Skip to content

Preview Environments
That Just Work

Open-source environment-as-a-service for Kubernetes. Delta deployments. Serverless scale-to-zero. Header-based routing. Local hot-reload.
Traditional Environment Clones
Full Cluster Duplication
  • ❌ Clones all 50 microservices for a 1-line code change
  • ❌ 15–20 minutes pipeline wait time per review
  • ❌ ~$47/day per active PR in idle cluster compute
  • ❌ Complex wildcard DNS, cert management, and port collisions
  • ❌ Orphaned environments draining cloud budgets indefinitely
The Diverge Way
Delta Routing & Zero Idle Cost
  • ⚡️ Deploys only the service that changed
  • ⚡️ 45 seconds from pull request open to live preview
  • ⚡️ Idle previews scale to zero (~$15/mo for 50 PRs)
  • ⚡️ Dynamic routing via a single HTTP header over Istio/Gateway API
  • ⚡️ Guaranteed finalizer teardown on PR merge + automated TTL

Delta Deployments

Deploy only the services that changed. Diverge analyzes commit diffs to pinpoint impacted services and shares baseline dependencies for everything else.

Scale-to-Zero

Idle PR previews run as Knative services that scale to zero replicas. The Activator proxy seamlessly buffers incoming requests during cold starts.

Header-Based Routing

Route traffic to your preview environment with a single HTTP header. Works natively with Istio, Envoy, Gateway API, and ConnectRPC.

Atlas Schema Management

Automate database migrations and declarative schema isolation for each preview environment with Ariga Atlas via standalone K8s Jobs or Atlas Operator.

PreviewGroups

Manage all changed services, custom routes, and database schemas for an MR as a single atomic, declarative Kubernetes resource.

Automatic Lifecycle

Environments provision automatically on MR creation and tear down cleanly on merge. Hard TTL expiry eliminates zombie environments and cloud waste.

Local Hot-Reload

Iterate on live cluster traffic from your laptop without rebuilding containers. Tailscale loopback proxy connects your local port directly to cluster mesh.

Security-Hardened Architecture

RFC 7230 header validation, non-root execution, read-only root filesystems, dropped capabilities, and constant-time secret evaluation.

Pluggable Provider Registry

Extensible provider interface for routing (Istio, Gateway API), deployers (Argo CD, Direct), and databases (Postgres, Atlas, AlloyDB).

# diverge.yaml — add to your repository root
version: "1"
services:
api:
paths: ["services/api/**"]
image:
repository: registry.example.com/api
tag_template: "mr-{{.MR}}"
helm:
path: charts/api
web:
paths: ["apps/web/**"]
image:
repository: registry.example.com/web
tag_template: "mr-{{.MR}}"
helm:
path: charts/web
defaults:
deploy:
mode: delta # Only deploy services with code changes
routing:
mode: header # Route via x-diverge-env header
baseline_namespace: staging
banner:
enabled: true # Injects preview banner in browser responses
database:
mode: schema # Ephemeral schema isolation
atlas:
mode: versioned # Runs Atlas migration job on PR open
engine: job
migration_config_map: app-migrations
lifecycle:
ttl: 72h
cleanup_on_merge: true
45s
Average deployment time for PR preview environments in delta mode.
~$15/mo
Compute cost for 50 PRs using Knative scale-to-zero (down from ~$1,200/mo).
0
Zombie environments. Finalizer cleanup on merge + automated TTL expiry.
1 Header
All it takes to route mesh traffic directly to your preview changes.
  • Kubernetes-native — 100% CRD-driven, compatible with any CNCF-certified Kubernetes cluster
  • GitOps First — Native integration with Argo CD Application CRs using Server-Side Apply
  • Standalone Direct Mode — DirectDeployer applies manifests natively without requiring Argo CD
  • Kustomize & Helm — Native support for both packaging formats
  • Service Mesh Agnostic — Gateway API, Istio, Linkerd, or NGINX Ingress
  • Protocol Telemetry — HTTP/1.1, HTTP/2, gRPC, and ConnectRPC with SDK interceptors
  • Git Provider Automation — Bi-directional webhooks and MR comment status for GitHub & GitLab
  • Local Dev Loopdiverge dev hot-reloads local processes directly into remote cluster routing
  • Enterprise Security — Non-root distroless containers, PSS Restricted profiles, Cosign-signed images