2. Provision your cloud
Owner: Cloud Ops · Time: ~1–2 h, mostly waiting on Terraform
You’ll finish with: a Kubernetes context, a managed PostgreSQL database, workload identity, an HTTPS host you control, and a provider values file for Step 3.
Pick exactly one provider guide. All three end at the same place and return you to the shared Helm step.
Pick your provider
Section titled “Pick your provider”EKS, Aurora PostgreSQL, AWS Secrets Manager, and an ALB with an ACM certificate. Pick AWS if your organization standardizes on AWS networking, IAM, and managed database operations.
GKE, Cloud SQL for PostgreSQL, Google Secret Manager, a static global address, and a Google-managed certificate. Pick Google Cloud if you standardize on GKE and Workload Identity.
AKS, PostgreSQL Flexible Server, Azure Key Vault, a static public IP, ingress-nginx, and cert-manager. Pick Azure if you standardize on Azure networking and managed identities.
What stays shared
Section titled “What stays shared”Application configuration lives only in the shared steps — Entra/OIDC, the runtime workloads, migrations, the scheduler, the optional fleet console, SCIM, verification, upgrades, and the IT handoff. Don’t copy it between provider guides.