Skip to main content
When you deploy your app through Nuon, it runs inside your customer’s cloud account, not yours. Nuon makes this possible by layering infrastructure and execution components inside the customer’s environment, all orchestrated remotely by the Nuon Control Plane. Each deployment is called an Install. Install Architecture When an install is created, the layers build on each other from the bottom up:
  1. Cloud Account - the customer’s AWS account or Azure subscription. Everything Nuon deploys lives inside it. No cross-account access is required.
  2. Stack - a CloudFormation or Bicep template that provisions networking and the Runner. The customer deploys it using their own credentials.
  3. Runner - picks up jobs from the Control Plane and executes all infrastructure operations locally inside the customer’s environment.
  4. Sandbox - the base compute infrastructure (Kubernetes, VMs, serverless) provisioned by the Runner.
  5. Components - your application (Helm charts, Terraform modules, manifests, container images) deployed on top of the Sandbox.
Everything is defined by the App Config, a set of TOML files that declare the stack, sandbox, components, inputs, secrets, and actions. Each install is an instance of this config deployed into a customer’s cloud with their specific values.