Sensitive infrastructure
An AKS upgrade unblocked without exposing private infrastructure details
A national certification board needed to move off a deprecated Kubernetes version, but subnet IP exhaustion and regional VM SKU capacity blocked the path. BaristaLabs expanded the network headroom, migrated node pools, selected an available equivalent-performance SKU, validated workloads, and completed the upgrade with zero application downtime.
A National Certification Board
Healthcare & Certification
1 week
6 min read
The Challenge
The organization's Azure Kubernetes Service cluster was running on a deprecated Kubernetes version and needed an upgrade to remain on a supported path. The upgrade was blocked by insufficient subnet IP headroom for rolling node replacement and limited regional capacity for the existing VM SKU.
Our Solution
BaristaLabs analyzed subnet utilization, calculated the IP headroom required for a safe rolling upgrade, provisioned a larger subnet, migrated node pools, selected an available equivalent-performance VM SKU, validated workloads, and completed the Kubernetes version upgrade without application downtime.
Results & Impact
Zero
Downtime
Application downtime during migration and upgrade
Restored
Kubernetes Support
Cluster returned to a vendor-supported Kubernetes version path
Expanded
Subnet Capacity
Additional IP headroom created for rolling upgrades and node scaling
Cleared
Upgrade Path
Future Kubernetes upgrades and node-pool changes no longer blocked by the original constraints
Project Snapshot
Engagement
AKS upgrade remediation
Build Window
1 week
What Shipped
Subnet expansion, node-pool migration, VM SKU change, workload validation, and Kubernetes version upgrade
Public proof boundary
The client and infrastructure details stay confidential. The public proof can describe the blockers, remediation path, and zero-downtime result without naming systems or implying compliance certification.
Project Details
Difficulty Level
advancedTeam Size
1 person
Services Used
Cloud InfrastructureDevOps ConsultingCustom Solutions
Technologies
Azure Kubernetes ServiceAzure Virtual NetworkKubernetesAzure CLIInfrastructure as CodeContainer Orchestration
Tags
AzureKubernetesAKSCloud MigrationDevOpsInfrastructure
Related services and controls
Define the blocker before the migration
Bring the blocker, constraints, validation criteria, and recovery path. We'll scope the work around those boundaries without assuming a universal outcome.
Scope a sensitive technical blockerRelated Case Studies
Explore more success stories and results
Digital Transformation
CartWheels Transportation Platform
A practical rebuild for a transportation operator: website, app, intuitive UI, and customer communication channels delivered quickly enough to replace a long-running vendor bottleneck.
CartWheels
Transportation
AI Content Creation
Stilson's Themed Music Hour Generative Video Marketing
A generative video workflow for a weekly radio show, built to produce polished promotional assets at a fraction of traditional production expense.
Stilson Greene
Media & Entertainment
Creative Portfolio
Stilson Greene Creative Portfolio
A modern portfolio and CMS rebuild for a creative professional who needed the site to showcase the work clearly and stay easy to update after launch.
Stilson Greene
Creative Services