

Legal notice
Privacy policy
Terms and conditions
Data processing agreement

Kubernetes Secrets: why Base64 is not encryption