Expose workloads with Gateway API and kgateway on Thalassa Cloud Kubernetes

kubernetes networking
2026-06-22
By Thalassa Cloud

Ingress controllers have served Kubernetes well for years, but they bundle concerns that teams often want to separate: platform operators manage the edge, while application developers attach routes to their services. The Kubernetes Gateway API was designed for that approach, and kgateway implements it with Envoy as the data plane. On Thalassa Cloud Kubernetes, each Gateway you create provisions an Envoy proxy and a LoadBalancer Service backed by a VPC Load Balancer.

Latest Posts

Expose workloads with Gateway API and kgateway on Thalassa Cloud Kubernetes

Ingress controllers have served Kubernetes well for years, but they bundle concerns that teams often want to separate: platform operators manage the edge, while application developers attach routes to their services. The Kubernetes Gateway API was designed for that approach, and kgateway implements it with Envoy as the data plane. On Thalassa Cloud Kubernetes, each Gateway you create provisions an Envoy proxy and a LoadBalancer Service backed by a VPC Load Balancer.

Deploy Database Clusters with tcloud CLI: VPC to PostgreSQL

2026-02-04
Thalassa Cloud’s Database as a Service (DBaaS) for PostgreSQL gives you managed, highly available Postgres clusters: we handle patching, backups, and failover so you can focus on your applications. You can create and manage clusters from the Console, our API (with Terraform), or the command line. The tcloud CLI is Thalassa Cloud’s command-line tool. You can manage your infrastructure from the terminal, automate deployments, script changes, or work without leaving the shell.

VPC‑Only Access for Kubernetes Clusters

We’ve added support for VPC‑only access to Kubernetes control planes. When enabled, the cluster’s public API endpoint is disabled and the Kubernetes API is reachable only from within your Virtual Private Cloud. This helps teams meet stricter security and compliance requirements without sacrificing operational access. VPC-only access is valuable for DevOps teams because it boosts security by removing the internet-facing API endpoint, which reduces the attack surface. It also makes network rules and identity limits clearer by using your VPC as the boundary.

VPC Networking Upgrade with Custom Route Tables

Introducing Custom Route Tables for VPCs Networking is at the core of any cloud infrastructure, and Thalassa Cloud’s Virtual Private Clouds (VPCs) provide secure, isolated environments for deploying workloads. Until now, our VPC networking was fully automated—when a NAT Gateway or other networking component was created, routing rules were automatically assigned. While this made deployment seamless, it limited flexibility for advanced networking use cases. With the introduction of custom route tables, users now have full control over how traffic moves within their VPCs, enabling: