Obeyda Djeffal

Automated Tenant Provisioning : qomben

A governed Azure delivery platform for qomben, combining Terraform environment lifecycle automation with tested, policy-checked AKS releases.

Role: Cloud DevOps EngineerRedFabriQ · qombencompleted2 min readRedFabriQ · 2019–2021
Platform EngineeringCloud InfrastructureKubernetesInfrastructure as CodeCI/CD

The product

qomben provides compensation-management software spanning budget planning, salary reviews, benchmarking, benefits, and incentives for HR and finance teams.

The delivery challenge

My contribution: As Cloud DevOps Engineer, I automated tenant and environment provisioning with Terraform and connected it to the tested, analyzed, and governed AKS release path.

qomben’s compensation-management platform needed isolated environments without turning each tenant or release into a long infrastructure exercise. Provisioning took days, which made environment setup a bottleneck for product delivery and testing.

A repeatable Azure delivery path

Terraform made environment provisioning repeatable across Azure Kubernetes Service (AKS) environments, with plans visible on pull requests for infrastructure review. Application code lived in Azure Repos; Azure Pipelines built Docker images, ran tests and SonarQube analysis, published approved images to Azure Container Registry, then deployed versioned Helm releases using consistent Helm and Helmfile patterns.

The application platform used Azure SQL Server, Storage, and Functions, with Azure Monitor providing operational visibility. This connected infrastructure changes and application releases into a single delivery path instead of treating environments as hand-built exceptions.

Governance and security

Azure Policy and Open Policy Agent (OPA) Gatekeeper enforced guardrails at the AKS layer. Combined with pipeline tests and code analysis, these checks helped catch unsafe or non-compliant changes before they reached an environment while keeping routine releases automated.

Tenant provisioning to governed release
100%
Terraform provisioned repeatable AKS environments; tested and analyzed images moved through Azure Container Registry and versioned Helm releases under Azure Policy and OPA guardrails.

Scroll to zoom · drag to pan · arrow keys to pan · Escape to close

Terraform provisioned repeatable AKS environments; tested and analyzed images moved through Azure Container Registry and versioned Helm releases under Azure Policy and OPA guardrails.

Tenant provisioning to governed releaseTerraform provisioned repeatable AKS environments; tested and analyzed images moved through Azure Container Registry and versioned Helm releases under Azure Policy and OPA guardrails.

Outcome

Tenant and environment provisioning went from days to minutes. The result was a faster, more consistent route from code change to governed AKS release, backed by repeatable infrastructure and delivery checks.