Blog
Managed Kubernetes with Talos Linux: more secure and future-ready
Kubernetes has grown up a lot the past few years. The tooling is better. The community keeps expanding. We were among the first in the Netherlands to offer managed Kubernetes, and staying ahead means keeping reinventing. So we rebuilt our platform from scratch. Fully open source, with Talos Linux as the foundation, running on the TrueFullstaq Cloud. Sovereign, secure, and ready for whatever comes next.
For new customers, the updated managed Kubernetes platform means starting on a modern stack straight away. Existing customers migrate to a more secure, future-proof environment.
Why Talos Linux?
We're moving from Rancher Kubernetes Engine to Talos Linux as the foundation of our platform. Talos is a minimal OS, purpose-built for Kubernetes. No package managers, no SSH, no shell.
"We think Talos is a genuinely strong choice for security," says Marijn de Vlieger, Head of Technology. "Even if an attacker gains access to the underlying kernel, there's barely anything to find. There's simply a lot less present to exploit. A minimal OS means: what's not there can't break and doesn't need updating."
That minimalist approach offers additional advantages: a smaller attack surface, immutable infrastructure, and automatic updates without downtime. Exactly what you want from a managed platform.
Built on the TrueFullstaq Cloud
The platform runs entirely on the TrueFullstaq Cloud: our 100% sovereign Dutch private cloud solution. The infrastructure lives in Dutch data centres, built on open source technology, with Dutch and European colleagues and partners. Your data stays within Dutch borders and is subject to European law.
The TrueFullstaq Cloud delivers both performance and scalability: modern AMD processors running at 4 GHz deliver 3x the performance of before, while we can now scale up to nearly 100 cores per physical machine.
Complete control over where your data lives and who can access it. No dependency on hyperscalers, no vendor lock-in, no risk of your cloud provider being acquired by a non-EU party.
An opinionated stack that works
The cloud-native landscape has thousands of tools and dozens of ways to handle deployments. We deliver an opinionated stack with carefully selected tools we genuinely believe in. As Marijn puts it: "You could spend months figuring out which combination works for you. We are very confident and proud of this technology stack and its tools that are user-friendly and simply work."
- ArgoCD for GitOps-based deployment. Developer-friendly and, in our view, the best approach to continuous deployment.
- Harbor as a container (OCI) registry. Sovereign storage for your containers and Helm charts, so you're not dependent on external services.
- OpenBAO for secrets management. Secure storage of credentials and configuration.
- Cilium as service mesh, with Gateway API handled by Envoy Proxy for networking. Modern, powerful, forward-looking, and well-documented."
You get what you need to get started straight away, without the overhead of features you'll never use. And all tooling is configured to work with TrueFullstaq Identity: one login to access everything.
"At TrueFullstaq, we apply this stack with almost all our customers," explains Principal Consultant Erwin de Keijzer. "That means you can get going with your Kubernetes cluster right away, without having to configure a whole bunch of things yourself, unlike with the big cloud providers."
Standardised and forward-thinking
The new platform is built around a state-of-the-art tech stack. No custom setup per customer, but a robust configuration that works for both start-ups and complex enterprise environments. That standardisation means efficiency and reliability.
At the same time, we've laid the foundation for continued development. The platform is modular, making it straightforward to add more services and capabilities based on cloud native technology down the line. GPU workloads for AI and machine learning? We have the experience, and we can advise on the best setup for compute-intensive applications. Future-proof, without vendor lock-in.
For any organisation that wants certainty
The platform is robust enough for any organisation, from start-up to enterprise. Whether you're choosing sovereignty for compliance requirements or simply to stay in control of your infrastructure, our managed Kubernetes-platform is ready.
With regulations like GDPR and NIS2 placing increasingly strict demands on data storage and processing, compliance is no longer a nice-to-have. The platform is built with that in mind. And specifically for government organizations: the platform also meets HAVEN requirements.
Kubernetes expertise and training
The platform is set up so you can get started straight away. And if you need support? We have multiple Kubestronauts in-house who deliver training and can be deployed on complex projects. Kubestronaut is an official certification from the Cloud Native Computing Foundation. Meet our Kubestronauts.
