Mendix Cloud: Releasing and Operating Your Apps

Once an app is built, releasing it is only half the job – it also has to keep running without disrupting the people who depend on it. This is how you ship changes safely and operate Mendix apps day to day, from zero-downtime deployments through to networking and access controls.

Releasing and operating apps

Zero-downtime deployments keep users connected while you make changes. Powered by Kubernetes, Mendix Cloud keeps existing instances running while new ones spin up and shifts traffic intelligently, so an app can restart to apply configuration and scheduled-event changes without interrupting service for end users – removing the need for late-night deployment windows and letting teams adjust during business hours. User-facing prompts indicate which type of restart is needed, and the Deploy Wizard communicates the zero-downtime status in its final step.

Mendix Pipelines brings CI/CD to a wide set of targets, with AI assistance built in. Automated build, test, and deployment cover Mendix on Kubernetes and Azure, and quality gates powered by Maia help non-DevOps developers design custom pipelines. POST and GET steps let a pipeline call external systems – the POST step triggers actions such as scans, tickets, or notifications, while the GET step polls external systems with configurable behavior – enabling automated quality, security, and governance checks without manual steps. A button also generates AI explanations of technical pipeline logs, producing structured summaries of each step’s behavior, explaining failures, and suggesting next steps.

• Version Pinning automatically reuses the exact, tested combination of runtime images, buildpacks, and supporting components when promoting between Mendix Cloud (Kubernetes) environments, via the Portal’s Promote button or the pinEnvironment API parameter, for predictable behavior across environments.
• Central Certificate Management provides a single place to manage SSL certificates across all Mendix Cloud apps – upload a certificate once and use it across multiple custom domains, with an automated replacement flow and a landscape-wide overview showing usage, associated apps and environments, and expiration dates.

Networking and access control

Mendix Cloud Private Connectivity (public beta) gives apps secure, direct access to internal systems. Powered by Tailscale, it connects Mendix apps to internal and on-premises systems over an encrypted, isolated network without exposing those systems publicly, and is self-service configurable through the Mendix Platform.

• IP access restriction profiles block specific IP addresses and ranges from reaching an app, useful for stopping scanning scripts and bad actors; they combine with IP allowlist profiles to block specific IPs within allowed ranges and reduce log noise from vulnerability scans.
• Non-Latin environment names are supported by separating the display name from the subdomain, so environment names can use Japanese, Korean, Chinese, and other non-Latin characters while the subdomain still forms the full mendixcloud.com URL.
• An http.nonProxyHosts runtime setting lets you specify hosts that bypass the configured proxy for finer control over outbound connectivity, and cookies are set without the secure attribute when a forwarded X-Forwarded-Proto or X-Forwarded-Scheme header is http.
• A com.mendix.webui.AuthTokenTimeout runtime setting provides a clearly named alias for the older hybrid-login timeout setting.

Frequently asked questions