Project Overview
We built a reliable on-prem platform using Proxmox and Kubernetes to support airline cargo workloads that require local control and strict compliance.
Business Context
Operational constraints and data locality required a robust on-prem environment aligned with aviation security expectations.
What We Did
Installed Proxmox, provisioned VMs, deployed Kubernetes, configured networking/firewall, and documented runbooks with training.
What Was Holding Them Back
Greenfield on-prem setup
Standing up hypervisor, networking, and storage from scratch with minimal downtime.
Security & access control
Establishing strict firewalling and least-privilege access across nodes and workloads.
Operational readiness
Runbooks, backups, and monitoring for reliable day-2 operations.
Target Outcomes
Establish a secure, performant on-prem Kubernetes foundation
Standardize VM provisioning and cluster configuration
Enable local operations with clear runbooks and training
How We Built It
Environment
On-prem Proxmox with KVM VMs for Kubernetes nodes; firewall policies and segmented networking
Practices
IaC-driven provisioning, SRE runbooks, security-first configuration
IaC & Platforms
Proxmox, Kubernetes, Terraform (where applicable)
Security
Firewall hardening, network policies, RBAC/least privilege, secret management
Observability
Prometheus & Grafana for cluster metrics; Loki for node logs
Step-by-Step Implementation
- Proxmox installation & cluster configuration
- VM templates & automated provisioning
- Kubernetes install (control plane & workers), CNI, storage, ingress
- Firewall rules, RBAC, and secret management
- Runbooks and training for day-2 ops
Measurable Impact
Deployment Frequency
N/A
Lead Time for Changes
N/A
Change Failure Rate
N/A
MTTR
N/A
Cloud Cost
N/A (on-prem)
Uptime
N/A
“The on-prem platform now meets our reliability and security needs.”
—
Technologies Used
Have a similar challenge?
Book a free 30-minute discovery call and get a tailored plan for your infrastructure.