Large-scale organizations often struggle with the paradox of scaling infrastructure while maintaining operational resilience. The challenge is not merely adding more nodes or clusters but ensuring that every architectural decision supports long-term stability and rapid recovery from failures. At a recent gathering in Amsterdam, senior engineers at ING demonstrated how their global financial estate achieves near-perfect uptime by prioritizing maintainability above all else.
This approach requires moving past standard management techniques to focus on the critical metric of maintainability. For cloud architects and DevOps professionals preparing for advanced certifications, understanding this shift is essential. The blueprint presented involves a complex network spanning 100 countries serving millions of customers.
The Architecture of Resilience in Multicluster Systems
ING's infrastructure relies on OpenShift Commons to orchestrate workloads across diverse environments, including public clouds and private data centers. The core architectural decision involves decoupling control planes from worker nodes while ensuring consistent policy enforcement.
- The team utilizes a centralized GitOps workflow where configuration changes are version-controlled in repositories rather than applied manually via CLI tools.
maintainability - Policies for security and compliance are defined once at the cluster level, then propagated automatically to all nodes regardless of location.
- Automated testing pipelines validate infrastructure code before deployment prevents configuration drift across regions.
This setup ensures that when a failure occurs in one region or cloud provider, operators can quickly identify and remediate issues without manual intervention. The ability to treat the entire estate as a single logical unit is what enables such high availability standards for financial institutions handling sensitive customer data daily.
Operational Practices That Scale Without Breaking
The operational model adopted by ING emphasizes observability and automation over reactive firefighting. Engineers leverage advanced monitoring tools to detect anomalies before they impact end users, allowing proactive remediation strategies rather than waiting for alerts triggered after a service disruption.
maintainable architectural blueprintThe team has implemented automated rollback mechanisms that trigger immediately upon detecting performance degradation or security violations in any cluster. This capability is critical when managing thousands of microservices where individual component failures can cascade rapidly if not contained properly.
Their approach also involves rigorous testing procedures for infrastructure changes, ensuring new configurations do not introduce unintended side effects across the distributed system.
Security Integration Across Distributed Clusters
Maintaining zero security breaches at scale requires embedding compliance checks directly into deployment pipelines rather than treating them as separate processes. ING's strategy integrates identity management systems with container runtimes to enforce least-privilege access controls automatically for every workload.
maintainability in global multicluster environmentsThe team ensures that security policies remain consistent whether running on-premises or within public cloud providers like AWS, Azure, and Google Cloud Platform. This consistency reduces the attack surface by eliminating configuration gaps between different deployment targets.
Their experience suggests that achieving high availability without compromising security requires treating these concerns as complementary rather than competing priorities during initial design phases.
What This Means For You
If you are preparing for Kubernetes certifications like CKS or CKA, understanding the principles behind ING's approach will significantly enhance your practical knowledge. The concepts of GitOps workflows and automated policy enforcement apply directly to real-world scenarios where infrastructure complexity threatens operational stability.



