Union manages the data plane infrastructure inside your cloud account; you supply the account and network configuration.
BYOC deployment
In a BYOC (Bring Your Own Cloud) deployment, Union.ai manages the data plane infrastructure in your cloud account. You provide the cloud account and network configuration; Union.ai handles Kubernetes cluster operations, upgrades, and monitoring.
Your code, data, container images, and logs remain entirely in your data plane. The Union.ai control plane orchestrates workflow execution but has no access to your proprietary data.
Getting started
- Review the platform architecture to understand the control plane and data plane split.
- Set up your data plane on your cloud provider:
- Configure your data plane with your specific requirements (regions, node groups, networking).
Cloud resource integration
Connect your data plane to cloud-native services:
- AWS resources (S3, ECR, Secrets Manager)
- Azure resources (Blob Storage, Container Registry, Key Vault)
- GCP resources (Cloud Storage, Artifact Registry, BigQuery)
Additional configuration
- Single sign-on setup for OAuth2/OIDC-based authentication
- Multi-cluster and multi-cloud for domain and project isolation
- Data retention policy for controlling stored data lifecycle
Platform architectureThe two planes a BYOC deployment is built from, and what crosses between them.Configuring your data planeThe infrastructure details to send Union so it can provision your data plane.Multi-cluster and multi-cloudMap each project or domain to its own cloud account or project, including across providers.Data plane setup on AWSGrant Union permission to provision and maintain compute resources in your AWS account.Data plane setup on GCPGrant Union permission to provision and maintain compute resources in your GCP account.Data plane setup on AzureGrant Union permission to provision and maintain compute resources in your Azure subscription.Data retention policyHow long run data stays in the data plane object store before it is deleted automatically.Enabling AWS resourcesConnect your data plane to the AWS services it needs: S3, ECR, and Secrets Manager.Enabling GCP resourcesConnect your data plane to the GCP services it needs: Cloud Storage, Artifact Registry, Secret Manager, and BigQuery.Enabling Azure resourcesConnect your data plane to the Azure services it needs: Blob Storage, ACR, and Key Vault.Single sign on setupSet up SSO against any SAML or OIDC identity provider through OAuth2.