Craftech as VEMO's infrastructure team: order, observability and professional CI/CD on AKS for 4 products in production

Challenge

VEMO had an operational Azure/AKS infrastructure but no standardization: pipelines centralized in a single DevOps project with no naming convention, no observability, secrets without formal management, unsegmented node-pools, databases exposed publicly and no defined security policies. The development team needed a technical partner to bring order and enable platform growth without slowing delivery.

Solution

Craftech joined as the infrastructure team working alongside VEMO's development team. In the first months it laid the foundations: stabilizing the production AKS cluster (healthchecks, per-pod/namespace resource optimization, node-pool segmentation), VPN and secrets management. It then executed a quarterly roadmap covering CI/CD with Azure Pipelines (naming convention, migration from the centralized DevOps project to a per-team structure with Federated Identity Credentials), authentication with Microsoft Entra ID and security policies, private databases (MySQL Flexible) with on-demand permissions, and end-to-end observability with DataDog. On that base it shipped new products to production (EVA, GML, FleetOps) and, more recently, took on the migration and modernization of EVA, Impulso and the Grafana stack, plus an AWS-funded assessment for an Azure-to-AWS migration.

Results

The production AKS cluster was stabilized with end-to-end observability (DataDog), CI/CD was standardized across the platform's four products, and the security posture improved (Entra ID, managed secrets, private databases, secure inter-service communication). New products (EVA, GML, FleetOps) shipped without interruptions, and VEMO's team received technical training to operate the platform autonomously. The client reports high satisfaction with the engagement.