Deploy Database Clusters with tcloud CLI: VPC to PostgreSQL
dbaaspostgresql
2026-02-04
By Thalassa Cloud
Thalassa Cloud’s Database as a Service (DBaaS) for PostgreSQL gives you managed, highly available Postgres clusters: we handle patching, backups, and failover so you can focus on your applications. You can create and manage clusters from the Console, our API (with Terraform), or the command line.
The tcloud CLI is Thalassa Cloud’s command-line tool. You can manage your infrastructure from the terminal, automate deployments, script changes, or work without leaving the shell.
We’ve added support for VPC‑only access to Kubernetes control planes. When enabled, the cluster’s public API endpoint is disabled and the Kubernetes API is reachable only from within your Virtual Private Cloud. This helps teams meet stricter security and compliance requirements without sacrificing operational access.
VPC-only access is valuable for DevOps teams because it boosts security by removing the internet-facing API endpoint, which reduces the attack surface. It also makes network rules and identity limits clearer by using your VPC as the boundary.
European businesses need more than just basic IaaS like virtual machines and storage. These basics are important, but they don’t meet the complex needs of modern applications. To compete globally and keep data within Europe, businesses require a platform with advanced services.
Thalassa Cloud goes beyond traditional IaaS by offering a platform with advanced services for modern applications. It provides European businesses with the tools needed for cloud-native applications, ensuring both advanced features and compliance.
We’re excited to announce the release of two new Kubernetes versions in Thalassa Cloud: v1.33.4-0 and v1.32.8-0. These releases bring security fixes, component updates, and enhanced stability for your Kubernetes workloads.
Security Fixes Both releases address a medium security vulnerability:
CVE-2025-5187: Nodes can delete themselves by adding an OwnerReference A vulnerability exists in the NodeRestriction admission controller where node users can delete their corresponding node object by patching themselves with an OwnerReference to a cluster-scoped resource.
We’re excited to announce that we’re building Key Management Service (KMS) and Secret Manager for Thalassa Cloud. These security services will provide the foundation for secure application development on our Dutch public cloud platform.
Why We’re Building These Services Modern cloud-native applications need more than just basic infrastructure. They require robust security & Encryption services that integrate seamlessly with your development workflow. While we already offer IaaS, Kubernetes as a Service and databases, we’re expanding our platform to include the fine graind encryption services.
While European cloud legislation evolves rapidly, Thalassa Cloud proves that technological innovation doesn’t need to take years. In just six months, we have built a fully functional cloud platform that competes with American hyperscalers on multiple fronts, and even exceeds them in transparency, control, and sovereignty.
From Vision to Reality: A Complete Cloud Platform Since inception, we’ve delivered a versatile cloud platform offering IaaS, PaaS, KaaS, and DBaaS. Our technology is available for public and private clouds, as well as turnkey and white-label solutions for partners.
Running Kubernetes in production means constantly updating your clusters. Upgrades are essential for security and new features, but they require careful timing. Move too quickly, and you might break applications. Delay too long, and you’ll fall behind on security patches and API updates.
Why Manual Upgrades Don’t Work Manual Kubernetes upgrades are problematic for DevOps teams. They often lead to inconsistent results across environments and rely on a few team members with the necessary expertise.
Whether you’re deploying critical workloads, scaling internal tools, or building your next product; the infrastructure should be secure, predictable, and automation-friendly. We believe the cloud should feel like an API, not a maze of GUIs or vendor lock-in. That’s why our roadmap is focused on three things:
Developer-first IaaS and Kubernetes Security and compliance by design Building blocks for observability and automation Here’s where we are now, and where we’re heading in the third and fourth quarter of 2025.