01
GitHub App integration
Install once, select repos. Podway gets access only to what you explicitly grant — no org-wide permissions, no webhook configuration required.
Features
Everything you need to ship.
From the first git push to a running production app — Podway handles every step. No DevOps hire required.
Build
From source to image, automatically.
Podway turns a git commit into a production-ready container image without you touching a build command.
02
BuildKit under the hood
Industry-standard BuildKit handles every build. Rootless, cache-efficient, and fast. Your Dockerfile is all you need.
03
Live log streaming
Watch every layer build in real time via server-sent events. No polling, no page refresh — pure live output from BuildKit to your browser.
04
Registry support
Push built images to GitHub Container Registry or Docker Hub using your own credentials. One set per org, used at build and deploy time.
Deploy
Kubernetes under the hood, not in your face.
You get all the reliability of Kubernetes — rollouts, health checks, namespaces — without ever writing a manifest.
05
Kubernetes-native deployments
Every deployment is a real Kubernetes Deployment — rolling updates, pod scheduling, and health checks all happen natively. No abstractions, no wrappers.
06
Environment isolation
Production, staging, and preview each run in their own Kubernetes namespace with isolated secrets, domains, and resource limits.
07
Zero-downtime rolling updates
Old pods stay alive until new ones pass health checks. Your users never see a deployment in progress.
08
One-click rollback
Every successful build is preserved. Roll back to any previous deployment instantly from the dashboard — no CLI, no kubectl required.
Configure
Your app, your rules, your secrets.
Fine-grained control over how your applications run — without SSH access, kubectl, or a dedicated platform engineer.
09
Encrypted secrets
Environment variables are encrypted at rest with AES-GCM. Secrets are write-only — values are never returned after saving, even to org owners.
10
Resource limits per environment
Set CPU milli and memory MB per environment. A plan-level org pool enforces a ceiling so one environment can never starve the rest.
11
HTTP health checks
Configure path, port, interval, timeout, and failure threshold per environment. Kubernetes uses these to gate rollouts and detect unhealthy pods.
12
Custom domains with automatic TLS
Add your domain, verify ownership with a DNS TXT record, and cert-manager provisions a TLS certificate automatically. Renewals happen behind the scenes.
Manage
Your team, your org, fully audited.
Invite your team, assign roles, and keep a full record of every change made to your infrastructure.
13
Team members with roles
Invite team members as owner, admin, or member. Role changes take effect immediately — JWT claims are force-refreshed on the next authenticated request.
14
Full audit log
Every action — deploys, config changes, member updates, billing events — is logged with actor identity, timestamp, and structured metadata. Nothing is silent.
15
Registry credentials
Connect GHCR or Docker Hub once per org. Podway uses your credentials automatically at build time to push images and at deploy time to pull them.
16
Billing & plan enforcement
Limits are enforced in real time at four points — app creation, environment creation, resource config, and deployment trigger. Not just at the UI layer.
Ready to ship?
Start with the free hobby plan. No credit card required.