Secure Managed Kubernetes
Our managed and fully-operated Kubernetes solution, run by our senior experts. Its benefits: security, reversibility, and an all-in-one service managed by our responsive, close-knit teams.
Secure Managed Kubernetes (SMK) is a complete and industrialized Kubernetes solution, tailored to your needs, and operated by our teams.
Built on Talos Linux and enhanced with our Enix “secret sauce”, a suite of additional open-source and/or in-house components, to operate Kubernetes at scale over time.
Secure Managed Kubernetes (SMK) on the environment of your choice
On-premise
Installation, configuration and management of our SMK solution on your own infrastructure, bare metal or virtualized. We fully operate the service while you retain complete control over your infrastructure and sensitive data.
Enix Hosting
Deployment and management of your private, dedicated platform in our 3 French datacenters (latency < 0.5ms). Enix is your single point of contact for hosting and Kubernetes management, so you can focus on your applications and business services.
Third-party cloud
Deployment with a hosting provider or third-party cloud, bare metal or virtualized: with our FR cloud partners (OVHcloud, Scaleway, Outscale), or on international clouds (AWS, Azure, GCP, Hetzner, Infomaniak...). Hybrid or multi-cloud deployments possible.When should you adopt SMK?
Move your applications to containers by adopting SMK, deployed on the most suitable environment.
Replace your managed K8s in the public cloud to take back control of your platform, with a dedicated, tailored solution, on-premise or in a private cloud.
Adopt an all-in-one K8s solution, managed by a single French hosting and managed-services provider.
Move your existing Kubernetes platform to a more robust, more secure SMK solution, with controlled costs.
What sets SMK apart from other Kubernetes solutions
Security
SMK is built on an immutable, ultra-secure OS with a minimal attack surface and native encryption. We add network flow security (Ingress + optional WAF), K8s policies with Kyverno, and a Zero Trust approach via Teleport.
Operational excellence
SMK goes further than managed solutions - it’s also fully operated. As production experts, we guarantee maximum service availability and proximity via our direct Level 3 support on a dedicated messaging channel.
AI & GPU workloads
SMK runs your AI models in production at scale: optimized management of costly GPUs, intelligent autoscaling, high availability and minimal latency, even under massive request volumes.
Portability
SMK is built on a standard Kubernetes architecture and an open-source foundation, with no configurations or integrations specific to a cloud provider. If needed, SMK clusters can easily be migrated to another environment.
Costs
SMK has no license costs; we offer a managed-service rate with a fixed recurring amount and projectable costs, with a 12- to 36-month commitment. The rate is based on the number and size of clusters, the number of middlewares and integrations, and the level of support (business hours, extended hours, or 24/7).
More control than cloud provider managed K8s
Access to the OS for debugging and low-level optimizations, full access to workers, control over upgrades (schedule, versions), no configuration drift.
Key components of our solution
SMK is built on a collection of components carefully developed or selected by Enix, automatically deployed and activated depending on the type of underlying infrastructure.
Network
CNI based on Cilium (eBPF) for intra-cluster connectivity, external (L4) and internal (L7, Traefik recommended) load balancing.
Storage
Network disk volumes (SAN, Ceph RBD), local disk volumes (OpenEBS ZFS LocalPV) and shared volumes (CephFS), depending on your performance and resilience needs.
Security & resilience
Kyverno for Kubernetes policies, Cert Manager for PKI management (local or external), Kube-image-keeper for image management, Teleport for secure access.
Configuration
Automated, cloud native deployment, deployment or integration with your CI/CD, industrialized GitOps methodology, ensuring traceability, reproducibility and reversibility.
Observability
Prometheus and its many exporters, Node Problem Detector, x509 exporter for tracking TLS certificate expiration.
Our premium managed service included in SMK
Maintenance in operational condition (MCO): preventive and corrective maintenance, functional and security updates.
Monitoring, metrics and alerting based on proven open source tools: Prometheus, Thanos, Robusta, Grafana, AlertManager…
Dedicated Slack channel with our engineers, direct Level 3, no complex escalation matrix. Support during business hours, extended hours, or 24/7, in French or English.
Guaranteed 99.99% service availability rate, with contractual GTI/GTR (response/resolution time) commitments based on incident severity.
DRP/BCP, replication and backup, Cloud Native and highly-available Kubernetes architectures, data protection and compliance (ISO 27001, GDPR).
Remote access via Teleport (2FA/Yubikey, no SSH keys, full traceability), integration possible with your IAM (LDAP, OpenID, Active Directory, Keycloak…).
They've already chosen Secure Managed Kubernetes
A few numbers in production
20+Kubernetes experts in the field
300+Clusters deployed, across 800+ hosts
200+Managed and secured clusters