Swiss Insurance Company Infrastructure

Migrated a legacy on-premises monolithic application to an AWS-hosted OpenShift cluster. Transformed the architecture into fully scalable microservices with zero-downtime deployments and implemented a scale-to-zero policy for non-production environments. Additionally, redesigned and rewrote the build and deployment process by migrating from Jenkins to the Atlassian CI/CD stack.

The legacy platform had reached end-of-life (EOL) for most of its operational tools. Every new feature or bugfix deployment resulted in several hours of downtime.

The main challenges were to:

• Support the legacy platform in parallel with the redesign
• Achieve zero deployment downtime
• Enforce non-production workloads to scale to zero during non-working hours
• Provide complete observability of the new platform

• Supported development by introducing new build tools for 24 Java backend microservices and a React.js frontend application
• Implemented automated linting, testing, and vulnerability scanning in the pull request workflow for both frontend and backend
• Provisioned AWS infrastructure using Terraform Enterprise with a modular approach
• Containerized all backend and frontend services into multi-stage Docker images to ensure portability and ephemerality
• Decommissioned Jenkins and redesigned CI/CD pipelines using the Atlassian stack
• Deployed ArgoCD to implement GitOps principles and enable continuous deployments
• Introduced Istio for service mesh and network management
• Integrated Kiali, Jaeger, Grafana, Prometheus, and a dedicated ELK stack to achieve complete observability, monitoring, and tracing

The resulting cloud infrastructure is future-proof, scalable, cost-effective, secure, and easily reproducible through Infrastructure-as-Code practices.

Resulting Infrastructure Diagram Example

The modernized CI/CD pipeline implemented via the Atlassian stack adheres to DevOps best practices. It includes automated testing, SAST scanning, and rollback pipelines, making the release process both predictable and secure.

CI/CD Process Diagram