We build your infrastructure from code, reproducibly.
Provisioning and configuration management are two separate disciplines that are often confused. Provisioning brings a resource into existence; configuration management brings an existing resource to its desired state. We set up both separately and connect them.
Provisioning and configuration
Provisioning · Infrastructure as Code (IaC)
- Terraform / OpenTofu: multi-provider, mature ecosystem; OpenTofu for licence-sensitive organisations
- Pulumi: infrastructure defined in your existing programming language
- Crossplane: managing infrastructure through Kubernetes
- Remote state storage, locking and environment separation
- Organisation-specific, versioned and tested module library
- Reporting of manual changes that diverge from code
Configuration management
- Ansible: our primary choice thanks to its agentless architecture and gentle learning curve
- Chef / Puppet: maintenance and gradual migration in inherited environments
- Inventory design by environment, region and role
- CIS Benchmark-based hardening
- Controlled patch automation within maintenance windows
- Reporting of servers that drift from the desired state
The approach that unites both
Code review
Infrastructure changes go through the same review process as application code; direct write access to production is removed.
Policy enforcement
Checkov and tfsec check security and cost rules at the plan stage; if there is a violation, the pipeline stops.
Environment parity
Test, acceptance and production are built from the same code. The difference between environments is a parameter, not a separate structure.
Goal: every server and resource in production can be built from code under version control. The drift rate is reported monthly.
Alongside this solution
DevOps
Repeatable delivery with Kubernetes, CI/CD, Infrastructure as Code and GitOps, in your data centre or in the cloud.
Cloud Management
Google Cloud and OCI maintenance and support, cloud migration, multi-cloud, landing zones and FinOps.
Virtualisation
VMware, Nutanix and OLVM/KVM: the right platform strategy in light of licensing costs.
A no-commitment start in three steps.
Discovery call
We spend 45 minutes understanding your environment and priorities. Free of charge.
Free initial assessment
After the meeting, a one-page note with initial findings and recommendations; the findings are yours to keep. A full health check and risk report are part of our accelerator packages.
Package or service
Start with an accelerator package or go straight to managed services.