Over 3 years as Heru's DevOps team: from Porter to a self-owned AWS/EKS platform with GitOps and EKS always supported (1.22 → 1.29)

Challenge

Deployments were not automated and any change took a long time. The architecture ran on Porter, a limited service that did not follow best practices, and secrets were handled inside the charts with no versioning. The customer's own API Gateway did not scale. There was no environment/account separation, no infrastructure versioning and no cost control.

Solution

Craftech acted as Heru's extended DevOps team: it migrated Porter to a self-owned multi-account EKS architecture (dev/mgt/prod) with VPN and Terraform IaC, implemented GitOps with ArgoCD and autoscaling with Karpenter, and optimized CI/CD with integrated tests and self-hosted runners. It migrated the customer's own API Gateway to AWS API Gateway, centralized secrets in Vault and set up observability with OpenTelemetry and a service mesh. On the database side it migrated to Aurora, upgraded PostgreSQL and hardened RDS, IAM and SSO. It added cost reduction with nightly shutdown of non-production environments and kept the cluster always current with sustained EKS upgrades (1.22 → 1.29).

Results

Deployments went from a slow, manual process to a CI/CD pipeline with tests that cut the time and risk of every change. The platform was modernized and standardized: a self-owned multi-account EKS architecture, Terraform-versioned infrastructure and centralized secrets. The cluster stayed on a supported Kubernetes version (1.22 → 1.29) for more than three years. Resource optimization, nightly shutdown of non-production environments and self-hosted runners drove sustained cost savings.