Operations | Monitoring | ITSM | DevOps | Cloud

Somewhere in most production setups there is a container that stays awake all week to do one job on Friday. Maybe it re-indexes a database. Maybe it runs a batch report, or a data migration that only matters at month end. Either way, the resources are billed for seven days. Task containers close that gap. They are ephemeral, API-triggered containers that spin up inside an Upsun Cloud environment, run exactly one command, and remove themselves when that command exits. Nothing sits idle between runs.

Task containers are now generally available on Upsun Cloud, giving you a place to run AI agents alongside the rest of your application. The agent runs as a container inside your Upsun Cloud project, next to the app it works on, with the same access to your environment and data as everything else deployed there. The lifecycle is the part that's new: it fits how agent workloads behave instead of forcing them to pretend to be servers. A few things up front: This is a hands-on guide.

There are many conversations about the use of AI, particularly how engineering teams are using it in their coding workflows. Manual work is being replaced by agent-driven automation, and human value increasingly lies in the higher-order work: writing specs, thinking through architecture, steering the direction, exercising taste, and reviewing the output.

Application migrations stall for a predictable reason: the demanding part is rarely the application code itself. It is the infrastructure around it: the deployment logic, pipeline, and environment configuration that has to be rebuilt. That surrounding work is what turns a migration into a multi-month project, and it is why teams stay on infrastructure that no longer serves them. Upsun Cloud reduces migration to a much smaller task.

You push a branch. If your team is like most, that branch now waits: for the shared staging server to free up, for someone to remember to refresh the seed data, for whoever broke staging last to fix it. By the time you actually test your change, you're testing it in an environment that's drifted from production in ways nobody fully tracked. The alternative isn't a better staging server. It doesn't need one.

Infrastructure for AI agents usually forces a choice between two bad options. A sandbox is safe but blind, cut off from the data and services that would make the agent's output useful. Full access means paying to keep a container idle between runs, waiting on a prompt that might not arrive for hours. Task containers, which Upsun released on August 12, 2026, are built to avoid that choice. A task container is a single-purpose container defined in a project's.upsun/config.yaml file.

When you choose a cloud platform, you're entrusting a provider with sensitive business information, customer data, critical applications, and a growing share of your operational resilience. Increasingly, you are also entrusting it with AI. And that changes the questions you should be asking. Marketing claims cannot answer these questions. Independent evidence can. Here is what that evidence looks like at Upsun and why it matters to your next supplier review.

You wrote the feature. It works locally. Then you spend the next two hours on things that have nothing to do with the feature: a Terraform plan that wants to replace a database you didn't touch, a Kubernetes manifest that needs a new ingress rule, an IAM policy that's one permission short of what the deploy needs. None of this is the job. All of it is the job today. Here's what that list actually looks like, and why none of it should be sitting on your plate.

Most build-versus-buy debates assume you're choosing once, at the start, and living with it. Agentic engineering doesn't work that way. The decision shows up at every layer of the stack, and the teams getting it right aren't the ones who picked "build" or "buy" as a philosophy. They're the ones who know which layer is which.

Feasibility is a prioritization question that comes before strategy. The five-question check produces a "now, later, or fix blockers first", before anyone touches a target architecture. Strategy earns its place once feasibility returns "now." Feasibility comes before strategy. Before anyone designs a target architecture, builds a runbook, or commits to a multicloud operating model, the question is whether the migration is the right move now, and what would make it fail.