Nearshore Platform Notes

How we build and run cloud-native platforms and AI infrastructure for US teams. Real numbers, real configs, anonymized clients.

Stop deploying :latest: immutable image tags with Git SHAs

Sep 16, 2026 · Francisco Herrera

Tag images with the Git commit SHA, make the registry refuse overwrites, promote one image from dev to prod, and roll back with git revert.

containersecrkubernetesgithub-actionsgitops

Running an MCP gateway on Kubernetes for AI agents

Sep 9, 2026 · Francisco Herrera

One front door for AI agents: MCP servers behind a Kubernetes gateway with auth, per-tool authorization, session routing and a per-call audit log.

mcpai-infrastructurekuberneteshelmsecurity

Zero-downtime datacenter to AWS: golden AMIs, DMS, Direct Connect

Sep 2, 2026 · Francisco Herrera

How we moved a recruitment platform’s ~40-instance .NET fleet and databases from an Ireland datacenter to multi-account AWS with a zero-downtime cutover.

awsmigrationpackerdmsdirect-connecteks

GitOps with ArgoCD: zero config drift across multi-cloud Kubernetes

Aug 26, 2026 · Francisco Herrera

ArgoCD on a multi-cloud AI agent platform: app-of-apps, versioned Helm charts from GitHub Actions, selfHeal and prune, and what zero drift actually required.

argocdgitopskuberneteshelmgithub-actions

FinOps audit of 737 hosts: the script, the buckets, the savings

Aug 19, 2026 · Francisco Herrera

How we inventoried 737 hosts across three clouds, sorted them into four buckets, and found the savings before buying a single Savings Plan.

finopsawsgcpazurekubernetes