Magnolia PaaS Architecture

A typical Magnolia PaaS deployment contains productive and non-productive cluster(s) with our Magnolia Platform Services providing metrics, logs, alert management, and cluster orchestration. The clusters can be on AWS, Azure, or a mixture of both.

These metrics can be viewed directly via the Cockpit.

The Docker Registry, pipeline, source control (git), Jira support, cluster orchestration, the CDN, and of course, the Cockpit are all accessible by the customer.

As shown below, users must be authenticated and authorized to access the core elements of Magnolia PaaS, which include:

In fact, even the elements themselves require authentication (via Bearer Token) to perform tasks, further securing your Magnolia deployment.

major tom standard deployment overview with satellite
Figure 1. Standard Magnolia PaaS deployment

Kubernetes and sidecars

Magnolia PaaS uses Kubernetes for baseline orchestration of its environments. This is an explicit dependency. Helm charts are used to deploy releases on the Kubernetes cluster.

architectural overview
Item Note


The CDN is deployed between the end user and the Magnolia instances.


Magnolia instances (author/public) are each deployed in a Kubernetes pod containing their own sidecars and K8s workers.


Sidecar containers are deployed to initialize containers before Magnolia CMS starts.

Sidecars are secondary containers that focus on a specific task. They are placed in the same pod as the primary container because resources are shared. Typically sidecars come after the main container in the configuration so the main container is the default target for kubectl execute as shown in the example below (1):
apiVersion: v1
kind: Pod
  name: webserver
    - name: shared-logs
      emptyDir: {}

    - name: nginx
      image: nginx
        - name: shared-logs
          mountPath: /var/log/nginx

    - name: sidecar-container (1)
      image: busybox
      command: ["sh","-c","while true; do cat /var/log/nginx/access.log /var/log/nginx/error.log; sleep 30; done"]
        - name: shared-logs
          mountPath: /var/log/nginx


The K8s workers handle pod availability.





This widget lets you know where you are on the docs site.

You are currently perusing through the Magnolia PaaS docs.

Main doc sections

DX Core Headless PaaS Legacy Cloud Incubator modules