Aurélie Vache

Developer Advocate at OVHcloud, specializing in Cloud Native, Infrastructure as Code, and Developer Experience.


Docker Captain, CNCF Ambassador, Google Developer Expert, and Women Techmakers Ambassador, she has spent more than 20 years helping developers and operators build reliable cloud-native platforms. Passionate about DevOps, Kubernetes, and Go, she shares best practices through technical writing, international conferences, and visual learning resources.


Author of the Understanding Kubernetes, Understanding Docker, and Understanding Istio series, she pioneered a visual approach to learning cloud technologies through sketchnotes, books, and videos.

Secure Image Signing with Cosign and OVHcloud KMS

Software supply chains have become more complex and increasingly targeted, making container image security a fundamental requirement for building trust in modern delivery pipelines. By signing images with Cosign and protecting signing keys in OVHcloud KMS, teams can keep cryptographic material out of local environments and CI/CD variables, all while making image signing easier to […]

Secure Image Signing with Cosign and OVHcloud KMS Read More »

Terraform S3 state locking with OVHcloud Object Storage

In a previous blog post, I explained how to use OVHcloud S3-compatible Object Storage as a Terraform backend for storing Terraform/OpenTofu state files. Since then, we’ve enhanced OVHcloud Object Storage, and one of the coolest improvements is the support for conditional writes. By preventing concurrent overwrites, this feature enables Terraform’s native S3 state-locking mechanism to

Terraform S3 state locking with OVHcloud Object Storage Read More »

Illustration of a smiling avocado speaking at an OVHcloud podium on a blue gradient background.

What’s new with the OVHcloud Developer Advocate team – May 2026

Every month, the OVHcloud Developer Advocate team creates content, shares knowledge, and connects with the tech community. Here’s a look at what we did in May 2026. 🚀 🎙️ “Tranches de Tech” – Our monthly podcast A new episode of our French-language podcast Tranches de Tech 🥑 just dropped! 🎧 Episode 28: La dream team

What’s new with the OVHcloud Developer Advocate team – May 2026 Read More »

Devoxx France 2026: feedback and highlights

From April 22 to 24, 2026, the Devoxx France conference took place at the Palais des Congrès in Paris. Aurélie Vache and Stéphane Philippart attended as dit 19 other OVHcloud employees. In this blog post, they share their thoughts and feedback from this 14th edition of Devoxx France. Devoxx France 2026: The AI Edition Devoxx

Devoxx France 2026: feedback and highlights Read More »

Navigating OVHcloud Enterprise File Storage (EFS) with Trident CSI On Kubernetes clusters (MKS)

If you find yourself in need of shared persistent storage for applications running on OVHcloud Managed Kubernetes Service (MKS), then OVHcloud Enterprise File Storage (EFS) with Trident CSI offers you a practical way to provision and manage it. This blog post explains how to create and connect OVHcloud EFS to your MKS cluster using Trident

Navigating OVHcloud Enterprise File Storage (EFS) with Trident CSI On Kubernetes clusters (MKS) Read More »

Copy.Fail (CVE-2026-31431): How to Rapidly Protect OVHcloud MKS Clusters from the Linux Kernel Zero-Day

A newly disclosed Linux kernel zero-day, CVE-2026-31431, “Copy.Fail”, is one of the most serious privilege-escalation vulnerabilities in recent years. Discovered by Theori and publicly disclosed on April 29, 2026, Copy.Fail is a Linux kernel zero-day that roots every distribution since 2017. Unlike many local privilege-escalation flaws that depend on race conditions, kernel address leaks, or

Copy.Fail (CVE-2026-31431): How to Rapidly Protect OVHcloud MKS Clusters from the Linux Kernel Zero-Day Read More »

KubeCon + CloudNativeCon Europe 2026 in Amsterdam: feedback and highlights

From March 23 to 26, 2026, the KubeCon + CloudNativeCon Europe took place in Amsterdam. Aurélie Vache and Rémy Vandepoel attended alongside 26 other OVHcloud employees. In this blog, they share their thoughts about this second KubeCon set in the land of tulips. KubeCon Europe 2026: the maturity milestone Back from Amsterdam, the buzz of

KubeCon + CloudNativeCon Europe 2026 in Amsterdam: feedback and highlights Read More »

Discover the External Secret Operator (ESO) OVHcloud Provider to manage your Kubernetes secrets 🎉

Several months ago, we released the Beta version of the OVHcloud Secret Manager and we guided you how to manage your secrets thanks to the existing External Secret Operator (ESO) Hashicorp Vault provider. As our Secret Manager is now in General Availability, our teams worked on the development of an OVHcloud ESO Provider now available

Discover the External Secret Operator (ESO) OVHcloud Provider to manage your Kubernetes secrets 🎉 Read More »

Secure your Software Supply Chain with OVHcloud Managed Private Registry (MPR)

Before an application go to production, it passes through several stages: source code, build, packaging and distribution. But Malicious code – such as a compromised dependency, breached CI pipeline, or modified package in a registry – can be introduced at any point in the development cycle, potentially impacting thousands of projects This is precisely where

Secure your Software Supply Chain with OVHcloud Managed Private Registry (MPR) Read More »

Moving Beyond Ingress: Why should OVHcloud Managed Kubernetes Service (MKS) users start looking at the Gateway API?

For years, the Kubernetes Ingress API, and the popular Ingress NGINX controller (ingress-nginx), have been the default way to expose applications running inside a Kubernetes cluster. But the ecosystem is changing: the Kubernetes SIG network has announced the retirement of Ingress NGINX in March 2026. After March 2026 the Ingress NGINX will no longer get

Moving Beyond Ingress: Why should OVHcloud Managed Kubernetes Service (MKS) users start looking at the Gateway API? Read More »