OTP Bank (Deckhouse Kubernetes-platform)

2022: Building PaaS, which provides numerous product teams with Kubernetes clusters of the same type as a service

Main tasks

• Build PaaS, which would provide numerous product teams with the same type of Kubernetes clusters as a service.
• Enable development teams to order clusters as they do. cloudy providers
• Implement the ability to deploy standardized clusters with pre-configured infrastructure.
• Get a standardized solution for Kubernetes clusters
• Save team resources on supporting containerization platforms.
• Reduce turnaround time

When choosing a partner, the bank's team analyzed the solutions on the market, both Russian and foreign. As a result, the Kubernetes platform Deckhouse (developed by Flant) was chosen as the basis for PaaS.

• The main advantages that determined the choice:
• Domestic distribution kit with support from the vendor;
• Ready-made boxed solution, mature against the background of domestic competitors;
• Adequate cost;
• A simple start with a solution that has a ready-made pre-configured cluster;
• Have all the functionality you need to use the platform in production.

It is worth noting that for all the time there was not a single treatment with criticality 1 (urgent), which indicates a high degree of maturity of the product, "added Viktor Sirenko, Head of the Cloud Services Development Department of OTP Bank.

Results

• simplification and unification of processes of creation and management of Kubernetes clusters for both development and launch of applications in production. A ready-made cluster with everything you need for a DevOps command unfolds in 40 minutes;
• Monitor and monitor all PaaS infrastructure. Support for 20 + clusters with a small PaaS team;
• lack of complaints and questions from the security service;
• a pre-configured process for collecting metrics and logs;
• Centralized certificate management
• Platform as a Service in a private cloud;
• an internal portal for the Platform Command Administrator.

More detailed information on this project can be found by watching the webinar