Success Story
ePayco migrates from Amazon ECS to EKS with end-to-end GitOps and an NPS of 10/10
At a glance
ePayco is a leading online payment gateway in Colombia that, after its acquisition by a bank, urgently needed to modernize its infrastructure. Its platform ran on Amazon ECS, with manual deployments and costly monitoring. Craftech carried out an assessment and then migrated all production services to Amazon EKS with end-to-end GitOps. The project closed with an NPS of 10/10.
10/10
NPS in the closing survey
100%
of migration epics completed
ePayco is a leading online payment gateway in Colombia, with digital transaction processing solutions for merchants and businesses. When the project began, it was going through a stage of strong growth after its acquisition by a bank, with more demand on its platform and an urgent need to modernize its infrastructure.
Solution implemented
- Carried out an assessment with a survey, gap identification, a modernization roadmap and a target architecture on EKS
- Migrated all production services from Amazon ECS to Amazon EKS, with separate pre-production and production environments
- Implemented GitOps with ArgoCD and a repository as the single source of truth, with automatic sync
- Built a pipeline with AWS CodePipeline and AWS CodeBuild that publishes images to Amazon ECR and deploys with no manual intervention
- Developed a custom Helm chart and added observability with OpenTelemetry Collector and autoscaling with KEDA
- Implemented External Secrets with AWS Parameter Store and AWS Secrets Manager, and static application security testing (SAST) in the pipelines
- Defined the infrastructure as code with Terraform and trained the internal team
Business Challenge
ePayco's infrastructure ran on Amazon ECS, with barely automated CI/CD and an architecture transitioning from monolith to microservices. Monitoring had a high operational cost and there was no scalable observability strategy. Without GitOps, deployments were manual and there were inconsistencies across environments, along with inconsistent management of secrets and Kubernetes configurations. All of this took place in a complex organizational context due to the acquisition.
Solution
Craftech worked in two stages. First, it carried out an assessment to survey the infrastructure, identify gaps and define the modernization roadmap and the target architecture on EKS. Then it migrated all production services from Amazon ECS to Amazon EKS, with end-to-end GitOps, a fully automated CI/CD pipeline, observability with an open source stack and infrastructure as code with Terraform. The project closed with technical documentation and training for the internal team.
Outcomes
- NPS of 10/10 in the closing survey (August 2025)
- Fully automated CI/CD pipeline, from commit to deployment on Kubernetes
- End-to-end GitOps: reproducible, auditable and synchronized infrastructure
- 100% of the migration epics completed
- Projected reduction in observability costs with an open source stack (OpenTelemetry + Grafana)
- Full knowledge transfer to the ePayco team
Stage 1: assessment (September – October 2024)
Craftech surveyed ePayco's infrastructure to understand its starting point and plan the modernization.
- Infrastructure survey
- Gap identification
- Modernization roadmap
- Target architecture on Amazon EKS
Stage 2: migration and modernization (January – August 2025)
Craftech migrated all production services from Amazon ECS to Amazon EKS, with separate pre-production and production environments, and automated the full cycle from commit to deployment.
- GitOps with ArgoCD (one instance per cluster) and a repository as the single source of truth, with automatic sync
- Pipeline with AWS CodePipeline and AWS CodeBuild: image builds, publishing to Amazon ECR and an automatic commit to the GitOps repository to deploy with no manual intervention
- Custom Helm chart with support for Deployments, HPA, VPA, CronJobs, Jobs, ExternalSecrets, Ingress, PDB and KEDA ScaledObjects
- Observability with OpenTelemetry Collector and autoscaling with KEDA based on SQS and Redis metrics, as a lower-cost alternative to the previous tool
- External Secrets with AWS Parameter Store and AWS Secrets Manager
- Static application security testing (SAST) in the pipelines
- Cloudflare Enterprise for protection, performance and availability
- Infrastructure as code with Terraform
- Technical documentation and training for the internal team
Stack & technologies
