Swisscom launches new Kubernetes Service

This advanced container orchestration solution represents a significant step forward in our commitment to providing enterprise-grade, innovative technologies that drive business value. By reducing our dependencies on third parties, we can ensure to maintain control over the quality and reliability of our offerings, providing our customers with the best possible experience.

Enhancements for our container offering include:

• Upstream Kubernetes versions with accelerated update cycles
  
• Advanced autoscaling capabilities for optimal resource utilization
  
• Native Kubernetes Load Balancer for efficient traffic management
  
• Integrated backup functionalities ensuring business continuity
  
• Flexible CNI options: Cilium, Canal, or custom configurations
  
• Enhanced security with RBAC and OIDC integration
  
• Intuitive self-service portal for streamlined management
  

The new service additionally features automated provisioning, two regions, and flexible placement options within our Swiss-based data centers across three availability zones. This infrastructure allows for flexible placement options and ensures compliance with local data protection regulations. Furthermore, all our operational and support activities are conducted exclusively within Switzerland.

Direct integration with Swisscom’s Enterprise Service Cloud (ESC)(opens in new tab) allows customers to seamlessly combine Kubernetes with additional services like S3 Object Storage or File Service, creating a secure, Cloud Native platform within Switzerland that provides a compliant solution for organizations with strict data protection and regulatory requirements.

Kubernetes Service was architected from the ground up as an entirely new highly available platform, leveraging open-source technologies and adhering to Cloud Native principles. In collaboration with Kubermatic(opens in new tab), a leading Kubernetes platform provider, we eleminated proprietary technology and have established a robust foundation using Baremetal and KubeVirt abstraction, complemented by Kube-OVN as an advanced network layer to support Kubermatic’s Kubernetes Platform (KKP) for provisioning and orchestration of backend services.

In contrast to our prior reliance on VMware, all components of the new stack are open-source, which significantly lowers licensing expenses and mitigates the risk of vendor lock-in.

The platform is designed with multiple security best practices, incorporating Kubernetes security principles at all levels. It separates the infrastructure (using a policy-driven security model and network isolation through Kube-OVN VPCs) from customer tenants, which are built as distinct Environments and can be logically segmented with Projects by the customer. This structure enables the implementation of Role-based Access Controls (RBAC) at various levels.

Our new Kubernetes product delivers enterprise-grade container orchestration capabilities in the private cloud segment offering performance and features comparable to leading Hyperscaler platforms. We are also pleased to announce that our Kubernetes Service has received CNCF certification from its initial release, underlining our commitment to maintaining the highest standards in Cloud Native technologies.

By choosing to implement open-source tools, we are also affirming our commitment to the associated communities and intend to increase our contributions going forward.

For enterprises looking to accelerate their digital transformation, optimize their container strategy, or enhance their Cloud Native capabilities, Swisscom's Kubernetes Service offers a robust, secure, and scalable solution.

To learn more about how our Kubernetes Service can benefit your organization or get in touch with our experts here(opens in new tab).

Additional resources:

• Factsheet Kubernetes Service (opens in new tab)
• Technical Documentation (ESC Docs)(opens in new tab)