Kubernetes deployment using DevSecOps Principles

FP Complete Helps Fortune 100 Company Deploy Kubernetes using DevSecOps Best Practices

Download the Case Study

Deploying Kubernetes using DevSecOps Principles

FP Complete began working with a customer who needed to deploy Kubernetes and wanted to use DevSecOps principles to do it. The company had recently partnered with a start-up and were engaging in a new venture outside of their normal business activity.

The two companies were engaging internal company technical resources around the world. Since the project incorporated start-up principles, the technical tools they chose were open source and bleeding edge. Their goal was to implement DevSecOps best practices — like infrastructure as code and CI/CD — in their deployment.

When FP Complete came onto this project, they joined the team charged to deploy the Kubernetes cluster. However, the team they were working with came from the corporate side of the enterprise, which brought its own set of technical challenges. These challenges included little internal expertise on:

The FP Complete team was hired to keep the team on a timely schedule and train them in DevSecOps best practices. However, due to time constraints in the project, FP Complete found a greater help to the client would be to create the first version of the infrastructure code for them

The key focus would be to ensure they would always have an integrated tested and working version of a cluster and that the code was modular and reusable so it could be easily deployed with different versions for the components and in different environments.

Corporation Type

Fortune 100 Hardware and Software Technology Company

Industry

Consumer Products

Project Type

Consumer Product with Associated e-Commerce Platform

Technology Used

Kuberspray, Ansible, Terraform, Kubernetes, AWS

Project Requirements

Create versioned, blue-green deployments of Kubernetes clusters using the CI/CD pipeline.

There were four components to the cluster creation process: the cloud infrastructure, Kubernetes cluster with basic Kubernetes functionality, Kubernetes add-ons, and microservices to deploy in various clusters created by the development team. Along with cluster creation, there were also three classes of cluster environments to create: Development, Testing, and Production.

Project Requirements

Create cloud independent code to support a future multi-cloud infrastructure.

To accomplish this, FP Complete chose Kuberspray as the Kubernetes creation tool because it enabled the project team to use one tool. One tool to deploy infrastructure on multiple environments. We took advantage of this opportunity to put DevSecOps best practices into place.

FP Complete’s Solution

New Challenges for FP Complete
  • Getting the proper infrastructure in place in on-premise and cloud environments
  • Deploying a working version of Kubernetes itself
  • Integrating all the necessary add-ons to make Kubernetes reusable
  • Creating an on-ramp for easily deploying applications into the Kubernetes cluster