Kubernetes Support

24/7 Kubernetes Support with a 15-Minute Emergency SLA

Last reviewed by Scott Sternloff

AceMQ supports production Kubernetes on EKS, AKS, GKE, OpenShift, and on-premises clusters, with particular depth in the stateful workloads that are hardest to run there: message brokers, databases, and caches. StatefulSet pods wedged in Terminating, quorum lost after a node drain, JVMs OOMKilled by cgroup limits, failed cluster upgrades, and storage classes that can't sustain fsync. Every ticket reaches a named senior engineer.

Support quotes answered within 1 hour, by a senior engineer.

min emergency SLA
15
across Americas, EMEA, APAC
24/7
enterprise customers
160+
countries served
26+

Planning a build, upgrade or migration instead? See AceMQ Kubernetes consulting and services.

Customers

  • Microsoft
  • Henry Schein
  • Enbridge
  • Gojek

Partners

  • Broadcom
  • Redis
  • VMware Tanzu
  • OSSeva

Incident Triage

Kubernetes problems we fix every week

These are real symptoms from real Kubernetes production environments — and the first thing our engineers check when one comes in.

Common Kubernetes production problems and how AceMQ resolves them
Symptom you're seeingWhat we check firstTypical resolution
Broker StatefulSet pod stuck Terminating, cluster won't reformWhether the PVC is still bound and which node holds the volume attachment. A node that went NotReady leaves the pod in Terminating and the volume attached, so the replacement pod cannot schedule — and force-deleting the pod before the volume detaches risks two brokers writing one disk.Under 1 hour
Split-brain or lost quorum after a routine node drainThe PodDisruptionBudget against actual quorum requirements. A PDB with maxUnavailable: 1 on a 3-node cluster still permits the drain that takes you to two members while one is mid-restart, so the drain reports success and the cluster loses majority.1-3 hours
Broker pods OOMKilled with heap usage well under the configured maxWhether the JVM sees the cgroup limit. Without UseContainerSupport and a percentage-based MaxRAMPercentage, the JVM sizes heap from node memory, not the pod limit — and off-heap buffers, metaspace, and page cache push the container past its limit long before heap looks full.Under 2 hours
Publish latency spikes and write stalls with no CPU pressureThe storage class IOPS and throughput ceiling against the broker's fsync rate. gp2 or a default network storage class will throttle at exactly the wrong moment; we correlate volume-level burst-balance metrics with broker flush timings before touching the broker config.2-4 hours
Nodes join then immediately partition — clustering never stabilizesNetworkPolicy and service mesh rules on the inter-broker ports. Erlang distribution (4369 and 25672), Kafka's controller and replication listeners, and headless service DNS all get blocked by default-deny policies or silently mangled by an mTLS sidecar that shouldn't be intercepting them.2-4 hours
Pod restarts under load — liveness probe killing a healthy brokerProbe timeout against broker behavior during GC, compaction, or recovery. A liveness probe with a 1-second timeout will kill a broker replaying its journal after restart, producing a restart loop that looks like a crash but is entirely self-inflicted.Under 1 hour
Broker data lost or unbound after a StatefulSet updateThe volumeClaimTemplate, reclaim policy, and whether the StatefulSet was recreated rather than patched. Deleting and reapplying a StatefulSet with a Delete reclaim policy destroys the PVCs — and Helm chart upgrades that change immutable fields quietly encourage exactly that.Same day
Rolling upgrade hangs partway, half the cluster on the new versionThe readiness probe against the broker's own cluster-health definition. StatefulSet rolling updates wait for readiness before moving on, so a probe that reports ready before the node has fully rejoined — or never reports ready at all — leaves the rollout mid-flight with mixed versions.1-3 hours

Resolution times reflect typical Kubernetes engagements under an active AceMQ support contract. Every P1 closes with a written root-cause analysis.

Running Kubernetes in production? Get a quote from a senior engineer, answered within one hour.

Contact Us

What's Included

Everything in your Kubernetes support contract

No add-on pricing for incidents. No per-ticket charges. One contract covers the whole surface.

  • 01

    Emergency Incident Response

    Broker pods crash-looping, quorum lost, or a cluster that won't reform after a node event. A senior engineer joins a live bridge within 15 minutes with kubectl access to diagnose — not a ticket acknowledgement.

  • 02

    Root Cause Analysis

    Every P1 closes with a written RCA: what failed, why, the fix applied, and the manifest, probe, or policy change that prevents recurrence. Delivered as standard, not on request.

  • 03

    Storage & StatefulSet Design

    Storage class selection, IOPS and throughput sizing against broker fsync patterns, volume expansion procedures, and PVC retention policy — reviewed before you discover the limits during an incident.

  • 04

    Resilience & Disruption Budgets

    PodDisruptionBudgets that actually protect quorum, anti-affinity across zones and nodes, topology spread constraints, and drain runbooks your platform team can execute without paging us.

  • 05

    Operator & Helm Support

    RabbitMQ Cluster Operator, Strimzi, and vendor Helm charts — reconcile failures, CRD upgrades, values drift, and the version-skew problems that surface when the operator and broker upgrade on different schedules.

  • 06

    Migration to and from Kubernetes

    Moving brokers onto Kubernetes from VMs or bare metal, and moving them back off when the operational cost isn't justified. Both directions, with parallel-run validation and zero message loss.

Want AceMQ to take this off your team's plate? Tell us about your Kubernetes estate.

Contact Us

Why AceMQ

What you get that you don't get elsewhere

  • Named Engineers, Zero Cold Start

    The same senior engineers stay on your account. They know your cluster layout, your storage class, and your broker topology — so a P1 call starts with diagnosis, not twenty minutes of you explaining which cloud and which operator.

  • No Tier-1 Triage Layer

    You reach a senior engineer directly by phone, email, or Slack. No help desk collecting information to pass along, and no escalation approval process standing between you and someone who can actually fix it.

  • Broker and Platform, Not One or the Other

    Your Kubernetes vendor doesn't know RabbitMQ internals. Your broker vendor doesn't debug CNI or CSI. Broker-on-Kubernetes incidents live exactly in that gap, and both parties will tell you the problem is on the other side.

  • Genuine Follow-the-Sun Coverage

    Engineers across 26+ countries and every time zone. Your 3am node-drain incident is someone's mid-afternoon — no overnight skeleton crew, no waiting for a region to wake up.

  • Proactive, Not Just Reactive

    Quarterly reviews of your manifests, probes, disruption budgets, and storage headroom. When a chart or operator version introduces a regression on one customer's cluster, every affected customer hears about it before their next upgrade window.

  • Regulated and Air-Gapped Clusters

    We work in environments with no outbound network access, private registries only, and change control that measures deployments in weeks. Support that assumes you can just pull a new image is not support for these clusters.

We support Kubernetes wherever it's deployed

Cloud, Kubernetes, bare metal, hybrid, and air-gapped — including environments where you can't give us outbound network access.

  • Amazon EKS
  • Azure AKS
  • Google GKE & Autopilot
  • Red Hat OpenShift
  • VMware Tanzu Kubernetes Grid
  • Rancher / RKE2
  • Self-managed kubeadm clusters
  • Air-gapped / disconnected clusters
  • RabbitMQ Cluster Operator
  • Strimzi & Kafka on Kubernetes
  • ActiveMQ Artemis on Kubernetes
  • Istio, Linkerd & service mesh deployments

Not sure which option fits? A senior Kubernetes engineer will scope it with you.

Contact Us

Escalation Path

Your first hour of a Kubernetes outage

Every tier reaches a senior Kubernetes engineer. There is no tier-1 triage layer to get through.

  1. 15 minfirst responseEmergencyProduction down, messages not flowing, queue manager failure
  2. 1 hourfirst responseCriticalSevere degradation, high error rates, approaching capacity
  3. 4 hoursfirst responseHighPerformance issues, configuration problems, non-critical failures
  4. Next Dayfirst responseStandardQuestions, guidance, best practices, non-urgent improvements

P1 escalation path

A replay of one P1, from the first page to the written root-cause analysis

SLA 15:00
T+Elapsed15:00
Engineer on your bridge

15-minute P1 response, 24/7.
A response time, not a resolution time.

  1. T+00:00

    P1 opened, on-call engineer paged

    Phone, email or Slack reaches the on-call senior engineer directly, whether the incident is in RabbitMQ, Kafka, Redis, PostgreSQL or Kubernetes. No web form, no tier-1 queue.

    Paged
  2. T+15:00

    Senior engineer on your bridge

    A senior engineer who already knows your environment joins a live bridge, so nobody has to re-explain your topology.

    Live
  3. T+30:00

    Specialists across the stack join

    When an incident crosses components, the engineers who know each one join. For RabbitMQ, the path runs to the core team.

    If needed
  4. After

    Written root-cause analysis

    Root cause, the fix applied and the prevention steps, delivered after every P1.

    Every P1

Ready to talk Kubernetes? Get a quote or send us a message.

Contact Us

Pricing

What does AceMQ Kubernetes support cost?

AceMQ Kubernetes support contracts typically run $24,000–72,000 a year, depending on SLA level, scope (number of clusters or nodes, and environments) and deployment (self-managed, cloud-managed or Kubernetes).

What does AceMQ Kubernetes support cost?
What moves the priceHow it changes the contract
SLA levelBusiness-hours cover costs less than 24/7 cover with a 15-minute emergency response.
ScopeMore clusters or nodes, and more environments, make a larger contract.
DeploymentSelf-managed, cloud-managed and Kubernetes estates need different amounts of hands-on work.

Covering several technologies under one contract, for example RabbitMQ, Kafka and Redis, earns an aggressive discount.

Support In Practice

Kubernetes problems we've already solved

Kubernetes support and stabilization work from AceMQ. Each card links to the full write-up: the cluster, what AceMQ diagnosed or changed, and the result.

1 / 6 case studies

All use cases

Support options

Four tiers of Kubernetes support.

AceMQ offers Kubernetes support in four tiers, each handing more of the day-to-day work to AceMQ: 24/7 support and incident management for clusters your team runs, proactive monitoring that finds sizing, probe and upgrade problems first, managed Kubernetes on your own infrastructure, and fully managed Kubernetes on AceMQ infrastructure. EKS, AKS, GKE, OpenShift and self-managed clusters are covered in all four, on the current Kubernetes release and the five end-of-life release lines before it.

  • Tier 1

    Kubernetes 24/7 Support & Incident Management

    You run it, we back you up

    • 15-minute P1 response, 24/7, by phone, email or Slack
    • Named senior engineers, no first-line triage layer
    • Written root-cause analysis after every P1

    Best for: Platform teams that run Kubernetes themselves and need senior cover when a stateful workload breaks at 3am.

  • Tier 2

    Kubernetes 24/7 Support with Proactive Monitoring

    You run it, we watch it with you

    • Scheduled reviews of requests and limits, probes, quotas and PodDisruptionBudgets
    • Deprecated API and operator version checks before each minor upgrade
    • Storage class, IOPS and PVC retention reviews for brokers, databases and caches

    Best for: Teams that want the rollout that wedges or the drain that loses quorum found in a review, not in production.

  • Tier 3

    Managed Kubernetes on Your Infrastructure

    We run it in your cloud or data centre

    • AceMQ runs day-2 operations and holds the pager
    • Runs in your cloud account, data centre or air-gapped site
    • Patching, upgrades and capacity managed to an agreed plan

    Best for: Regulated estates that must keep clusters, and the data on them, inside their own boundary.

  • Tier 4

    Fully Managed Kubernetes on AceMQ Infrastructure

    We host it and run it, as a service

    • Hosted and operated by AceMQ, sized to your workload
    • High availability, backups and upgrades included
    • 24/7 on-call with the same 15-minute emergency response

    Best for: Teams that want brokers, databases and caches on Kubernetes without running a platform team.

Who does what in each AceMQ Kubernetes support option
Who does whatTier 1
24/7 support
Tier 2
Proactive monitoring
Tier 3
Managed, your infrastructure
Tier 4
Fully managed by AceMQ
Who runs Kubernetes day to day?Your teamYour team, with AceMQ reviewsAceMQAceMQ
Where does it run?Your infrastructureYour infrastructureYour cloud account or data centreAceMQ infrastructure
24/7 incident response15-minute P1 response15-minute P1 response15-minute P1 response15-minute P1 response
Health checks and CVE alertsOn requestScheduledIncludedIncluded
Patching and upgradesYour team, AceMQ advisesPlanned with AceMQDone by AceMQDone by AceMQ
Monitoring and on-callYour teamYour teamAceMQAceMQ
Data, keys and accountsYoursYoursYoursYour data, hosted by AceMQ

Every Tier can start as an ad hoc engagement or an annual partnership, and you can move up or down a Tier as your team changes.

One partner for Kubernetes

Everything else AceMQ does for Kubernetes.

Support is one part of what AceMQ does for Kubernetes. The same engineers deliver consulting, health checks, migrations and end-of-life cover, and support the systems that usually run next to it.

Support for the rest of your stack

See support for all 51 technologiesShow fewer

FAQ

Kubernetes support questions

Still have questions about Kubernetes? Email an Expert

What does AceMQ Kubernetes support cover?

We support production Kubernetes clusters and the workloads on them, with the deepest experience in stateful systems such as RabbitMQ, Tanzu RabbitMQ, Kafka, ActiveMQ, databases, and caches. That covers the full stack that keeps them running: StatefulSets, PVCs and storage classes, probes, PodDisruptionBudgets, network policy, operators, and Helm charts. Coverage includes 24/7 emergency response with a 15-minute SLA, root cause analysis on every P1, upgrade and migration support, and quarterly manifest reviews. Stateful workloads are where Kubernetes breaks most often, and that is where our engineers spend most of their time.

Do you support RabbitMQ on Kubernetes specifically?

Yes, and it is our single largest Kubernetes workload. We are the number one RabbitMQ partner globally with direct access to the RabbitMQ core team, and we support both the RabbitMQ Cluster Operator and hand-rolled StatefulSet deployments. That covers quorum queue membership after node replacement, Erlang distribution over CNI, cert-manager TLS rotation breaking inter-node auth, and the operator reconcile failures that leave a cluster mid-upgrade.

Can you support Kafka running on Kubernetes?

Yes. We support Kafka on Kubernetes including Strimzi-managed clusters, covering broker and controller pod scheduling, storage sizing for log segments and fsync patterns, rack awareness mapped to zone topology, rolling upgrades under partition-availability constraints, and the KRaft migration path. As with RabbitMQ, most incidents turn out to be a platform-layer cause with a broker-layer symptom.

Why do our broker pods get OOMKilled when heap usage looks fine?

Because heap is not the whole story inside a container. A JVM without container awareness sizes its heap from node memory rather than the pod limit, and even a correctly sized heap sits alongside metaspace, thread stacks, direct byte buffers, and native memory used by the broker's network layer. The container limit counts all of it. The fix is usually MaxRAMPercentage plus explicit direct-memory limits, sized against measured off-heap usage rather than a guess.

How fast do you respond to a production Kubernetes incident?

P1 emergencies — brokers down, quorum lost, messages not flowing — get a 15-minute first response with a senior engineer joining a live bridge. P2 critical issues are 1 hour, P3 high-priority 4 hours, and P4 standard questions next business day. These are contractual, not best-effort targets.

Our platform team already supports Kubernetes. Where do you fit?

Alongside them, on the stateful workload. Platform teams are generally strong on the cluster and weaker on what a broker needs from it — the fsync behavior that makes a storage class inadequate, the drain sequence that costs you quorum, the probe timeout that kills a recovering node. We work directly with your platform team rather than around them, and most of our recommendations end up in their manifests, not ours.

Who supports Kubernetes, and why do we need support beyond the community?

Kubernetes is the open source container orchestration platform from the Cloud Native Computing Foundation (CNCF). The Kubernetes community maintains the three most recent minor releases, each for about a year, and the Kubernetes project answers questions through documentation, Slack and GitHub with no response time. Managed Kubernetes services, Amazon EKS, Azure AKS and Google GKE, support the control plane, the API server, etcd and the scheduler, under your cloud support plan, with their own version calendars. Distribution vendors such as Red Hat OpenShift support their platform. None of them supports the workloads you deploy: your Helm charts, operators, ingress, container images, and how your pods use compute, storage and the network. AceMQ covers that layer, and the whole Kubernetes cluster for self-managed deployments on virtual machines or bare metal, so a stateful workload that loses quorum during a node drain has someone accountable for it.

What does Kubernetes support cover beyond message brokers?

Everything that keeps a Kubernetes cluster and its workloads running: cluster upgrades one minor version at a time with deprecated API scans of every Helm release and operator first, node pools and autoscaling, the container runtime and registry, CoreDNS and NetworkPolicy, ingress controllers and service meshes, persistent volumes and storage classes, role-based access control and secrets, and etcd health on self-managed control planes. Stateful workloads are where we have the deepest experience: message brokers, databases, caches and search clusters running as StatefulSets, which fail in ways that cloud native tooling was not designed for. Small platform teams use us to deploy and manage Kubernetes with 24/7 cover they cannot staff themselves.

Can we work with AceMQ on Kubernetes without a long contract?

Yes. AceMQ works on Kubernetes in two ways: ad hoc engagements for a defined piece of work, such as a health check, an upgrade or an incident, or an annual partner engagement that covers 24/7 support, proactive reviews and named engineers. Many teams start ad hoc and move to an annual partnership once the first engagement is done.

How much does AceMQ Kubernetes support or consulting cost?

Every AceMQ proposal is tailored to your requirements: your Kubernetes environment, the SLA you need, the hours of cover and the scope of work. Most contracts run $24,000–72,000 a year, depending on the SLA, the scope and how Kubernetes is deployed, with aggressive discounts when several technologies share one contract. Request a quote and AceMQ replies within 1 hour.

Let's talk

Stateful Workloads Deserve More Than Best-Effort

Reactive cover, proactive reviews, or AceMQ running Kubernetes for you on your infrastructure or ours. A senior engineer scopes it with you, and quote requests are answered within 1 hour.

A senior Kubernetes engineer, not a sales queueQuote requests answered within 1 hourAd hoc engagements or an annual partnership

Production incident right now?Email a Kubernetes Architect

Get in Touch

Talk to a Kubernetes Expert

Send us a message and we'll follow up within 1 hour — or book a free 30-min consultation directly.

305-204-2607
info@acemq.com
66 W. Flagler St. 9th Floor
Miami, FL 33130

Prefer to talk now? Call us directly or use the consultation tab to find a time that works.

We respond within 1 hour.

Pick a time that works — no pressure, no pitch. Just 30 minutes with an expert.

We respond within 1 hour.