TRA · Orchestration

Kubernetes and cloud native platforms

I design, build and secure Kubernetes clusters and cloud native platforms for SMEs and engineering teams, from Pavia in Lombardy and remotely.

Let's talk

Who it is for

Teams adopting Kubernetes or running a cluster that is fragile, costly or stuck on an unsupported version.

Where

Pavia and Lombardy on site by appointment, across Italy and Europe remotely.

How it starts

A call, then a written proposal with scope, timing and cost.

Problems I solve

• Upgrading without downtime: Kubernetes supports about a year of patches per minor version, so a stalled cluster becomes a risk.
• Ingress to migrate: ingress-nginx has received no fixes since March 2026 and must be replaced with Gateway API.
• Costs and security out of control: oversized resources, plaintext secrets, no network policies.

What you get

• Documented cluster architecture and upgrade plan
• Configuration as code (Helm, Kustomize, GitOps) in your repository
• Runbooks, alerts and a tested recovery

In practice

I design and build Kubernetes clusters and cloud native platforms: architecture, networking, storage, observability, security, upgrades. It fits teams starting from scratch and teams with a cluster nobody dares to touch.

• Architecture and sizing (managed or self-managed)
• Security: access, secrets, network policies, images
• Cloud native stack: Helm, Prometheus and Grafana, service mesh, ingress, registries, policy
• Observability and alerts that matter
• Upgrades and disaster recovery that have been tested

Technologies

• Kubernetes 1.35-1.37
• Gateway API
• Helm
• Argo CD
• Flux
• Prometheus
• Grafana
• OpenTelemetry
• Cilium
• Kyverno

How I work

1. Listening A call to understand the context, the problem and the constraints. No commitment.
2. Proposal Scope, timing and cost written clearly, before anything starts.
3. Delivery Small shippable steps, regular updates and code in your own repository.
4. Handover Documentation and training: the work ends when your team can run it alone.

Related services

• Red Hat OpenShift Container Platform

  OpenShift in the enterprise: installation, security, operators, application migration.

• Orchestration and automation

  CI/CD with Jenkins, Ansible, infrastructure as code and GitOps: repeatable releases.