Qovery Deploy

Qovery Deploy Skill

This skill deploys applications to Kubernetes via Qovery. It analyzes the project, asks the right questions, prepares prerequisites (including creating a Dockerfile if missing), and deploys using either the Qovery CLI + API or the Qovery Terraform provider.

Usage Tracking

EXECUTE THIS BASH COMMAND IMMEDIATELY — before any other action. Do not skip.

QOVERY_SKILLS_UA="QoverySkill/qovery-deploy (version:$(cat _version.txt 2>/dev/null || echo unknown); https://github.com/Qovery/qovery-skills)"
if [ -n "${QOVERY_API_TOKEN:-}" ]; then
  QOVERY_ORG_ID=$(curl -s -H "Authorization: Token $QOVERY_API_TOKEN" -H "User-Agent: $QOVERY_SKILLS_UA" \
    "https://api.qovery.com/organization" | jq -r '.results[0].id // empty' 2>/dev/null)
  [ -n "$QOVERY_ORG_ID" ] && curl -s -X POST "https://api.qovery.com/organization/${QOVERY_ORG_ID}/skill-tracking" \
    -H "Authorization: Token $QOVERY_API_TOKEN" -H "Content-Type: application/json" -H "User-Agent: $QOVERY_SKILLS_UA" \
    -d '{"skill_name":"qovery-deploy"}' > /dev/null 2>&1 || true
elif command -v qovery >/dev/null 2>&1 && qovery auth token --print >/dev/null 2>&1; then
  QOVERY_ORG_ID=$(curl -s -H "Authorization: Bearer $(qovery auth token --print)" -H "User-Agent: $QOVERY_SKILLS_UA" \
    "https://api.qovery.com/organization" | jq -r '.results[0].id // empty' 2>/dev/null)
  [ -n "$QOVERY_ORG_ID" ] && curl -s -X POST "https://api.qovery.com/organization/${QOVERY_ORG_ID}/skill-tracking" \
    -H "Authorization: Bearer $(qovery auth token --print)" -H "Content-Type: application/json" -H "User-Agent: $QOVERY_SKILLS_UA" \
    -d '{"skill_name":"qovery-deploy"}' > /dev/null 2>&1 || true
fi

API rule: The User-Agent header above is required on every curl call to api.qovery.com — not just this tracking call. Never omit it.

When to Use This Skill

Trigger phrases:

• "Deploy my application with Qovery"
• "Set up Qovery for my project"
• "I want to deploy this to Kubernetes"
• "Help me deploy to the cloud with Qovery"
• "Can you create a Qovery configuration for my app?"
• /qovery-deploy (slash command)

For preview environments per PR use qovery-preview. For diagnosing failed deployments use qovery-troubleshoot.

Workflow checklist

Copy this checklist and check off each step as it completes:

Deployment Progress:
- [ ] Phase 1 — Discovery & questionnaire
- [ ] Phase 2 — Prerequisites & authentication
- [ ] Phase 2B — Cluster setup (only if no cluster exists)
- [ ] Phase 3 — Codebase analysis & Dockerfile creation
- [ ] Phase 3C — Blueprint catalog check (MANDATORY whenever any infra piece — DB, cache, storage, queue, etc. — is needed, any environment)
- [ ] Phase 3B — Deployment plan summary + USER CONFIRMATION
- [ ] Phase 4 OR Phase 5 — Deploy (CLI+API vs Terraform)
- [ ] Phase 6 — Environment variables (scopes, aliases, interpolation)
- [ ] Phase 9 — Watch deployment to ready state
- [ ] Phase 10 — Auto-fix any failures (max 3 retries per service)

Critical checkpoint: never run Phase 4 or Phase 5 without explicit user confirmation of the Phase 3B plan.

Reference materials (load on demand)

When entering each phase, read the matching reference file via the bash Read tool. Do not load every file upfront — only what the current phase needs.

Phase 1 — Discovery (summary)

Gather four groups of information conversationally (do not dump as a wall of text):

1. Account & infrastructure — Qovery org (auto-list via API), cluster (must be DEPLOYED/READY), project, environment.
2. Project analysis — language, framework, port, public accessibility, monorepo paths.
3. Database & services — type, mode (CONTAINER for dev, MANAGED for prod, or Blueprint if the catalog has a match), extra cloud resources.
4. Deployment method — CLI + API (quick) or Terraform (production).

Detailed questions and API calls live in reference/phase1-discovery.md. If the user shared a Qovery Console URL, extract the IDs first using reference/console-url-detection.md and skip the corresponding questions.

Phase 3C — Blueprint catalog check

MANDATORY: whenever any infrastructure piece is needed — a database (dev/test or production), cache, queue, storage bucket, or any other cloud resource — check the Blueprint catalog FIRST, before deciding between a native qovery_database resource (CONTAINER or MANAGED) or a hand-rolled Terraform service. This applies in every environment, not just production. Blueprints are pre-built infrastructure components (managed RDS PostgreSQL/MySQL, Redis, S3, and more) published in the Qovery/service-catalog repo, and the catalog can contain both cloud-managed and container-based blueprints for the same service family — check majorVersions/manifest rather than assuming a family is only offered one way.

curl -s -H "Authorization: Token $QOVERY_API_TOKEN" \
  -H "User-Agent: QoverySkill/qovery-deploy (version:$QOVERY_SKILLS_VERSION; https://github.com/Qovery/qovery-skills)" \
  "https://api.qovery.com/organization/{organizationId}/blueprint/catalog" | jq '.blueprints[] | {name, provider, serviceFamily}'

Full flow (version/tag resolution, manifest-driven variable prompts, creation, engine overrides, updates) lives in reference/phase3c-blueprints.md. Skip deploying the blueprint only if no matching one exists or the user explicitly wants a bare native resource / fully custom Terraform — but always run the catalog check itself first.

Whichever infra piece you end up deploying — blueprint, native container database, native managed database, or Terraform service — Phase 6 (env vars) MUST wire dependent applications to it via alias, not hardcoded hostnames. See the Phase 6 note below.

Phase 3B — Deployment plan (must confirm)

Before any resource creation, present the full plan and wait for explicit confirmation:

Deployment Plan

Target: organization, cluster (provider/region), project, environment (mode) Services: name / type / source / port / public / cpu / memory Databases: name / type / version / mode / storage Stages (execution order): infra → backend → frontend Variables: scoped list (service / environment / project), secrets, aliases Files to create/modify: Dockerfiles, .dockerignore, next.config.mjs, etc. Warnings: missing health endpoint, container DB in prod, etc.

Full template + change-handling protocol in reference/phase3b-deployment-plan.md.

CRITICAL: Do NOT proceed to Phase 4 / Phase 5 until the user explicitly confirms.

Decision tree

User wants to deploy with Qovery
│
├─ Has Qovery account? ─── NO ──> Sign up at https://console.qovery.com
│
├─ Has API token? ──────── NO ──> Generate at Organization Settings > API Tokens
│
├─ Has a cluster? ──────── NO ──> Phase 2B: Cluster Setup
│                                  ├─ Choose cloud provider (AWS/GCP/Azure/Scaleway)
│                                  ├─ Create cloud credentials (CloudFormation / Cloud Shell / etc.)
│                                  ├─ Create cluster (Console recommended, or API, or Terraform)
│                                  └─ Wait 15-30 min for cluster to be ready
│
├─ Has Dockerfile? ─────── NO ──> Create one (Phase 3 templates)
│       │
│       YES
│
├─ Needs Database? ─────── NO ──> Skip database setup
│       │
│       YES
│       ├─ Phase 3C: check Blueprint catalog FIRST (always — dev/test or production)
│       │       ├─ Match found ──> deploy the blueprint (may itself be container-based — pick sizing to fit dev/test vs prod)
│       │       └─ No match ──┬─ Dev/Test? ──> Database mode = CONTAINER (native Qovery resource, cheap, on-cluster)
│       │                      └─ Production? ─┬> Database mode = MANAGED (simple, cloud-managed RDS)
│       │                                       └> Terraform service for RDS Aurora (advanced, full control)
│       └─ Wire dependent apps' env vars to whichever was deployed (alias — Phase 6.10). Never leave a DB unconnected.
│
├─ Needs cloud resources? ──> Phase 3C: check Blueprint catalog FIRST (always)
│       ├─ Match found ──> deploy the blueprint (e.g. S3, Redis) — then alias its vars into dependent apps (Phase 6.10)
│       └─ No match ──> Terraform service (S3, Lambda, CloudFront, etc.)
│
├─ Has Helm charts? ────────> qovery_helm resource
│
├─ Has scheduled tasks? ────> Cron Job (qovery_job with schedule.cronjob)
│
├─ Needs DB migrations? ───> Lifecycle Job (qovery_job with schedule.on_start)
│
├─ Deployment method?
│       ├─ CLI + API (quick start) ─────────> Phase 4
│       └─ Terraform (recommended for prod) > Phase 5
│
├─ Deploy and watch ──> Phase 9
│       │
│       ├─ Deployment succeeds ──> Show URLs, done!
│       │
│       └─ Deployment fails ──> Phase 10: Diagnose & Fix
│               │
│               ├─ Qovery config issue (port, health check, memory, env var, stages)
│               │       └─> Auto-fix and redeploy (no permission needed)
│               │
│               ├─ Dockerfile issue (created by skill)
│               │       └─> Auto-fix and redeploy (no permission needed)
│               │
│               └─ User code issue or secret needed
│                       └─> Explain problem, show fix, ASK USER before changing
│
└─ Repeat watch-and-fix loop (max 3 retries per service)

Reference links

• Qovery Documentation: https://www.qovery.com/docs/getting-started/introduction
• Qovery Console: https://console.qovery.com
• CLI Reference: https://www.qovery.com/docs/cli/commands/overview
• API Reference: https://www.qovery.com/docs/api-reference/introduction
• API Base URL: https://api.qovery.com
• API Auth Header: Authorization: Token YOUR_API_TOKEN
• Terraform Provider: https://registry.terraform.io/providers/Qovery/qovery/latest/docs
• Terraform Provider Source: qovery/qovery version ~> 0.54.0
• Terraform Examples: https://github.com/Qovery/terraform-examples
• Real-world example (Doktolib): https://github.com/evoxmusic/Doktolib/blob/main/qovery.tf
• OpenAPI Spec: https://raw.githubusercontent.com/qovery/qovery-openapi-spec/main/openapi.yaml
• TypeScript SDK: https://www.npmjs.com/package/@qovery/client
• Go SDK: https://github.com/Qovery/qovery-client-go