Deploy AKKO on Outscale OKS

Outscale is a French-owned cloud provider with SecNumCloud qualification. This guide walks through deploying AKKO v2026.04+ on an Outscale OKS cluster.

Prerequisites

Requirement	Minimum
OKS cluster	1.30+ (3 nodes, 4 vCPU / 16 GiB each recommended)
StorageClass	bsu-csi-sc-gp2 (Block Storage Units)
Ingress controller	ingress-nginx installed
cert-manager	1.16+ (for TLS)
kubectl	configured against the cluster
helm	≥ 3.14
DNS	akko.customer.example CNAME to your LoadBalancer

One-command install

curl -fsSL https://raw.githubusercontent.com/AKKO-p/AKKO/main/helm/scripts/deploy-from-harbor.sh \
  -o deploy-akko.sh

AKKO_DOMAIN=akko.customer.example \
AKKO_VERSION=2026.04 \
AKKO_VALUES_EXTRA=helm/examples/values-outscale.yaml \
  bash deploy-akko.sh

The values-outscale.yaml overlay sets:

• global.storageClass: bsu-csi-sc-gp2 (Outscale BSU — RWO only)
• global.ingressClassName: nginx (ingress-nginx, Traefik disabled)
• ingress-nginx osc-loadbalancer-* annotations for the OKS LBU CSI driver
• akko-docs.persistence.accessMode: ReadWriteOnce (BSU does not support RWX)
• VictoriaMetrics + logs layer enabled, Dashboards OSS + logs layer disabled (AGPL → Apache 2.0 migration per ADR-020)
• directory service disabled (GPL v3); plug your own enterprise LDAP via Keycloak federation instead

Outscale-specific gotchas

Block Storage is RWO only

Outscale BSU does not support ReadWriteMany. Components needing shared volumes (the akko-docs PVC historically, any multi-pod logs aggregator) are reconfigured to RWO + init-container copy in values-outscale.yaml.

LoadBalancer annotations

OKS provisions LBU via the osc-lbu-csi-driver. The required service annotations are already baked in:

service.beta.kubernetes.io/osc-loadbalancer-backend-protocol: "tcp"
service.beta.kubernetes.io/osc-loadbalancer-scheme: "internet-facing"

Monitoring profile

The chart ships lighter Prometheus resource requests appropriate for default OKS worker nodes (2 vCPU / 4 GiB). Scale up before enabling OpenMetadata and Superset if you intend to run the full governance stack.

Sovereignty

Outscale is the only non-exception French-owned hyperscaler with SecNumCloud qualification. Data residency is limited to French regions (eu-west-2, cloudgouv-eu-west-1 for certified workloads). See ANSSI SecNumCloud for qualification details.

Verify installation

kubectl -n akko get pods
kubectl -n akko get ingress
kubectl -n akko exec svc/akko-trino -c trino -- \
  trino --execute "SHOW CATALOGS"

Post-install

• Rotate values-dev-secrets.yaml passwords immediately
• Configure Keycloak LDAP federation for your enterprise directory (see external-idp.md)
• Onboard the first data source through Admin → Data Catalogs (see catalog-manager-pro.md)

Troubleshooting

Symptom	Cause	Fix
Pods stuck Pending PVC	BSU quota exhausted	Check Outscale console → Storage → BSU quotas
Ingress returns 404	ingress-nginx not installed	helm install ingress-nginx before AKKO
LoadBalancer <pending>	LBU quota exhausted	Open support ticket to raise LBU quota
x509 TLS errors	cert-manager not issued certs yet	kubectl describe certificate -n akko