← Back to all projects
Private Kubernetes Platform
A highly available, multi-tenant Kubernetes platform on bare metal hosting 60 namespaces and 200+ containers, including production customer systems, database clusters and GPU AI services. Terraform, Ansible and Helm in one pipeline; default-deny networking, automated TLS, replicated storage, intrusion detection and full monitoring.
Technology
databasemysql-innodb-clusterpostgresql
devopskubernetesk3sterraformansiblehelmhaproxytraefikcert-managerlonghornprometheusgrafanaloki
toolsfalcoproxmox
Private Kubernetes Platform
What I built
- Cluster: K3s with three control-plane nodes on embedded etcd, three workers and an HAProxy pair in front of the API and HTTP/S traffic.
- Infrastructure as code: VMs provisioned by Terraform on Proxmox, nodes configured by Ansible, services installed with Helm, through one pipeline.
- Security: namespace-per-tenant isolation with default-deny network policies, Traefik ingress with automated Let's Encrypt TLS (cert-manager), an IDS DaemonSet and Falco runtime security.
- Storage and registry: Longhorn replicated volumes and a highly available in-cluster registry.
- Observability: Prometheus, Grafana, Alertmanager and Loki.
Scale
60 namespaces and 200+ containers: production business systems, MySQL clusters, PostgreSQL, vector search and private LLM inference.
Private system: a walkthrough or live demo is available on request.