8 min read
What we find when we audit a Kubernetes platform
The ten things that turn up again and again when we first look at a team's Kubernetes, Terraform and pipelines, why they matter, and the smallest useful fix for each.
Cloud native platform consultancy
Make shipping software boring
We design, build and fix the platforms your engineers ship on, covering Kubernetes, infrastructure as code and delivery pipelines. Senior, hands-on help that leaves your team in charge.
Sound familiar?
The platform should speed you up, not hold you back
- Releases are an event
- Shipping needs a checklist, a quiet afternoon and the one person who remembers how it works.
- Kubernetes, but nobody's quite sure how
- The cluster grew by accident, every namespace is a little different, and nobody wants to do the upgrade.
- Infrastructure lives in someone's head
- Changes happen in the console, environments drift, and rebuilding one from scratch would take weeks.
- The platform team is the bottleneck
- Every new service waits on a ticket to the one team that understands the setup.
These are fixable problems, and none of them needs a big-bang rewrite. Getting teams from here to dependable, self-service delivery is what we do.
Services
How we can help
Platform engineering
Kubernetes and internal developer platforms that give your teams a paved road to production.
Learn more
Infrastructure as code & delivery pipelines
Reproducible infrastructure and CI/CD pipelines that make releasing software a non-event.
Learn more
Cloud migration
Move workloads onto AWS, Google Cloud or Azure step by step, without a big-bang cutover.
Learn more
Platform reviews & training
An independent look at your platform, and hands-on training so your team can own it with confidence.
Learn more
Why work with us
Small on purpose
Heyal Solutions is led by Alistair Hey, a cloud native platform engineer, and works with a small network of trusted senior associates. You get experienced people without the overhead of a big consultancy.
- Experienced engineers, every time
- Our work is led by experienced engineers and overseen by our founder. We pair with engineers at every level of your team, so their skills grow alongside the platform.
- In your repos from day one
- Everything we build is code, in your version control, reviewed by your engineers. Nothing important lives on our laptops.
- Built to hand over
- We pair with your team, write things down and leave runbooks behind. Success is you not needing us.
Our work
Recent projects
From the blog
We write about what we build
3 min read
Multi-tenancy by construction, Part 4: The tenant lives in the URL, not in your API
Where a request's tenant comes from: a path segment, resolved by the server and carried in context. Why no API operation should take a tenant argument, and the rate-limit trap in forwarding tenant ids.
3 min read
Multi-tenancy by construction, Part 3: A CI gate that fails when a table can leak
Row-Level Security only protects the tables that have it. A migration gate that checks every table, view, function and unique index, and the four ways isolation quietly breaks.