Transforming Banking Integrations with a CDC Contract Testing Platform

Azati delivered an enterprise-grade platform to enable Consumer-Driven Contracts (CDC) adoption across the client’s IT landscape. The solution enhanced and productionized the Pact Broker, ensuring secure, scalable deployment in Kubernetes/OpenShift and seamless integration into CI/CD pipelines, along with ongoing support and enablement for internal teams.

Discuss an idea
20k

contracts validated

40+

internal engineering teams onboarded

~1.5mo

from broken codebase to production-ready platform

All Technologies Used

Ruby
Ruby
PostgreSQL
PostgreSQL
JavaScript
JavaScript
OpenShift
OpenShift
Jenkins
Jenkins
Kubernetes
Kubernetes
Kafka
Kafka
NGINX
NGINX
Ruby Rack
Ruby Rack
HTML
HTML

Motivation

The client approached Azati with an unstable and poorly maintained Ruby-based solution that could not be reliably deployed or scaled. They needed a secure, automated, and standardized way to manage service integrations and improve software quality across multiple teams, reducing operational risks and accelerating development.

Main Challenges

Challenge 01
Broken codebase with no internal Ruby expertise

The bank had no engineers capable of diagnosing the existing Pact Broker fork. Bugs from the previous developer, a broken test suite, and no local dev setup made even reproducing issues nearly impossible without deep knowledge.

#1
Challenge 02
Security and audit gaps incompatible with banking policy

The stock open-source broker lacked the audit logging and access controls required by the bank's IT security standards. The platform needed targeted hardening to pass the security review gate built into every release cycle before any team could use it.

#2
Challenge 03
No path to production deployment

The application had never been containerized or configured for the bank's Kubernetes/OpenShift infrastructure. There were no deployment scripts, no CI/CD pipeline integration, and no operational runbooks, just source code with no route to running in production.

#3

Our Approach

Codebase recovery and stabilization
We audited the Ruby codebase end-to-end, catalogued broken tests, traced bugs from the previous developer, and mapped the full architecture. Then we fixed defects systematically, restored the test suite to green, and set up a containerized local dev environment for reproducible changes.
Enterprise feature development
Working within the application's layered architecture: domain logic, application services, infrastructure adapters, HTTP delivery, we added audit logging, fine-grained access controls, and a Kafka integration for event-driven contract publishing.
Security review integration
Each release cycle included a structured review with the bank's security officer. We addressed findings iteratively inside the sprint cadence rather than treating security as a one-off gate, eliminating all blocking issues before the platform reached internal teams.
Kubernetes/OpenShift deployment automation
We wrote deployment manifests and scripts for K8s and OpenShift, configured Nginx as the production reverse proxy, and wired the full release lifecycle into the existing Jenkins automation infrastructure.
CDC adoption support
Beyond platform engineering, we wrote documentation, onboarding guides, and provided direct technical consultation to internal IT teams at different stages of Pact adoption.

Want a similar solution?

Just tell us about your project and we'll get back to you with a free consultation.

Schedule a call

Solution

01

Platform recovery and stabilization

We audited the codebase end-to-end, resolved every defect, restored the test suite to green, and established a reproducible development environment. The client went from a platform no one could run to one that was stable, documented, and ready to extend.
Key capabilities:
  • Full codebase audit and bug remediation
  • Test suite restored and passing
  • Containerized local development environment
  • Clear documentation with no single point of knowledge
02

Enterprise security and audit

We extended the platform with structured audit logging for all contract operations and role-based access controls, and built security review into the release cycle itself rather than treating it as a gate at the end.
Key capabilities:
  • Audit log for all contract interactions
  • Role-based access controls
  • Security review integrated into every release
  • Zero blocking findings at go-live
03

Production deployment on internal infrastructure

We took it from source code to a fully operational deployment on the client's internal Kubernetes and OpenShift clusters, with automated pipelines and Nginx handling production traffic. Deployment became repeatable and owned, not a one-off manual process.
Key capabilities:
  • Containerized application and deployment manifests
  • Automated CI/CD pipeline via Jenkins
  • Nginx production configuration
  • Repeatable, fully documented release process
04

Team onboarding and CDC adoption

We worked directly with 40+ internal engineering teams to integrate contract testing into their existing pipelines, producing integration guides, defining patterns for consumer and provider workflows, and providing hands-on consultation during rollout. The goal was a practice that would outlast the project, not just a tool teams had access to.
Key capabilities:
  • Integration guides and onboarding materials
  • Pipeline patterns for consumer and provider teams
  • Hands-on consultation during rollout
  • Kafka integration for event-driven contract workflows

Business Value

Initiative rescued: A strategic platform engineering effort that had stalled for months was delivered to production and made available across the organization.

Security cleared: Every release passed formal security review with no blocking findings, a hard requirement in a regulated financial environment.

Adoption enabled: 40+ internal engineering teams gained a working contract testing platform and the guidance to integrate it into their pipelines.

No rewrite required: A broken, unmaintainable codebase was recovered and extended without starting from scratch, saving months of redevelopment time.

Tell Us About Your Challenge

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

What's next?

  • 1. Tell Us Your Story
    Share your project details. We'll connect within 24 hours and ensure confidentiality with an NDA.
  • 2. Get Your Roadmap
    Receive a detailed proposal with scope, team composition, timeline, and costs tailored to your goals.
  • 3. Start Building
    We align on details, finalize terms, and launch your project with full transparency.