01
The starting point
A public authority runs its applications on Kubernetes with Red Hat OpenShift and SUSE Rancher with RKE2. Because of strict data protection and data security requirements, the entire environment was tightly regulated: every change had to be traceable and secured, and problems had to become visible early, before they put operations at risk.
02
Our approach
- 01 Site reliability engineering and platform engineering for the OpenShift and Rancher/RKE2 environments under the applicable security rules
- 02 Central monitoring with Prometheus, dashboards and alerts in Grafana Enterprise
- 03 Central logging with Loki and long-term, cross-cluster metrics with Thanos
- 04 Alerting and on-call for platform operations
- 05 Infrastructure as code with Terraform, Terragrunt and Ansible on Proxmox
- 06 CI/CD processes that meet the regulatory requirements, and third-level support for the internal DevOps team
03
The result
- Stable, compliant platform operations on OpenShift and Rancher/RKE2
- End-to-end observability: metrics, logs and alerts in one place
- Reproducible infrastructure, fully described as code
- Traceable, automated deployments
- An internal DevOps team that can call on experts for difficult problems