Escape Plan: How We Survived Without EKS and Learned To Love Air-Gapped
Talkat Platform Engineering Day North America 2025 · on Monday, 2025-11-10· at 14:40· Building B | Level 5 | Thomas Murphy Ballroom 1·
summary
Migrates a production SaaS from Amazon EKS to a fully air-gapped on‑prem cluster while keeping developer workflows intact; replaces managed RDS with PostgreSQL, S3 with LocalStack, and authentication with Dex for on‑prem identity, swaps observability to self‑hosted Grafana/Loki/Tempo, and runs Pulsar, MongoDB and Redis as standalone services; packs frontend assets into container images and introduces an umbrella Helm chart for one‑click install; quarterly upgrades and secret rotation remain operational bottlenecks despite success.
AI-written summary · about
chapters (13)
- 0:00Air-gapped Kubernetes migration intro
- 1:05Customer demand for air-gapped
- 2:10Starting architecture
- 4:59Moving to air-gapped challenges
- 8:12Migration strategy
- 9:43Isolated test environment
- 11:51Replacing cloud services
- 13:35App adjustments for air gap
- 15:26Success in customer env
- 16:09Repeatable product
- 17:38Future plans
- 19:43Operational hurdles
- 20:06Q&A
related talks
57mSecure Kubernetes data management and scaling with Kasten K10
22mAirgapped Kubernetes - Hannes Probst
32mService Networking Within Air-Gapped Environments: Deployment Strategies and Operat...
32mChoose Your Own Adventure: The Struggle for Security
18mManaging Kubernetes in Air-Gapped Environments
39mDelivering Secure Healthcare Applications with OSS
01h 03mSecuring Legacy Applications and Container Microservices in Kubernetes
59mBuilding resilient event-driven architectures