Plusholidays: continuous operation on EKS, zero-downtime upgrades, WAF and FinOps for a booking platform

Challenge

Plusholidays needed to keep a complex platform —multi-account EKS, WAF, caching, multiple environments— always on a supported Kubernetes version, with hardened security against hostile traffic, costs under control and the ability to evolve the architecture without slowing the business, all without an in-house platform team.

Solution

Craftech operates Plusholidays' infrastructure continuously. It kept the cluster on a supported version with EKS upgrades to 1.33 in development and production, executed through updated Terraform modules to minimize the risk of the jump. It hardened security with WAF and bot-control rules and managed a database security incident end to end. It advanced a networking modernization by migrating the Ingress to API Gateway in development and production, updated the Prometheus stack for observability, and ran FinOps initiatives: database optimization to lower costs, review and consolidation of NAT gateways, storage upgrade to GP3, review of forgotten resources per region and adjustment of the AWS support plan. It also took on DNS and email management and a recurring planning cadence with the client.

Results

Plusholidays' platform stays on a supported Kubernetes version at all times, with EKS upgrades executed in a controlled way via IaC, a hardened security posture (WAF, bot control and a managed incident) and an ongoing networking modernization toward API Gateway. FinOps initiatives —database optimization, NAT consolidation, GP3 and support-plan review— keep spend under control, and observability is current with an up-to-date Prometheus stack.