Case study · Airline Cargo / Logistics
On-Prem Modernization & Kubernetes Deployment
Proxmox foundation with secure Kubernetes on VMs for airline cargo operations
We built a reliable on-prem platform using Proxmox and Kubernetes to support airline cargo workloads that require local control and strict compliance.
Highlights
What we delivered
- Installed and configured Proxmox with HA-ready settings
- Provisioned VMs and deployed secure Kubernetes with networking & storage
- Hardened firewalls and access controls across the on-prem stack
Context
The situation
Operational constraints and data locality required a robust on-prem environment aligned with aviation security expectations.
Installed Proxmox, provisioned VMs, deployed Kubernetes, configured networking/firewall, and documented runbooks with training.
Challenges and goals
What had to be solved
Greenfield on-prem setup
Standing up hypervisor, networking, and storage from scratch with minimal downtime.
Security & access control
Establishing strict firewalling and least-privilege access across nodes and workloads.
Operational readiness
Runbooks, backups, and monitoring for reliable day-2 operations.
Goals
- Establish a secure, performant on-prem Kubernetes foundation
- Standardize VM provisioning and cluster configuration
- Enable local operations with clear runbooks and training
Implementation
How we did it
- Proxmox installation & cluster configuration
- VM templates & automated provisioning
- Kubernetes install (control plane & workers), CNI, storage, ingress
- Firewall rules, RBAC, and secret management
- Runbooks and training for day-2 ops
Technical details
Environment and practices
| Environment | On-prem Proxmox with KVM VMs for Kubernetes nodes; firewall policies and segmented networking |
| Infrastructure as code and platforms | Proxmox, Kubernetes, Terraform (where applicable) |
| Security | Firewall hardening, network policies, RBAC/least privilege, secret management |
| Observability | Prometheus & Grafana for cluster metrics; Loki for node logs |
| Practices | IaC-driven provisioning, SRE runbooks, security-first configuration |