Sarva Labs cuts deployment errors by 50% and accelerates growth with secure, scalable Kubernetes on k3s

About the Customer

Sarva Labs is a Web3 company founded in 2021 with a simple belief that the internet should serve people, not the other way around. Based in the United States, the team builds digital platforms that give individuals ownership of their data and interactions. Their work includes MOI Chain, a context-aware peer-to-peer protocol, along with products such as IOMe for decentralized identity, MOI Bit for data management, Voyage for exploring protocols, and Mint Valley for digital assets. At its core, Sarva Labs is focused on creating a more human, participant-driven internet.

Customer Challenge

Sarva Labs faced critical infrastructure and operational hurdles that limited scalability, reliability, and efficiency.

Lack of scalable and high-availability infrastructure: Managing Kubernetes at scale was difficult, affecting uptime and creating bottlenecks as workloads grew.
Centralized logging and monitoring gaps: No unified telemetry made troubleshooting slow, performance tracking inconsistent, and reliability harder to maintain.
Secure access management: Stronger controls were needed for Kubernetes access and for tools such as Kibana, Grafana, and Hetzner-hosted virtual machines.
Manual and error-prone deployment process: Manual steps slowed releases and increased configuration errors.

Together, these gaps constrained release velocity, raised operational risk, and limited scale. Sarva Labs needed a standardized platform approach with automated delivery, unified observability, and tighter access controls to restore predictable uptime and accelerate growth.

Solution

Infra360 delivered a modern, secure, and scalable cloud-native environment for Sarva Labs by addressing their infrastructure, observability, access management, and deployment gaps.

Kubernetes cluster setup with k3s: A lightweight cluster with 2 master nodes and 7 worker nodes was deployed, providing a highly available and scalable foundation for containerized workloads.
Centralized logging with ELK and Kafka: The ELK stack, combined with Filebeat and Kafka, was implemented for real-time analytics and log aggregation. This streamlined performance tracking and troubleshooting across services.
Distributed tracing with Elastic APM and OpenTelemetry: Request tracing and service health monitoring were enabled, giving Sarva Labs deep visibility into microservice interactions and performance bottlenecks.
Secure access management with Teleport: Teleport was introduced to manage access to Kubernetes clusters, Hetzner VMs, and internal tools such as Kibana and Grafana, with MFA enforcing strong authentication and role-based access.
Security hardening with Fail2Ban and iptables: Intrusion prevention and network controls were applied to block unauthorized traffic, reducing the attack surface and strengthening the security posture.
Automated CI/CD with GitHub Actions and Ansible: A fully automated delivery pipeline was built, combining GitHub Actions for integration and Ansible for infrastructure deployments, minimizing manual effort and deployment errors.
Multi-platform Docker image build and publishing: The CI/CD pipeline was extended to support building and publishing Docker images across Linux, Windows, and macOS, enabling flexible and platform-specific deployments.
Production server migration and cost optimization: Using Ansible, the production environment was migrated with minimal downtime, reducing server count from 90 to 45 nodes. This cut infrastructure costs by nearly 50% while maintaining performance.
Integrated DevSecOps tooling: Trivy, TruffleHog, and Sigstore CoSign were added into the pipeline for vulnerability scanning, secret detection, and image signing, ensuring that only secure containers reached production.
Advanced observability with custom Grafana dashboards: Custom dashboards and Prometheus exporters were deployed to monitor cluster health, system metrics, and ELK components, giving teams proactive visibility into performance and reliability.

This architecture not only resolved Sarva Labs’ operational and security challenges but also established a future-ready platform that scales efficiently, supports faster releases, and enforces strong DevSecOps practices.

Results & Benefits

50% reduction in deployment errors

100% secured access across critical systems

70% faster troubleshooting and issue resolution

production servers optimized

master nodes and 7 workers powering k3s cluster

Automated CI/CD eliminated manual inefficiencies and stabilized release cycles.
Multi-platform container builds improved developer experience across Linux, Windows, and macOS.
Secure access management through Teleport, MFA, and network hardening reinforced compliance and governance.
Centralized observability with ELK, Elastic APM, and custom Grafana dashboards enabled proactive system monitoring.
Cost optimization during migration delivered a lean, scalable infrastructure prepared for future growth.

Best Practices Implemented

Initial assessment and planning: A detailed review of Sarva Labs’ infrastructure and workflows identified the gaps in automation, scalability, and security that were holding back operational efficiency.
Solution design and architecture: A clear blueprint was created that combined Kubernetes with k3s for scalability, ELK for logging, and Teleport with MFA and iptables for secure access. The plan also included automation of deployments through GitHub Actions and Ansible.
Implementation and configuration: The cluster was deployed, observability stack integrated, secure access controls applied, and CI/CD automation enabled. Each component underwent functional and security validation before going live.
Ongoing support and knowledge transfer: Post-deployment, the Sarva Labs team was trained to manage and scale the environment independently. Continuous support ensured questions were addressed quickly and the platform could evolve with business needs.