Services

One thing, done properly: Kubernetes operations.

We run the cluster you already have. No hosting, no app development, no scope creep. Just the boring, important work that keeps production up.

What we actually do

The day-to-day of keeping a production cluster healthy.

Health checks

Regular reviews of cluster state, resource usage, certificate expiry, and security posture. Weekly or monthly depending on your plan.

Upgrades & patching

Control plane and node upgrades planned, tested, and executed. A critical CVE in something we run gets patched out of band, outside the scheduled window.

Monitoring & alerts

Prometheus, Grafana, Alertmanager, or your existing stack. We tune the noise so alerts mean something.

Incident response

When something breaks during the window your plan covers, we pick up the kubeconfig and fix it. Then we write down what happened.

Networking, ingress, certificates

cert-manager, ingress-nginx or Traefik, internal DNS, NetworkPolicies. The plumbing that needs to keep working.

RBAC & secrets

Least-privilege roles and secret rotation, applied on request and watched for expiry. Not glamorous, but it is what stops the bad days.

Who this fits

If you recognise yourself below, we should probably talk.

SaaS with production on Kubernetes

You already run on K8s, but nobody on the team is paid to be the Kubernetes person. Things mostly work, until they do not.

Startups without a dedicated DevOps hire

Hiring a senior DevOps engineer at €80k+ is not yet justified, but the founder is tired of being on call for ingress.

Companies with on-prem or hybrid clusters

You run K8s in your own datacentre or a private VPS for data-residency reasons. You want operations expertise without moving the workload.

Process

How starting works

Intake call

Half an hour, no slides. We talk about your cluster, your team, and what is keeping you up at night.

Cluster audit

We get read-only access and produce a short written report: what is healthy, what is risky, what to fix first. Fixed price, no obligation to continue.

Onboarding

We agree on a plan, set up access, alerting, and the contact channel. You meet the person who will be doing the work, also the person you just talked to.

Ongoing operations

Monthly cadence, retainer hours, and a written account at the end of the month that scales with your plan. Cancel any time with one month notice.

Working on a Kubernetes cluster

What we do not do

Being clear about scope up front saves both of us a meeting.

We do not host your applications

Your cluster runs on your cloud account or your hardware. We have no infrastructure to lock you into. If you part ways with us, you keep everything.

We do not offer 24/7 support

We work business hours. If you need genuine 24/7 on-call, you need an in-house team or a much larger managed-service provider. We will tell you that during the intake.

We do not build your application

We manage the runtime, not what runs on it. Writing your product, building your container images and authoring your Helm charts is not our job.

Sounds like a fit?

Pricing is on the next page. Or send a short email and we will reply with honest questions.