# NubiCode Blog

> Engineering notes from NubiCode, a nearshore cloud-native and AI infrastructure consultancy (San Salvador, El Salvador and Baltimore, MD) serving US companies. AWS Partner, Vanta Partner. Topics: Kubernetes (EKS/AKS/GKE), GitOps with ArgoCD, Terraform, observability (OpenTelemetry, Grafana, Prometheus), FinOps, cloud migrations, MCP gateways and LLM infrastructure.

Main site: https://www.nubicode.com/ (services, team, contact)
Contact: info@nubicode.com

## Posts

- [Stop deploying :latest: immutable image tags with Git SHAs](https://blog.nubicode.com/immutable-image-tags-git-sha): Tag images with the Git commit SHA, make the registry refuse overwrites, promote one image from dev to prod, and roll back with git revert.
- [Running an MCP gateway on Kubernetes for AI agents](https://blog.nubicode.com/mcp-gateway-kubernetes): One front door for AI agents: MCP servers behind a Kubernetes gateway with auth, per-tool authorization, session routing and a per-call audit log.
- [Zero-downtime datacenter to AWS: golden AMIs, DMS, Direct Connect](https://blog.nubicode.com/zero-downtime-datacenter-to-aws-migration): How we moved a recruitment platform’s ~40-instance .NET fleet and databases from an Ireland datacenter to multi-account AWS with a zero-downtime cutover.
- [GitOps with ArgoCD: zero config drift across multi-cloud Kubernetes](https://blog.nubicode.com/gitops-argocd-zero-drift): ArgoCD on a multi-cloud AI agent platform: app-of-apps, versioned Helm charts from GitHub Actions, selfHeal and prune, and what zero drift actually required.
- [FinOps audit of 737 hosts: the script, the buckets, the savings](https://blog.nubicode.com/finops-audit-737-hosts): How we inventoried 737 hosts across three clouds, sorted them into four buckets, and found the savings before buying a single Savings Plan.

## Optional

- [Full text of all posts](https://blog.nubicode.com/llms-full.txt)
- [RSS](https://blog.nubicode.com/rss.xml)