Initiative rescued
A strategic platform engineering effort that had stalled for months was delivered to production and made available across the organization.
Technologies used
Ruby
PostgreSQL
JavaScript
OpenShift
Jenkins
Kubernetes
Kafka
NGINX
Ruby Rack
HTML
Motivation
The client approached Azati with an unstable and poorly maintained Ruby-based solution that could not be reliably deployed or scaled. They needed a secure, automated, and standardized way to manage service integrations and improve software quality across multiple teams, reducing operational risks and accelerating development.
Main challenges
Challenge 01
Broken codebase with no internal Ruby expertise
The bank had no engineers capable of diagnosing the existing Pact Broker fork. Bugs from the previous developer, a broken test suite, and no local dev setup made even reproducing issues nearly impossible without deep knowledge.
#1
Challenge 02
Security and audit gaps incompatible with banking policy
The stock open-source broker lacked the audit logging and access controls required by the bank's IT security standards. The platform needed targeted hardening to pass the security review gate built into every release cycle before any team could use it.
#2
Challenge 03
No path to production deployment
The application had never been containerized or configured for the bank's Kubernetes/OpenShift infrastructure. There were no deployment scripts, no CI/CD pipeline integration, and no operational runbooks, just source code with no route to running in production.
#3
Our approach
Codebase recovery and stabilization
We audited the Ruby codebase end-to-end, catalogued broken tests, traced bugs from the previous developer, and mapped the full architecture. Then we fixed defects systematically, restored the test suite to green, and set up a containerized local dev environment for reproducible changes.
Enterprise feature development
Working within the application's layered architecture: domain logic, application services, infrastructure adapters, HTTP delivery, we added audit logging, fine-grained access controls, and a Kafka integration for event-driven contract publishing.
Security review integration
Each release cycle included a structured review with the bank's security officer. We addressed findings iteratively inside the sprint cadence rather than treating security as a one-off gate, eliminating all blocking issues before the platform reached internal teams.
Kubernetes/OpenShift deployment automation
We wrote deployment manifests and scripts for K8s and OpenShift, configured Nginx as the production reverse proxy, and wired the full release lifecycle into the existing Jenkins automation infrastructure.
CDC adoption support
Beyond platform engineering, we wrote documentation, onboarding guides, and provided direct technical consultation to internal IT teams at different stages of Pact adoption.
Facing the same challenge?
Bring your complexity. We'll bring the plan. Tell us about your project and we'll get back within one business day.
Inquire for more infoSolution
01
Platform recovery and stabilization
We audited the codebase end-to-end, resolved every defect, restored the test suite to green, and established a reproducible development environment. The client went from a platform no one could run to one that was stable, documented, and ready to extend.
Key capabilities:
- Full codebase audit and bug remediation
- Test suite restored and passing
- Containerized local development environment
- Clear documentation with no single point of knowledge
02
Enterprise security and audit
We extended the platform with structured audit logging for all contract operations and role-based access controls, and built security review into the release cycle itself rather than treating it as a gate at the end.
Key capabilities:
- Audit log for all contract interactions
- Role-based access controls
- Security review integrated into every release
- Zero blocking findings at go-live
03
Production deployment on internal infrastructure
We took it from source code to a fully operational deployment on the client's internal Kubernetes and OpenShift clusters, with automated pipelines and Nginx handling production traffic. Deployment became repeatable and owned, not a one-off manual process.
Key capabilities:
- Containerized application and deployment manifests
- Automated CI/CD pipeline via Jenkins
- Nginx production configuration
- Repeatable, fully documented release process
04
Team onboarding and CDC adoption
We worked directly with 40+ internal engineering teams to integrate contract testing into their existing pipelines, producing integration guides, defining patterns for consumer and provider workflows, and providing hands-on consultation during rollout. The goal was a practice that would outlast the project, not just a tool teams had access to.
Key capabilities:
- Integration guides and onboarding materials
- Pipeline patterns for consumer and provider teams
- Hands-on consultation during rollout
- Kafka integration for event-driven contract workflows
Results & business impact
Security cleared
Every release passed formal security review with no blocking findings, a hard requirement in a regulated financial environment.
Adoption enabled
40+ internal engineering teams gained a working contract testing platform and the guidance to integrate it into their pipelines.
No rewrite required
A broken, unmaintainable codebase was recovered and extended without starting from scratch, saving months of redevelopment time.
