Store Orchestrator
A multi-tenant platform that provisions a fully working online store on Kubernetes from one click or one API call, in about two minutes. Every store gets its own namespace, database, quota, limits and network policy, and arrives with a seeded catalog and Cash on Delivery, so it can take an order straight away. The same Helm charts run on a laptop (Kind) and on a production VPS (k3s with Let’s Encrypt TLS) - only the values file changes.
- Crash-safe by design. Kubernetes is the source of truth; a reconciler resumes any half-finished install or teardown after a restart.
- Idempotent creates. Store ids derive from the request key, so retries and double clicks never create a second store - even across replicas.
- Horizontally scaled. Leader election on a Lease, Postgres advisory locks for quotas, 2–5 API replicas behind an autoscaler.
- Least privilege. Scoped RBAC plus a ValidatingAdmissionPolicy, so the API can only ever touch store namespaces.
- Safe upgrades. One-store-at-a-time canary rollout with backup, smoke test and automatic rollback.