Tech - OUTSCALE blog

Open source, digital commons and sovereignty: levers for the public sector

OUTSCALE — Fri, 18 Sep 2026 14:50:11 +0000

At OUTSCALE EXPERIENCES 2026, Julie Ripa, Co-Director of La Suite numérique at the Interministerial Digital Directorate (DINUM), Florian Caringi, Deputy Head of Data & Open Source, President of OW2 and Vice President of Tosit within the BPCE Group, and Léo Unbekandt, Co-Founder and Chief Technology Officer of Scalingo, discussed the role of open source and digital commons in digital sovereignty, particularly in the public sector.

Open source and digital commons are playing an increasingly important role in public-sector digital sovereignty strategies. In particular, they enable public administrations to better control their technological dependencies, facilitate reversibility and pool their digital investments. Their effectiveness nevertheless depends on specific conditions: open governance, an active community, available skills and sustainable funding.

Understanding open source and digital commons

Open source as a collaboration model

Open source refers to code distributed under a license that authorizes its use and, subject to the applicable conditions, its modification and redistribution. This approach is based on several core principles: transparency, collaboration and the ability to develop and innovate collectively.

In an open-source environment, value therefore lies not only in the code. It also depends on the communities that maintain it, the organizations that develop it and the stakeholders capable of integrating it into operational environments.

Open source thus provides a shared technological foundation. It enables several companies, public administrations and contributors to work on common building blocks sometimes through cooperation, and sometimes through competition between service providers.

Digital commons rely on governance

A digital common is a digital resource collectively managed by a group that defines its own rules. This resource may take different forms, including data, code, specifications or content.

Wikipedia and Linux illustrate this approach. However, publishing software under an open-source license is not enough to create a digital common. The decisive factor is the community and governance organized around the resource.

A project becomes a common when several stakeholders can contribute to its maintenance, participate in decision-making and ensure its continuity. Governance must therefore define how contributions are made, how changes are approved and how the project is funded.

Digital sovereignty as strategic autonomy

Controlling technological dependencies

Digital sovereignty does not mean that an organization must produce all the hardware and software components it uses on its own. Such an approach would be difficult to achieve in practice, since no organization controls the entire digital value chain, from hardware to software.

Rather, digital sovereignty is about having the ability to control and make informed choices. A sovereign organization must be able to:

identify its technological and organizational dependencies;
control its data and choose its tools;
change providers when necessary;
limit its dependence on a single supplier;
maintain the ability to respond to risks associated with its suppliers and technologies.

This approach can be described as strategic autonomy. It involves choosing one’s dependencies, measuring their impact and building resilience solutions suited to the organization’s activities.

Open source as a resilience lever

Open source contributes to this autonomy by reducing the risk of dependence on a single stakeholder. An open technology can be maintained, integrated or adapted by multiple actors, provided that a sufficiently robust ecosystem exists around the project.

This plurality facilitates reversibility. An organization can rely on different integrators, service providers or internal teams to operate the same technology. It therefore has greater room for maneuver in the event of price changes, license modifications, product discontinuation or strategic disagreement with its provider.

Reversibility also depends on architectural choices. Open APIs, open software and widely adopted technologies make it easier to move a solution to another environment.

Public-sector strategies

The “public money, public code” principle

In the public sector, opening up code reflects a desire to reuse collective investments. The “public money, public code” principle holds that code funded by taxpayers should be reusable by other public administrations, companies or citizens.

This approach pursues several objectives. It improves the transparency of public action, facilitates code review and creates opportunities for cooperation between public administrations. It also promotes innovation by enabling different stakeholders to reuse and adapt existing developments.

La Suite numérique illustrates this approach. This suite of collaborative tools for public-sector employees is developed as open source and operated by DINUM. It can be hosted on sovereign clouds, including OUTSCALE’s SecNumCloud environment or ministerial infrastructures.

Pooling development at European level

Opening up code facilitates collaboration between public administrations in different countries. Tools developed to meet a public-sector need can be reused in other national contexts and then enhanced through new contributions.

This cooperation makes it possible to bring together resources around shared challenges, pool development efforts and reduce the costs associated with creating similar solutions. It also contributes to the emergence of European alternatives to major technology platforms.

However, publishing the code is only a first step. For a public-sector solution to become a sustainable digital common, it must attract private companies, other public administrations and contributors from several countries.

Building a sustainable community

Open and inclusive governance

The long-term viability of a digital common depends on the diversity and commitment of its ecosystem. A solution that remains entirely dependent on a single public administration or company retains a structural weakness, even when its code is open.

Governance must therefore organize the participation of different stakeholders. It should establish rules for reviewing contributions, prioritizing developments, resolving disagreements and maintaining essential components.

Foundations and associations can play an important role in this organization. A foundation with open governance can bring together software publishers, integrators, users and public-sector stakeholders around common rules. An association can also facilitate the sharing of best practices, co-development and joint funding.

Cooperation and competition within the same ecosystem

A digital common can bring together competing companies that contribute to the same technological building block. This logic of coopetition enables each stakeholder to develop its own services while improving a shared software infrastructure.

PostgreSQL is an example of a technology around which several companies can offer services, integrations or support. Competition between these stakeholders helps strengthen the underlying technology and increases the range of options available to users.

The community then extends beyond the project’s initial offering. It transforms open-source software into a widely adopted, maintained and usable resource for multiple organizations.

Assessing open-source risks

Distinguishing open source, source-available and open core

The term “open source” can cover different realities. Some software publishers offer an open version of their software while reserving essential features for proprietary modules. This model, often called open core, can limit the user’s actual freedom.

A thorough assessment should therefore examine:

the license applicable to the code;
the features available in the open version;
the terms governing commercial use;
the project’s governance;
the diversity of its contributors;
its maintenance and support arrangements;
the community’s ability to continue the project.

Software may be publicly accessible while remaining highly dependent on a single company. The project’s long-term viability must therefore be assessed alongside its license and technical characteristics.

Monitoring project vitality

Opening up the code does not guarantee software continuity. A project may be technically promising while depending on a very small team or a limited number of contributors. If the company maintaining it changes its strategy, abandons the product or changes its license, users may face significant operational risk.

Organizations must therefore assess the vitality of communities, the frequency of contributions, the diversity of maintainers and the existence of stakeholders capable of ensuring the project’s continuity. This approach is part of the broader management of software supply-chain risks.

Understanding licenses and forks

A license applies to code at a given point in time. If the project owner subsequently changes the license, code already released under the previous license remains subject to the rights defined at that time, subject to the specific terms of the license concerned.

A fork consists of creating a new branch of a project from an existing version and continuing its development along a separate path. This possibility enables a community to keep developing software when its governance, license or strategic direction no longer meets its needs.

A fork does not eliminate legal constraints. The new project inherits the obligations of the license governing the reused code. Some licenses are compatible with one another, while others impose specific restrictions on redistribution, commercial use or research.

Companies can rely on an Open Source Program Office to manage these issues over time. This function helps structure license analysis, contribution management and compliance with open-source usage requirements.

Security and maintenance of critical components

Automated analysis is changing the scale of cybersecurity

Artificial-intelligence tools capable of analyzing code can help detect vulnerabilities in open-source projects. They also lower the barrier to entry for developers who want to contribute to existing projects.

However, this development increases the volume of potential issues that must be addressed. Projects may receive more reports, fixes and contributions, with varying levels of quality. Teams must therefore strengthen their review, assessment and prioritization processes.

For operators of large infrastructures, the growing number of vulnerabilities requires shorter response times. Security becomes an organizational capability based on monitoring, coordination and the availability of teams able to intervene quickly.

Funding essential components

A large share of proprietary software and digital services relies on open-source building blocks. The robustness of these components is therefore a collective concern for public administrations, companies and users.

Organizations that use these projects must contribute to their long-term sustainability. This contribution can take several forms:

direct funding for foundations and projects;
code contributions and vulnerability fixes;
provision of expertise;
participation in governance;
support for training and talent development.

European funding mechanisms dedicated to maintaining digital commons can reinforce this dynamic. They help support sovereign and open-source projects that provide collective value but have limited resources.

Creating value with open source

Value also lies in operation

Open source can support viable business models. Commercial value often comes from the services surrounding the software: integration, hosting, operations, support, maintenance, security and scaling.

A company can therefore use open-source technology while providing specialized operational expertise. It helps customers deploy the software, keep it running in production and adapt it to their specific requirements.

This approach is particularly relevant for managed services. Customers benefit from open technology and professional support to operate it over the long term.

Developing European alternatives

Open source can also support the creation of European technology companies. Platforms such as Scalingo rely on open-source components and provide environments that enable customers to test, deploy and operate these technologies.

The use of open software and open APIs strengthens the reversibility of the services offered. Customers can retain the ability to change providers and reduce their exposure to proprietary interfaces.

This proposition addresses the growing expectations of public- and private-sector organizations seeking to limit their dependence on major technology platforms. It combines open technology with operational, support and security expertise.

Three priorities for organizations

To turn open source into a lever for digital sovereignty, organizations can focus their efforts on three priorities:

map technological dependencies, licenses and critical stakeholders;
contribute to the projects used by the organization through code, funding or expertise;
participate in governance structures capable of ensuring the continuity and evolution of digital commons.

This approach must involve IT, legal, procurement, security and business teams. Digital sovereignty is an organization-wide strategy combining architecture, governance, skills and funding.

Conclusion

Open source and digital commons are essential levers of strategic autonomy. They facilitate reversibility, resource sharing, transparency and supplier diversification, while encouraging the emergence of European technology ecosystems.

Their effectiveness nevertheless depends on organizations moving beyond the simple consumption of open software. Sustainable digital sovereignty requires active communities, inclusive governance, local expertise and regular funding. Open source is not free: it relies on contributions, shared responsibilities and investments capable of ensuring the continuity of critical digital building blocks.

L’article Open source, digital commons and sovereignty: levers for the public sector est apparu en premier sur OUTSCALE blog.

SecNumCloud, the qualification now mandatory for the state’s sensitive data: the complete guide to the legal framework and scope of application

OUTSCALE — Thu, 17 Sep 2026 08:43:14 +0000

Since 22 August 2026, the rules have changed for French government bodies that host their most sensitive data in the Cloud. An order published in the Official Journal approves the SecNumCloud framework as the reference framework for meeting the security and protection requirements set out in the new regulatory framework.

This legal shift, in preparation for several years, raises a very concrete question for government bodies, their operators, and the companies that work with them: who is affected, from when, and for exactly which data?

This guide reviews the legal framework, the scope of the obligation, how SecNumCloud compares with other security frameworks, and the outlook for this digital sovereignty doctrine.

What is SecNumCloud?

SecNumCloud is the qualification framework for Cloud service providers, developed and issued by ANSSI (Agence nationale de la sécurité des systèmes d’information — France’s national cybersecurity agency). Created in 2016, it has gone through several revisions, with version 3.2 now the framework in force.

One important point of vocabulary to clarify from the outset: SecNumCloud is a qualification, not a certification in the sense of ISO 27001 or HDS. An ANSSI qualification involves an assessment carried out by an accredited audit provider, on the basis of which the agency itself grants the recognition: a process that is more demanding and more tightly controlled than a certification issued by a standard accredited body.

In concrete terms, SecNumCloud attests to a high level of technical and organizational security, but above all, it guarantees immunity from foreign extraterritorial legislation, first and foremost the US Cloud Act and FISA. It is this dimension of legal independence that sets SecNumCloud apart.

The legal framework that made SecNumCloud mandatory

Since when has SecNumCloud really been mandatory, rather than recommended? Are there any exemptions? Could an equivalent European certification be enough?

These are the questions that come up most often on this topic. The answer lies in a precise timeline, built in three stages.

The obligation did not appear out of nowhere: it is the culmination of a trajectory that began in 2021, with the government’s “Cloud at the center” (“Cloud au centre”) doctrine, which already recommended that government bodies use qualified offerings for certain sensitive data. Three texts then built, step by step, the current legal framework:

The SREN law (2024), in Article 31, establishes the principle of an obligation to use SecNumCloud-qualified providers to host the State’s sensitive data.
Decree No. 2026-272 of 14 April 2026 sets out the terms of application: who is affected, what falls under the notion of sensitive data, and the applicable exemption regime.
The Order of 12 August 2026, published in the Official Journal on 14 August, formally approves the SecNumCloud 3.2 framework as the technical framework for implementation. It is this text that gives binding force to what had, until then, remained a strongly recommended best practice.

The decree provides for an exemption regime for certain projects already under way. This is not a commercial loophole: the exemption must be justified, closely regulated, made public under the prescribed conditions, and approved at the required level. It does not allow sovereignty and security requirements to be permanently set aside.

This timeline is worth understanding as a whole: it shows a digital sovereignty doctrine built progressively, with each text refining and reinforcing the one before it.

Who is affected by the SecNumCloud obligation and what sensitive data is covered?

The scope of the obligation is precise. Those affected include, in particular:

central government administrations and relocated national services;
their State operators;
certain public interest groupings (groupements d’intérêt public, or GIP) falling within the scope defined by the texts.

These entities are subject to the obligation when they use a private provider to host sensitive data as defined by the decree: that is, data whose breach would harm public order, public safety, or public health.

Are local authorities affected by the SecNumCloud obligation?

Local authorities (collectivités territoriales) are not directly covered by the current scope of Article 31 of the SREN law.

They may nonetheless choose to use SecNumCloud-qualified offerings to meet their own security, sovereignty, and data protection requirements.

Since the regulatory framework around the sovereignty of digital procurement is likely to evolve, this remains a topic for local authorities and their IT departments (DSI) to watch.

SecNumCloud compared with other frameworks

SecNumCloud is not in competition with ISO 27001 or HDS: these certifications serve different purposes, and an organization can very well hold several qualifications or certifications at once.

ISO 27001 is an international standard for information security management, with no dimension of legal sovereignty.
HDS (Hébergeur de Données de Santé, or Health Data Hosting) is a sector-specific certification, dedicated to health data.
SecNumCloud is a qualification designed specifically for Cloud services, combining strict requirements on security, operations, and sovereignty.

At the European level, the EUCS (European Cybersecurity Certification Scheme for Cloud Services), a harmonized Cloud certification scheme, has been under discussion for several years to provide an EU-wide equivalent. It remains under negotiation, however, and is not intended to replace SecNumCloud in the short term.

What this actually changes for public-sector players and their providers

One point deserves clarification: the SecNumCloud obligation does not mean that a bidder for a public contract (a web development agency or a business software vendor, for example) must necessarily be qualified from end to end itself.

However, as soon as a project touches the State’s sensitive data, the requirement applies to one specific, non-negotiable link: hosting. The successful bidder will need to have that data hosted on Cloud infrastructure that itself holds the SecNumCloud qualification, or an equivalent recognized by ANSSI at the European level. It is this piece of infrastructure that constitutes the unavoidable compliance standard.

Conclusion

The Order of 12 August 2026 closes a legal process launched with the SREN law of 2024: SecNumCloud is no longer a recommended best practice — it is now a legal condition for hosting the State’s most sensitive data. The scope remains targeted for now, but the direction is clear.

Today, around ten offerings are SecNumCloud-qualified in France, including OUTSCALE’s public Cloud offering.

A pioneer, OUTSCALE was the first public Cloud provider to obtain the SecNumCloud qualification, in 2019, and also holds HDS certification, enabling it to meet the needs of organizations with specific requirements for hosting health data.

Discover OUTSCALE’s sovereign Cloud infrastructure.

L’article SecNumCloud, the qualification now mandatory for the state’s sensitive data: the complete guide to the legal framework and scope of application est apparu en premier sur OUTSCALE blog.

How can Europe ensure the deployment of sovereign and trustworthy AI?

OUTSCALE — Wed, 22 Jul 2026 13:20:58 +0000

Artificial intelligence is now entering the stage of industrialization. Beyond technical challenges, this scaling phase raises a strategic question for the European continent: the conditions required for the emergence of high-performing, autonomous, and trustworthy AI.

As part of OUTSCALE EXPERIENCES 2026, Igor Caron (Co-founder, Lighton), Emmanuel Leroux (CEO, Bull), and Mathieu Feuillet (CISO, Dassault Systèmes) shared their perspectives on the pillars of this European success.

Infrastructure at the heart of technological sovereignty

Digital independence cannot be real without full control of the value chain. Emmanuel Leroux emphasizes that sovereignty necessarily requires control over “compute,” encompassing physical components, firmware, and software platforms alike.

Today, Europe faces strong dependence on foreign GPUs and the uncertainties of global supply chains. To address this, it is crucial to strengthen industrial capabilities and consolidate infrastructure within the continent.

Ultimately, without solid hardware and software autonomy, Europe’s capacity for innovation will remain fragile and dependent on external decisions.

Ethics as a lever for competitiveness

Far from being a mere constraint, trust is becoming the key driver of technology adoption. It cannot be imposed; it must be built patiently through tangible proof.

At Dassault Systèmes, this approach takes the form of a rigorous framework built on fundamental pillars: the primacy of human oversight, system security, strict respect for intellectual property, as well as fairness, transparency, and environmental responsibility.

For businesses, the question has shifted from the technical feasibility of AI to its reliability. Addressing this challenge requires providing concrete assurances regarding data governance, effective control of decision-making processes, and full traceability of outcomes.

Leveraging domain expertise through AI

The effectiveness of an AI solution is not measured solely by the sophistication of its algorithms, but above all by its ability to mobilize a company’s informational assets.

As Igor Caron points out, needs originate in the field: business units want AI tools integrated into the enterprise, capable of securely leveraging internal knowledge and sensitive data.

To address this challenge concretely, LightOn focuses on a technical architecture designed for real-world business use. The idea is not to systematically rely on heavy and costly infrastructure, but to favor more efficient processing, particularly using CPU-based approaches when they meet business needs.

This approach also relies on the RAG methodology, which consists of connecting the AI model to the organization’s internal documents and knowledge. Instead of depending solely on the raw power of a large model, the AI retrieves relevant information from company sources, then reformulates it in a usable, traceable, and contextualized way.

The benefits are twofold: on one hand, infrastructure and computation costs are significantly reduced; on the other, the relevance of responses improves because the system relies on up-to-date internal data. This makes it possible to build AI that is more affordable, easier to deploy at scale, and more profitable for organizations.

Beyond sovereignty: the imperative of excellence

While sovereignty is an essential foundation, it cannot be an end in itself.

To compete with American and Chinese powers, Europe must develop technologies whose competitiveness extends internationally. This ambition requires moving beyond a purely defensive posture to embrace a true culture of overall performance.

The fundamental objective is no longer just to protect digital borders, but to bring superior solutions to market.

Prioritizing use cases to catalyze deployment

The lack of concrete use cases is a major, though often overlooked, barrier to AI development in Europe.

Beyond infrastructure gaps, the continent suffers from limited real-world adoption of technological tools. Since usage drives demand, it is the only true guarantee of return on investment.

Rather than focusing exclusively on increasing computing power, efforts should concentrate on designing specialized business applications rooted in the needs of research, healthcare, and industry.

Architecture serving strategic autonomy

Achieving independence does not rely on using a monolithic tool, but on deploying intelligent structures.

The example of Dassault Systèmes highlights this approach: by orchestrating a multitude of specialized models, each fulfilling a defined role, it becomes possible to guarantee high-level results. This approach drastically reduces dependence on a single provider.

This organizational model thus makes it possible to reconcile technical performance requirements with sovereignty imperatives.

Trust as the cornerstone of European AI

The emergence of trustworthy European AI does not depend on a single factor, but on a synergy of requirements: controlled infrastructure, a robust ethical framework, the use of company-specific data, strong technological capabilities, and the development of concrete use cases.

The continent already has the expertise and partners needed to win this race. The main challenge now is to unite these strengths behind a common goal: to build AI that protects sovereignty, performs on a global scale, and is widely integrated into our economies.

Key takeaways

1. Sovereignty starts with control of infrastructure

Europe cannot claim autonomous AI without controlling the entire technological stack, from hardware (especially GPUs) to software. Today, dependence on foreign players weakens its capacity for innovation. The priority is therefore to strengthen industrial capabilities and build sovereign infrastructure, an essential condition for independent decision-making and sustainable innovation.

2. Trust and ethics become a competitive advantage

European AI must differentiate itself through reliability. This requires strong guarantees: human oversight, security, transparency, respect for data and intellectual property. The challenge is no longer just to make AI work, but to prove that it is trustworthy. This requirement can become a lever for competitiveness against other global powers.

3. Impact depends on real-world use cases and performance

Beyond sovereignty, Europe must create real value. This involves business use cases (industry, healthcare, etc.), leveraging company-specific data, and efficient architectures (such as specialized models rather than a single general model). The dual objective is to accelerate adoption and deliver globally competitive solutions.

These three pillars infrastructure, trust, and use cases together form the foundation of a European AI that is sovereign, credible, and high-performing.

L’article How can Europe ensure the deployment of sovereign and trustworthy AI? est apparu en premier sur OUTSCALE blog.

Cluster API Provider OUTSCALE v1.0.0: A Stable Release for Production Environments

Renaud Calle — Mon, 25 Aug 2025 13:36:28 +0000

Cluster API Provider OUTSCALE (CAPOSc) has reached functional and technical maturity with the launch of version v1.0.0, the result of several months of continuous iteration for production environments.

Stronger foundation, improved user experience

The ramp-up that began with v0.4.0 involved several major changes:

Simplified deployment
Clearer management of machine images (OMIs)
Redesigned logs for smoother readability
Fine-grained control over security parameters
A more sustainable foundation for a reliable and intuitive user experience

These enhancements have strengthened the tool’s stability and laid the groundwork for a more dependable and user-friendly experience.

What v1.0.0 changes in practice…

This v1.0.0 release introduces decisive improvements to meet the operational needs of cloud and DevOps teams, including:

Multi-AZ support for Kubernetes clusters
Reuse of existing resources for more flexible workflows
Public IP pool management for node pools
Enhanced network control by filtering inbound access to the Kubernetes API and outbound traffic
Optimized deployment times

In parallel, the codebase has been entirely redesigned to improve maintainability and scalability.

“With v1.0.0, we’ve moved beyond the experimental stage. We’ve built a more robust, faster, and easier-to-use provider without compromising security. It’s a true foundation of trust for teams looking to industrialize their Kubernetes cluster management on OUTSCALE.””
Renaud Calle, Open Source Development Team Manager, OUTSCALE

An ambitious and open roadmap

The release of v1.0.0 is only the beginning. The team is already working on upcoming improvements to the provider, in a co-construction approach with the community:

Native support for the managed OKS (OUTSCALE Kubernetes Service) offering
API redesign to minimize user impact and ensure transparency
Multi-tenancy capabilities to deploy workloads across multiple OUTSCALE accounts
Regular compatibility tracking with the latest Kubernetes versions
Strengthened security aligned with OUTSCALE’s sovereign cloud requirements

Join the community

CAPOSc grows thanks to its ecosystem of users, contributors, and partners. You can:

Test v1.0.0
Share your feedback
Join our community on Discord
Actively contribute to the roadmap

Every use case matters. Every piece of feedback helps us improve a provider designed for critical environments, aligned with sovereignty, security, and performance requirements.

Learn more or join us: Github | Discord

L’article Cluster API Provider OUTSCALE v1.0.0: A Stable Release for Production Environments est apparu en premier sur OUTSCALE blog.

Release of Version 1.0.0 of Our Terraform Provider

Renaud Calle — Mon, 17 Feb 2025 13:27:52 +0000

We are thrilled to announce the official release of version 1.0.0 of our Terraform provider! This version marks a major milestone in the development of our provider and demonstrates our commitment to delivering robust and reliable tools to facilitate your infrastructure management.

Why Version 1.0.0?

Version 1.0.0 is a symbolic release that reflects the stability, maturity, and future compatibility of our provider.

API Stability: The provider’s resources and data have been designed for long-term compatibility.
Performance Improvements: More efficient API call management to accelerate deployments.
Comprehensive Documentation: All resources and data are documented for quick onboarding.
Community Support: Integration of feedback and issue resolutions reported by our users.

What’s New?

New Features

User and Policy Management with EIM

We have added resources and data sources for EIM (Elastic Identity Management), enabling the management of:

Users (creation, management, and deletion).
User groups to organize your teams.
Policies and policy versions to define granular permissions.

Credential Configuration via Profiles

We introduced the ability to define your credentials directly using profiles.

Connecting Virtual Machines to Load Balancers with Specific IPs

It is now possible to attach virtual machines to Load Balancers while specifying backend IPs.

Improvements

Maintenance and Testing Enhancements

Internal adjustments ensure that our provider is easier to maintain.

Optimization and Refactoring

General improvements have been made to enhance clarity and ensure an optimal user experience.

Where to Find the Provider?

Our provider is available on the Terraform Registry.

terraform {
    required_providers {
        outscale = {
            source = "outscale/outscale"
            version = "1.0.1"
        }
    }
}

provider "outscale" {
    # Configuration options
}

Thank You to the Community

We would like to thank all contributors, testers, and community members for their support.

What’s Next?

Version 1.0.0 is a milestone, not the end. We have already started planning future features.

Try It Today!

Download the latest version, test it, and share your feedback with us.

L’article Release of Version 1.0.0 of Our Terraform Provider est apparu en premier sur OUTSCALE blog.

Boost your operational efficiency with OUTSCALE Kubernetes as a Service!

OUTSCALE — Thu, 28 Nov 2024 16:02:36 +0000

IT infrastructure management should never hinder your ability to innovate.
With OUTSCALE Kubernetes as a Service (OKS), revolutionize your container management with a managed Kubernetes platform that combines simplicity, scalability, and security.

Simplified Management of Your Kubernetes Infrastructure

Managing Kubernetes infrastructure can be complex and resource-intensive. OKS removes these obstacles by providing comprehensive support for operational maintenance (MCO) and security maintenance (MCS), available 24/7.
With expert technical support by your side, your teams can focus on innovation and high-value projects, confident that your Kubernetes clusters are running optimally and without interruption.

Scalability and Flexibility for Your Growing Workloads

In an environment where demands constantly fluctuate, OKS delivers infrastructure designed to adapt quickly:

On-Demand Scalability: Through automation, OKS dynamically adjusts your resources based on your business needs without extra effort. Whether it’s scaling up to meet a traffic surge or scaling down to control costs, OKS has you covered.
Operational Flexibility: OKS supports your growth by offering an environment that evolves with your applications, requiring no additional effort from your teams.

Rapid Deployment and Ready Clusters in Less Than 10 Minutes

OUTSCALE Kubernetes as a Service enables the deployment of Kubernetes clusters in under 10 minutes, accelerating your projects and enhancing your responsiveness to market changes.

Integrated Security

Security is at the core of OKS’s priorities. Our platform is secure by design, ensuring the protection of your data and applications:

Dedicated Control Plane for Each Client: Each client benefits from reinforced isolation and a fully secure environment to safeguard their workloads.
Secure-By-Design Platform: Available on the Cloud qualified as SecNumCloud 3.2 compliant.

A Solution to Unlock Your Innovation Potential

OUTSCALE Kubernetes as a Service is designed to offer more than just a service. It’s a strategic enabler that optimizes your operations, reduces costs, and accelerates your development cycles, all while ensuring maximum security.

Don’t let complexity slow your growth. Embrace OKS and unleash your team’s potential to focus on what truly matters: innovation and value creation.
Discover how OKS can optimize your operations and unlock your organization’s full potential.

L’article Boost your operational efficiency with OUTSCALE Kubernetes as a Service! est apparu en premier sur OUTSCALE blog.

Benefit from a managed Cloud solution in a SecNumCloud 3.2 environment

OUTSCALE — Tue, 26 Nov 2024 15:50:04 +0000

In an environment where the management of sensitive data has become a critical issue, businesses need to reconcile budget optimisation, regulatory compliance and enhanced security. With OUTSCALE Kubernetes as a Service (OKS), we are responding to these concerns.

Strategic advantage thanks to data sovereignty

For businesses looking to guarantee their digital independence, OUTSCALE offers a sovereign cloud solution hosted on a SecNumCloud 3.2 qualified environment, guaranteeing that your data remains under French and European jurisdiction.

This means:

Strict compliance with local regulations: your sensitive data is protected from foreign interference by a qualified infrastructure that complies with European requirements (RGPD, NIS2).
Trusted hosting: secure operational management by specialized teams, dedicated to ensuring the continuity of your operations.

By choosing OKS, you gain a competitive advantage by combining data sovereignty and operational flexibility. It’s the guarantee of remaining compliant while optimizing your business processes.

Interoperability and Advanced Security

We have designed our solution to seamlessly integrate with your existing systems while enhancing their protection. Key features include:

Strict Isolation: Your resources and data benefit from physical and logical separation, reducing the risk of exposure.
Comprehensive Regulatory Compliance: By adhering to frameworks such as the SREN law, we ensure a secure and compliant environment for your cloud operations.
Cloud Provider Migration Facilitator: By promoting interoperability, OKS gives you the freedom to easily migrate to another provider if needed, ensuring your strategic independence.

Certifications That Build Confidence

OUTSCALE Kubernetes as a Service certifications demonstrate our commitment to operational excellence and security:

ISO 27001 and 27017 for information systems security.
HDS (Health Data Hosting) for companies in the medical sector.
SecNumCloud 3.2 for optimum protection of sensitive data.

These certifications ensure that your teams are able to meet audit requirements and boost the confidence of your business partners.

Budget optimization without compromising performance

OUTSCALE Kubernetes as a Service combines the benefits of a shared, sovereign managed cloud infrastructure with the customization required to meet your needs.

Cost control: budget optimisation that guarantees compliance with your security and legal obligations, without compromising performance.
Investments aligned with your business objectives: Strategic management that maximises the added value of your cloud resources.

With OUTSCALE Kubernetes as a Service, you benefit from a sovereign cloud designed to support your strategic ambitions while reducing your costs and risks.

Conclusion

OUTSCALE Kubernetes as a Service is much more than a cloud solution. It’s a strategic lever for decision-makers, offering sovereignty, compliance and security. By enabling you to combine technological innovation and risk management, OKS becomes an essential asset for securing your business and accelerating your digital transformation.

L’article Benefit from a managed Cloud solution in a SecNumCloud 3.2 environment est apparu en premier sur OUTSCALE blog.

How to deploy Codestral on OUTSCALE’s sovereign and secure infrastructure?

Stéphane Robert — Mon, 18 Nov 2024 16:51:18 +0000

Generative AI is playing an increasingly significant role in software development. By generating precise code snippets, automating testing, and simplifying documentation, these LLMs (Large Language Models) enhance developers’ productivity while freeing up time for innovation.

However, the rise of Generative AI raises a critical question: how can we ensure the sovereignty and security of the generated code?

LLM and Asset Security

Companies and institutions regularly handle sensitive data and codes, but using AI tools hosted on online platforms may expose these strategic assets to various risks.

First, extraterritorial laws like the Cloud Act in the United States allow certain governments to request access to data stored within their jurisdictions, potentially compromising the confidentiality of critical information.

Second, industrial espionage and cyberattacks increase the risk of intrusion, code theft, or even sabotage, particularly through supply chain attacks.

To address these threats, organizations must consider solutions that combine the power of Generative AI with guarantees of security, data sovereignty, and intellectual property protection.

Dassault Systèmes and Mistral AI Partnership

In July 2024, Dassault Systèmes and Mistral AI announced a strategic partnership to deliver reliable industrial solutions based on artificial intelligence to accelerate the Generative Economy. This partnership combines the virtual twin experiences and the sovereign Cloud infrastructure of OUTSCALE (Dassault Systèmes) with the large language models (LLMs) from Mistral AI.

In this context, OUTSCALE has launched an LLM as a Service (LLMaaS) offering, specifically designed to enable rapid development of Generative AI use cases.

This offering is the first to integrate Mistral AI models on a 100% sovereign, secure Cloud qualified with SecNumCloud 3.2, ensuring top-tier performance while providing enhanced protection for sensitive data and intellectual property.

Available Mistral AI Models

As part of their partnership, OUTSCALE and Mistral AI offer a range of Artificial Intelligence models designed to meet the specific needs of companies and institutions.

These models include Mistral Small and Codestral, integrated into the LLMaaS (Large Language Model as a Service) deployed on OUTSCALE’s sovereign Cloud infrastructure.

This offer allows organizations to fully leverage the capabilities of Generative AI, in a sovereign and secure environment.

Mistral Small: A Lightweight and Versatile Model

Mistral Small is designed to offer lightweight Generative AI solutions while optimizing resource consumption. Ideal for projects requiring speed and efficiency without compromising quality, it adapts to a wide range of tasks such as text generation, auto-completion, and data processing from simple instructions. Thanks to its reduced latency, Mistral Small is particularly well-suited for real-time applications or environments that require quick responses.

Mistral Small is effective for:

Conversational assistants: Provides rapid and accurate contextual assistance, ideal for smooth interactions.
Documentation and text analysis: A powerful tool to automate editing or synthesis tasks effectively.
Integration into web applications: Perfect for content management systems or customer service interfaces that require fast processing and lightweight handling.

With Mistral Small, organizations benefit from a high-performance Generative AI model that optimizes their resources while ensuring complete confidentiality, thanks to OUTSCALE’s secure infrastructure.

Codestral: A Powerful AI for Code Generation

Codestral is an AI model specialized in code generation, designed for development teams looking to automate and optimize their programming processes.

This model supports over 80 programming languages, including Python, Java, and C++, and features an extended context window of 128,000 tokens, enabling code analysis and generation for large-scale projects.

Codestral is tailored to:

Code generation and completion: Responds to developers’ instructions by producing code segments that adhere to best practices in each language.
Unit test creation: Automates test generation to ensure code robustness and reliability.
Configuration and orchestration: Can write configuration files for tools like Ansible, Kubernetes, or Terraform.

In addition to its advanced features, Codestral offers exceptional flexibility, particularly thanks to the OUTSCALE environment, which allows organizations to fully secure their data and sensitive code.

This model is especially relevant for organizations handling confidential information, as it ensures that the data being processed never leaves OUTSCALE’s sovereign infrastructure.

OUTSCALE Offering

The OUTSCALE offering is based on a robust infrastructure comprising a Virtual Machine (VM) instance specifically optimized for Mistral models. This instance is equipped with two L40 GPUs, delivering exceptional computational power for applications requiring intensive execution of Generative AI models.

This infrastructure is deployed within a Virtual Private Cloud (VPC) in OUTSCALE’s cloudgouv-eu-west-1 region, ensuring enhanced performance and security to meet the strict requirements of businesses and institutions. Notably, this region is SecNumCloud 3.2 qualified, reflecting adherence to the highest security standards. This qualification ensures that the infrastructure meets rigorous criteria for data protection and compliance with European regulations, providing businesses with complete peace of mind regarding the sovereignty and security of their hosted data.

By combining these material and regional elements, OUTSCALE’s offering provides a secure Generative Artificial Intelligence solution, enabling organizations to fully leverage the advanced capabilities of Mistral AI models, while ensuring data sovereignty and confidentiality.

How to Proceed?

Deploying a Codestral Instance from OUTSCALE Marketplace

Let’s dive into a detailed tutorial on how to deploy a Codestral instance from OUTSCALE Marketplace and use it with Visual Studio Code, enhanced by the Continue extension.

Once logged into the platform, navigate to the Catalog and search for “MISTRAL AI x OUTSCALE” in the left-hand section, then click to view the related products. You will find two OMIs (OUTSCALE Machine Images) titled Codestral and Mistral Small, illustrated in the image below.

Click on Codestral and you will be directed to the Bundle details page. You should see, as illustrated below, the contents of the package, including the Codestral model and the two Nvidia L40 GPUs.

In the right-hand section, accept the terms and click “Proceed to Subscription.”
On the second screen, you’ll need to provide your connection credentials (AK/SK), and on the third, the VPC and Subnet you previously configured via Cockpit or Terraform infrastructure code.

Once the entered information is verified, click “Deploy.” After a few minutes, you will see the deployed VM in Cockpit.

Attach a public IP address to access it.

Using Codestral with Visual Studio Code

From a machine authorized to connect to the instance via security groups, install Visual Studio Code and, in the extensions, search for the Continue extension from the company of the same name.

On the right, you should see an additional icon appear, as shown in the screenshot below.

At the bottom of the screen that appears, click the gear icon and add the Codestral model to your project. In the [models] section, add the following information, replacing the IP address and model name if they differ:


  "models":
    {
      "title": "OSC-Mistral",
      "model": "codestral-2405",
      "apiBase": "http://xxx.xx.xx.xxx:5000/v1",
      "provider": "mistral"
    },
  ...

If you wish to use it for auto-completion, look for the [tabAutocompleteModel] section as indicated below:


  "tabAutocompleteModel":
    {
      "title": "Tab Autocomplete Model",
      "provider": "mistral",
      "model": "codestral-2405",
      "apiBase": "http://xxx.xx.xx.xxx:5000/v1"
    },

That’s it; everything is ready for our test.

A Test

I had fun submitting a prompt asking it to generate infrastructure code I am very familiar with: Ansible.

Generate an Ansible playbook to install Apache on Linux.

Guidelines to follow:

- Support multiple Linux families
- Include the proper Apache package name to install based on the OS in a variables file
- Ansible module names must be complete, e.g., ansible.builtin.apt
- Use handlers to restart services if the service configuration is modified
- Use true or false for boolean values
- Provide the Nginx configuration in a template
- Target hosts are machines in the webservers group
- Provide the main playbook
- Provide an example Jinja template for Apache with multiple variables
- Provide variables files for Debian and RedHat families

The result:

Here’s a solution for your problem:

Playbook (main.yml):


- name: Install and configure Apache
  hosts: webservers
  become: true
  vars_files:
    - "{{ ansible_os_family }}.yml"
  tasks:
    - name: Install Apache
      package:
        name: "{{ apache_package }}"
        state: present

    - name: Copy Apache configuration file
      template:
        src: apache.conf.j2
        dest: /etc/httpd/conf/httpd.conf
      notify:
        - Restart Apache
  handlers:
    - name: Restart Apache
      service:
        name: "{{ apache_service }}"
        state: restarted

Template (apache.conf.j2):

ServerRoot "{{ apache_root }}"

Listen {{ apache_port }}


    AllowOverride none
    Require all denied


DocumentRoot "{{ apache_document_root }}"


    Options Indexes FollowSymLinks
    AllowOverride None
    Require all granted

Variables for Debian (debian.yml):


apache_package: apache2
apache_service: apache2
apache_root: /etc/apache2
apache_port: 80
apache_document_root: /var/www/html

Variables for RedHat (RedHat.yml):


apache_package: httpd
apache_service: httpd
apache_root: /etc/httpd
apache_port: 80
apache_document_root: /var/www/html

I’ll let you judge, but the result is truly impressive. It understood the instructions and followed them to the letter. It even provided examples of variable files for Debian and RedHat families, which is very practical.

It also used handlers to restart services if the configuration is modified and used true or false for boolean values. Finally, it utilized a Jinja template for the Nginx configuration. Bravo!

The prompt could still be improved by asking it to properly define the owner and permissions of the configuration files.

Conclusion

By combining the power of Codestral for code generation with the security offered by OUTSCALE, companies can not only improve their productivity but also ensure the sovereignty and security of their code. Whether for industrial applications, complex projects, or critical environments, this solution is a true asset for development teams.

Stay tuned, as new announcements are coming soon!

L’article How to deploy Codestral on OUTSCALE’s sovereign and secure infrastructure? est apparu en premier sur OUTSCALE blog.

How Can Generative AI Reinvent Competitiveness and Innovation?

Fatiha Arjdal — Thu, 14 Nov 2024 14:17:24 +0000

At the OUTSCALE EXPERIENCES 2024, we explored the opportunities offered by Artificial Intelligence during the roundtable discussion “How Can Generative AI Reinvent Competitiveness and Innovation?”

Traditional AI is already transforming numerous industries, while Generative AI is unlocking new avenues for innovation.

How can these technologies boost business competitiveness? What concrete use cases push the boundaries of creativity and efficiency?

These are just some of the exciting questions we were thrilled to address at OUTSCALE EXPERIENCES 2024, alongside our esteemed guests:

Nathaniel Ives, Enterprise Sales Director, France, NVIDIA
Guillaume de Landtsheer, Vice President and General Manager, NetApp France
Hélène Bringer, Managing Director, Eviden France
William El Sayed, Founder Associate, MISTRAL AI
Moderator: Thibaud Pietri, VP Cloud Infrastructure & Platform Services, OUTSCALE, Dassault Systèmes

Discover how Mistral AI’s Large Language Models as a Service (LLMaaS) offering with OUTSCALE can transform your AI projects.

L’article How Can Generative AI Reinvent Competitiveness and Innovation? est apparu en premier sur OUTSCALE blog.

Securing Kubernetes Platform Administration with the GitSecOps Methodology

Anthony Colas — Thu, 22 Aug 2024 08:54:47 +0000

The GitSecOps methodology developed by SATELLIZ provides an approach to securing the administration of Kubernetes platforms, a field with numerous technical and organizational challenges.

During the 2022 CLOUD DAYS event, organized by OUTSCALE, Frédéric Jaffrès, CTO, and Roman KUTYIN, Founder and R&D Director at SATELLIZ, discussed how SATELLIZ secures Kubernetes platform administration through its GitSecOps methodology.

Today, many IT teams aim to deploy and maintain their Cloud platforms, built around Kubernetes technology, continuously around the clock, often relying on IaaS or PaaS solutions from Cloud providers.

However, as discussed last week, several major issues need to be addressed to effectively and securely operate these Kubernetes platforms: technical complexity, the diversity of stakeholders, and the demands of 24/7 operation.

For several years, SATELLIZ has been assisting its clients in maintaining the operational condition of their Cloud and Kubernetes platforms, leveraging its GitSecOps methodology to address these specific challenges. By recently joining OUTSCALE, SATELLIZ strengthens OUTSCALE’s leadership in the Cloud with the addition of new Kubernetes services.

→ Join us on September 17th as we revisit OUTSCALE’s ambitions for its managed services offering, featuring highly secure Kubernetes solutions!

L’article Securing Kubernetes Platform Administration with the GitSecOps Methodology est apparu en premier sur OUTSCALE blog.