Technology partners

Interkey delivers Docker and Kubernetes work in Saudi Arabia

Interkey provides Docker and Kubernetes consulting in Saudi Arabia: containerising applications that were never designed for it, building the pipelines around them, and operating the platform afterwards.

Containerisation Kubernetes operations

The trap

What Interkey delivers with containers

Containerisation is well understood as an idea and frequently mishandled in practice. The common failure is treating it as a packaging exercise: an existing application is wrapped in a container, deployed to a cluster, and nothing improves, because the application still holds state locally, still assumes it is the only instance, and still cannot be restarted without a coordinated outage.

Interkey’s container work starts from the application rather than the platform. That means identifying what actually prevents a given system from running as multiple interchangeable instances: local session state, filesystem assumptions, hard-coded configuration, a startup sequence that depends on something else being ready, and fixing those before the orchestration layer is expected to solve them.

The delivery

From application to running platform

Unblock the application

Find and fix what prevents the system from running as multiple interchangeable instances, before the orchestration layer is expected to solve it.

Images and pipelines

Container image design and build pipelines, with CI/CD so that deployment becomes routine rather than an event.

Cluster architecture

Kubernetes cluster architecture and sizing, designed for the workloads it will actually carry.

Operate for years

Monitoring, logging, resource management and the upgrade discipline a cluster needs to stay healthy over years.

Capability

Where this sits in the practice

Container orchestration, cloud-native development, DevOps consulting and CI/CD pipeline development are all listed among Interkey’s core capabilities, and this sits alongside its mission-critical solutions practice, which matters, because the organisations doing this here are frequently running systems that cannot simply be taken offline for a weekend.

The pipeline work meets teams where they already are: builds and deployments in whichever CI the estate runs, GitLab CI, GitHub Actions, Jenkins, Azure DevOps, with GitOps-style declarative delivery adopted where it genuinely fits the team’s operating model rather than as a fashion statement. The test applied throughout is unglamorous: can this team deploy on a Thursday afternoon without holding its breath.

The first decision

Managed or self-managed Kubernetes: decided by constraint, not preference

The honest decision rule: take a hyperscaler’s managed service when your data and workloads are allowed to live there, and take self-managed only when a constraint forces it, accepting that self-managed means owning the platform’s operation for years. Everything else is detail on those two sentences.

What decides itManaged serviceSelf-managed, in-Kingdom
Where workloads may runThe provider’s regions; fine when your obligations allow itYour infrastructure, inside the Kingdom, which is the usual reason to be here
Control-plane operationThe provider’s problem: upgrades, availability, patching arrive as a serviceYour problem, or your partner’s: versions, upgrades and rollback discipline are real work
Node lifecycle and scalingLargely automatedDesigned and operated deliberately, sized against the workloads it will actually carry
What you give upResidency control, and some architectural freedomThe provider’s automation: you are buying control with engineering effort
Who to staff forApplication and platform engineersThe same, plus real cluster operations, in-house or through Interkey

Security posture

What a production cluster has to be able to show

Container platforms concentrate risk as well as workloads, and a security review will ask for these whether or not anyone planned for them. Building them in from the start is dramatically cheaper than retrofitting them under audit pressure.

  • Role-based access control that maps to real teams, not one shared admin credential
  • Admission policy: what is allowed to run, and what is automatically refused
  • Image scanning and a private registry, so provenance is known for everything deployed
  • Secrets managed outside the codebase, with rotation that actually happens
  • Network policy between workloads, because a flat cluster network is an incident waiting
  • An upgrade cadence with a tested rollback, written down and rehearsed
  • Backup and restore for cluster state and data, proven by an actual restore

Day two

Who holds the pager

The container platform conversation this market skips is the one that matters most: after go-live, who owns the cluster. Kubernetes versions move on a fixed cadence, nodes fail, certificates expire, workloads creep past their resource requests, and a cluster nobody owns degrades silently until it fails loudly. Self-managed platforms in particular need a named operator with an upgrade discipline, a capacity review habit and an on-call arrangement that survives contact with a Thursday-night incident.

Interkey does that work on the Saudi working week, either operating the platform or backing the in-house team that does, and treats visibility as part of the platform rather than an optional extra: a cluster is not finished until its workloads can be seen, which is where this practice meets Interkey’s observability work. Cost belongs in the same conversation, because unbounded resource requests and forgotten namespaces are the container platform’s version of the unread log bill.

The Saudi context

Two constraints shape these projects locally

Two constraints shape these projects locally. The first is data residency: many Saudi organisations cannot run workloads outside the Kingdom, which pushes them toward self-managed Kubernetes on local infrastructure rather than a hyperscaler’s managed service. Self-managed means somebody has to design, operate and upgrade the cluster: that is the work.

The second is that modernisation here is usually incremental. Large government and enterprise systems are not rewritten; they are moved piece by piece, with the legacy system running alongside the new one for a long time. Container platforms in this market have to accommodate that hybrid state rather than assume a clean cutover.

Sectors

Industries and connected services

This work appears across government and semi-government entities modernising citizen services, telecommunications operators running large internal platforms, energy and industrial organisations, and e-commerce and logistics businesses that need to scale with demand rather than provision for a peak they hit twice a year.

It connects directly to end-to-end software engineering, since containerisation is usually part of building or rebuilding an application, and to digital transformation and cloud migration, where moving to containers is one workstream inside a broader modernisation programme. Where a data platform change is happening at the same time, the two are normally planned together.

Government services Telecom operators Energy and industrial E-commerce and logistics

Containerisation of systems that predate containers

The application unblocked first, then the platform

Self-managed and in-Kingdom platforms

For estates that cannot leave the Kingdom

Operated on the Saudi working week

Riyadh engineering, Sunday to Thursday

DevOps and CI/CD practice since before it had the name

In Saudi enterprise IT since 1999

Next step

Discuss a container platform

Tell us what runs where today — VMs, bare metal, a cloud account — and whether the constraint is residency, cost or release speed. That is enough for a first conversation.

Or directly

+966-11-2180999 info@interkey.com.sa

Tawuniya Towers, North Tower, 7th Floor, King Fahad Highway, Olaya, P.O. Box 56835, Riyadh 11564, Saudi Arabia

or See Kubernetes monitoring

The Riyadh team replies on Saudi working days, in Arabic and English.

Elsewhere

Related on interkey.com.sa

Published by Interkey. Last updated . Interkey is registered in Riyadh, Saudi Arabia under commercial registration 1010156897.

Talk to us