Take Control with Spacelift Self-Hosted

The software-as-a-service (SaaS) model appeals to organizations that want to focus on their core business while a third party takes care of operational concerns, but it’s not always the answer. Do you have concerns about governance, compliance, security, and regulation, or do you operate in a restricted sector? Then Spacelift Self-Hosted could be the solution for you.

If your organization cannot use SaaS, self-hosted may be an option. Spacelift offers a self-hosted, self-managed platform you can deploy in your cloud account.

Today, you can deploy Self-Hosted on AWS (including GovCloud), Microsoft Azure, Google Cloud, and on-premises Kubernetes, and there are official guides for air-gapped environments. For U.S. public-sector needs, Spacelift also provides a FedRAMP Moderate Authorized SaaS environment.

Terraform Enterprise gives enterprises a private instance of the Terraform Cloud application, but, whereas Terraform Cloud and Terraform Enterprise are different distributions of the same application, Spacelift SaaS and Spacelift Self-Hosted are the same application. 

Practically, new features land in SaaS first and are included in Self-Hosted with the next release. Self-Hosted does not use the public worker pool — you run your own workers.

Imagine the possibilities! Now you can have the whole Spacelift stack, with no limitations, under your full control — not just the functionalities of a SaaS platform, but the entire infrastructure. The installation process is quick, straightforward, and requires very little preparation.

You can read more about it in our guide to getting started with Spacelift Self-Hosted on AWS. For the latest technical steps, see the current Self-Hosted docs and quick-start guides.

With the Spacelift self-hosted solution, you bring all elements into your infrastructure, into an environment you control. The reasons why you should host Spacelift on your side include:

• Security. Your organization may prefer to have all infrastructure and data in-house to avoid data breaches on the vendor side. The risk of a breach still exists, but the security approach is fully contained in the organization’s operational model. The self-hosted solution can be created in a secure perimeter, where access is very strictly controlled and resources used for the platform are explicitly assigned to it. If you prefer SaaS control but want to keep execution under your control, Private Worker Pools encrypt temporary run state end-to-end with your key.
  
  
• Control over your data. This is crucial from a regulatory perspective. With vast volumes of potentially sensitive data in circulation, multiple regulations govern Personally Identifiable Information (PII). These regulations can be specific to industries, countries, or even regions. In-house data management helps to ensure compliance. Spacelift helps you gain control of your data by allowing you to have all data — such as logs — stored in your cloud account. Air-gapped and on-prem deployment options are available when external connectivity must be restricted.
  
  
• Full control. Having the whole development lifecycle in-house enables your organization to act quickly and independently to resolve any issues or improve the process. It also makes it possible to customize in-house solutions to avoid being constrained by out-of-the-box policies.

Organizations in highly regulated industries may be permitted to use the main cloud providers such as AWS, Google Cloud, and Microsoft Azure because they are certified for highly sensitive workloads, but this may not be the case with various product-specific SaaS platforms. 

To resolve this issue, Spacelift created a self-hosted platform. If your organization has strict rules for using third-party tools, especially SaaS platforms, Spacelift Self-Hosted solves these concerns. With our self-hosted platform, you can retain data in-house, control the environment and resources, manage the stack, and keep all network traffic inside the company’s network.

If SaaS is acceptable, note that Spacelift now offers SaaS in both EU and US regions, and a FedRAMP Moderate Authorized environment is available for U.S. government workloads.

With the addition of self-hosted, Spacelift has broadened its offerings and the range of customers who can use it. The three Spacelift operating models are:

• SaaS: The Spacelift team maintains and manages this platform. Your workload is executed on our Public Worker Pools. SaaS is now available in EU and US regions.
• Hybrid SaaS: The orchestration of all tasks and configurations is done on the Spacelift SaaS platform, but you can run your own Private Worker Pools in your infrastructure. Temporary run state for Private Worker Pools is end-to-end encrypted so only your workers can read it.
• Self-Hosted: This option allows you to host the whole platform on your own cloud account. We deliver the stack; you install it and manage it. New features appear in SaaS first and are included in Self-Hosted with the next release. Self-Hosted does not use public worker pools.

Starting your installation of the Spacelift Self-Hosted platform takes just a few steps. Contact our team for more details.

Does Spacelift Self-Hosted sound like something your company should be using? Book a demo with our engineering team to discuss your options in more detail.