Cloud-Native Platform Services for Bundeswehr Private Cloud

The Challenge

The challenges in this project were exceptionally complex: Highest security requirements of the Bundeswehr, including strict role, rights, and multi-tenant concepts. A private cloud infrastructure that is heavily regulated and architecturally differs from public cloud models. Automated provisioning of security-critical services. Kubernetes-based deployment of highly scalable platform services. Backup, restore, disaster recovery, and observability in a military operational context. ADRs as a formalized decision basis that had to be continuously created, coordinated, and productively implemented. Simultaneous responsibility for architecture, development, DevOps, operations, and 3rd-level support. The biggest challenge: All these components had to be brought together into a secure, certifiable, and multi-tenant overall system.

Our Solution

We developed central platform services for secure operations:

1. Secure Cloud Services

• Provisioning of multi-tenant services in Kubernetes environments
• Secure certificate management via internal PKI
• Automated provisioning via self-service portal
• GitOps-based deployment and lifecycle management
• Integrated monitoring and alerting
• Scalability and storage optimization
• ADR-driven architecture decisions

2. Operations & DevOps Implementation

• Fully automated deployments via CI/CD pipelines
• Infrastructure as Code for reproducible infrastructure
• Integration into Bundeswehr internal processes
• Setup of a complete observability environment
• Building structured 3rd-level support including runbooks and dashboards
• Systematic documentation and architecture communication via ADRs

The Result

A highly secure, multi-tenant platform was created that: can be fully automatically ordered via a self-service portal. Operates scalably and resiliently in Kubernetes. Meets strict Bundeswehr security requirements. Is seamlessly integrated into DevOps and operational processes. Offers monitoring, alerting, and backups at military security level. And continues to be developed based on documented Architecture Decision Records (ADRs).

Our Stack