Home

Admapu Status Update: Security Hardening

Tue, 21 Apr 2026 12:05:26 -0400

En las últimas semanas, el repositorio Admapu/admapu ha acumulado una serie de cambios que, vistos en conjunto, cuentan una historia bastante más importante que la de un simple update técnico. No se trata solo de agregar features, corregir detalles o mejorar el tooling. Lo que se está consolidando es una idea central para cualquier proyecto serio en Blockchain: la seguridad de los smart contracts no es un evento puntual, sino un proceso evolutivo.

Admapu Status Update: Observability with The Graph

Wed, 01 Apr 2026 21:00:26 -0300

En esta nueva etapa de Admapu me enfonqué en un aspecto que suele quedar postergado en muchas PoC on-chain: observability.

Hasta ahora, una parte importante del seguimiento operativo dependía de queries directas al RPC, por medio de Makefile o directamente comandos en la terminal. Si bien esto puede servir en etapas tempranas, es bastante limitado: escala pésimo, introduce fragilidad operativa, es difícil de reproducir y termina mezclando responsabilidades que es mejor separar desde el principio.

Admapu Status Update: Beneficios programables

Thu, 26 Mar 2026 12:11:40 -0300

La histórica alza de combustibles que entró en vigencia en Chile esta semana volvió a poner sobre la mesa una pregunta que aparece cada vez que hay un shock relevante en el costo de vida: ¿cómo se entrega ayuda rápido, con criterios claros y sin montar otra capa de burocracia manual?

El contexto no es menor. Según lo reportado por distintos medios, la bencina de 93 octanos subió del orden de $370 por litro y el diésel cerca de $580 por litro. En la práctica, eso empuja costos de transporte, logística y operación en un momento donde muchos hogares y pequeños prestadores de servicios ya están funcionando con poco margen.

Admapu Status Update: deploy reproducible, contratos verificados y meta-transactions

Tue, 24 Mar 2026 09:18:04 -0300

En las últimas semanas el foco del proyecto estuvo menos en “agregar más ideas” y más en cerrar algo más importante: que la PoC pueda deployarse de forma limpia, verificarse públicamente y probarse end-to-end sin depender de pasos manuales dispersos.

Hoy Admapu no es solo una idea sobre una stablecoin chilena basada en identidad. También es una stack funcional en Sepolia con contratos deployados, verificados, con direcciones publicadas vía ENS y una webapp capaz de operar sobre ese estado.

Status Update: Chilean Stablecoin

Tue, 17 Feb 2026 23:29:57 -0300

Después de algunos meses de trabajo en mis spare hours, existe una primera versión funcional que permite interactuar con smart contracts reales, validar elegibilidad de usuarios, y operar minting y transferencias bajo reglas explícitas. No está listo para producción (y no pretende estarlo aún), pero sí está en un punto donde el sistema se puede tocar, probar y evaluar con flujos reales.

La capa on-chain ya está operativa. Tanto el token (CLPc) y el verifier (que aún es un mock) están deployados en Ethereum Sepolia y sus directiones están asociadas a un ENS (en Sepolia) bajo admapu.eth para hacerlo más legible a la hora de querer verificar la separación de responsabilidades entre el token y el verifier, las restricciones de transferencias de tokens y el control de mining. Y porque why not?

¿Cómo podría una stablecoin basada en identidad transformar el acceso a beneficios sociales?

Mon, 15 Dec 2025 05:57:50 -0300

AI start

En los últimos años hemos visto cómo la tecnología blockchain ha dejado de ser solo un experimento financiero para convertirse en una herramienta capaz de resolver problemas reales. Pero, al mismo tiempo, la conversación pública tiende a centrarse en temas lejanos: DeFi, NFTs, protocolos globales, etc. Lo que pocas veces se discute es cómo esta tecnología podría aplicarse para mejorar la vida cotidiana de las personas en Chile, especialmente en áreas donde el sistema actual es lento, ineficiente o poco equitativo.

Things I Learned After a Few Weeks Coding With AI

Tue, 10 Jun 2025 06:50:13 -0400

Recently, I started using AI tools to assist with my coding project. This is not a comprehensive guide, but rather a collection of insights I’ve gathered over the past few weeks. The motivation behind this initiative was a company suggestion to explore AI tools for coding and I was curious to see how they could enhance (or not) my workflow.

So far, I’ve been using a combination of AI tools, but most notably Copilot, Codex, Claude.ai and Cursor. I won’t go into the details of each tool, but rather share my experiences and what I’ve found to be the most “interesting” mindset to have when using AI for coding.

I built a blockchain dApp in a week. And I learned more than I expected.

Wed, 16 Apr 2025 06:05:30 -0400

After a decent number of years writing software, you get used to solving problems within certain mental models. You pick up patterns, develop instincts and, like it or not, start to default to comfort. Last week I took part of a hackathon, which took me way out if my comfort zone. I had no option. Three weeks into my job, the bomb was droped: Hackthon next week. Remote. And me, with very little professional blockchain development experience, no team and only a couple of vague ideas of I could build.

How writing helps in software architecture design

Mon, 17 Feb 2025 05:58:12 -0300

In the fast-paced world of software engineering, it’s easy to feel pressured to jump straight into coding when faced with a challenging problem. But sometimes, taking a step back and slowing down can lead to surprising clarity. A few weeks ago, I discovered the power of writing as a tool for software architecture thinking, and I’d like to share how it helped me solve a problem that initially seemed daunting.

The power of personal (side) projects

Sat, 21 Dec 2024 23:49:31 -0300

In the ever-evolving world of technology, staying ahead requires more than just keeping up with the latest tools and trends. For software engineers, especially Site Reliability Engineers (SREs), continuous learning is a cornerstone of success. While formal education and on-the-job experience provide foundational knowledge, personal projects can be a game-changer in honing your craft. In this blog post, I’ll explore how personal projects not only enhance coding skills but also contribute to career growth, creativity, and problem-solving abilities—essential traits for an SRE.

Github as Helm repository

Thu, 27 Jun 2024 22:17:48 -0400

For my personal projects, I use Github as a Helm repository. This is a simple way to share Helm charts with the community. In this post, I’ll show you how to create a Helm repository using Github Pages either for personal use or for your organization.

Assumptions

This post will assume your already:

Know what kubernetes is
Have a basic understanding of helm
Have a Github account and repository
Have coded a Helm chart

Steps

Having all the above already in place, there are some things we need to do before we can use Github as a Helm repository. In particular, we need to enable Github Pages for our repository and add at least one index.html file to it. According to this documentation, the index.html file shouldn’t be needed, but in reallity it is necessary for Helm to recognize the repository as a Helm repository.

Kubernetes Ingress with Cloudflare Tunnels on Amazon EKS: A Security-Centric Approach

Tue, 02 Jan 2024 15:18:31 -0300

In the ever-evolving landscape of cloud-native technologies, Kubernetes has emerged as a powerhouse for orchestrating containerized applications. Amazon Elastic Kubernetes Service (EKS) is a popular managed Kubernetes service, simplifying the deployment and operation of Kubernetes clusters on AWS. While EKS provides a robust foundation, addressing the challenge of securely exposing services to the public internet often involves navigating the intricacies of Ingress controllers.

In this blog post, I’ll delve into an alternative approach to managing external access to your EKS services using Cloudflare Tunnels. This solution not only simplifies the process but also enhances security by design. I’ll explore the integration of Cloudflare Tunnels with EKS, highlighting the benefits of managing infrastructure as code with Terraform.

Enable YAML for Copilot in VIM

Thu, 30 Nov 2023 07:26:19 -0300

Copilot is an AI-based suggestion tool designed to suggest code completion as developers type and turns natual language prompts into coding suggestions. Here’s a little example:

The only problem is that Copilot disables by default some filetype, and YAML is one of those. And, as we all may know, YAML is the language used to write kubernetes manifests… So it might be iomportant for your AI assistent to help with that.

Using Cloudflare Tunnel on Kubernetes

Fri, 17 Nov 2023 23:43:13 -0300

Typically in the Kubernetes environment, when we need to expose a service to the ouside world, we make use of Load Balancer techniques which in general means a load balancer from our cloud provider.

The problem with this approach is that our service will be reachable from the load balancer or, in more accurate terms, form the network where the load balancer lives.

One way to improve in terms of security is start using Cloudflare tunnels, which are a fundamental component of Cloudflare’s suite of services designed to enhance the performance, reliability, and security of websites and applications. At its core, a Cloudflare Tunnel serves as a secure conduit between the origin server, where the application is hosted, and Cloudflare’s global network. This tunneling architecture introduces several key benefits that set it apart from traditional load balancing approaches.

Certifications

Fri, 10 Nov 2023 21:36:46 -0300

Below you’ll find the list of my certifications related to technology.

Valid

CSIM Cert Prep: 4 Information Security Incident Management
Issuee Jun 2020 - Show credential
Build an Ethereum Blockchain App
Issued Sep 2023 - Show credential
Become a Blockchain Developer
Issued Sep 2023 - Show credential
Certified Blockchain Developer™
Issued Oct 2023 - Show credential
Credential ID: 84518190
CKA: Certified Kubernetes Administrator
Issued Dec 2023 - Show credential
Credential ID: LF-3gnvqo7w5t

Expired - Soon to be renewed

AWS Certified Solutions Architect - Associate (SAA)
Issued Mar 2012 - Expired Mar 2021
Credential ID: MGXS1HVKB1VEQX9L

Moved to Cloudflare Pages

Fri, 22 Sep 2023 21:22:01 -0300

When this blog, originally hosted on a .dev domain, first came into existence, it found its home in a Google Cloud Platform (GCP) Bucket. The setup was straightforward:

Public LB
Bucket as backend

Deployment process was equally simple, thanks to Github actions. However, simplicity came at a cost—about $12 USD per month. While not exorbitant, it’s equivalent to a regular visit to Starbucks. In today’s world, there are more cost-effective alternatives that can fulfill the same purpose: hosting a static webpage with automated deployments straight from GitHub. Enter “GitOps.”

The art of doing nothing

Mon, 27 Mar 2023 12:39:19 -0300

In today’s fast-paced world, automation is key to saving time and increasing productivity. However, many people are hesitant to dive into automation headfirst due to concerns about the complexity of creating scripts and the potential for errors. This is where the concept of “do-nothing” scripting comes in. In this blog post, we’ll discuss what “do-nothing” scripts are and how they can be used to facilitate gradual automation. We’ll also provide three examples of “do-nothing” scripts written in bash scripting, Python, and Rust.

About

Mon, 25 Jul 2022 12:48:25 -0400

Boasting a rich history of over 10 years as a Site Reliability Engineer, I’ve cultivated an unwavering passion for enhancing system performance and resilience. My journey has been marked by successfully managing critical infrastructure and implementing robust automation strategies. In addition to my SRE expertise, I bring a profound enthusiasm for crypto networks, having actively contributed to blockchain projects and crypto-related ventures. This fervor fuels my commitment to ensuring the stability and scalability of decentralized networks, making me a valuable asset to organizations navigating the exciting world of blockchain and cryptocurrency.

Nomad CSI on AWS

Sun, 03 Jul 2022 10:27:30 -0400

I decided to write this documentation because the official one is outdated and wrong. This is my journey to configure CSI on AWS.

What’s wrong with the current documentation?

A number of things, but in particular some of the configuration is no longer valid as some APIs has changed. For example, the configuration for EBS defines the following for the volume file:

🇨🇱 Sobre el '51% attack' a la red Bitcoin

Fri, 22 Apr 2022 21:29:57 -0400

O cómo perder mucha plata, sin sentido.

Descargo de responsabilidad.

Todo lo que leerán a continuación es una opinión personal que hago pública porque en el último tiempo he estado conversando con algunas personas sobre el “51% attack” a la red Bitcoin y me gustaría dar mi opinión al respecto, defendiendo siempre la seguridad de la red. Quiero que quede claro, además, que mi opinión puede cambiar en cualquier momento.

🇨🇱 De qué hablo cuando hablo de lo poco que vale la pena 'invertir' en Bitcoin

Fri, 28 Jan 2022 10:25:46 -0400

Descargo de responsabilidad.

Todo lo que leerán a continuación es una opinión personal que hago pública porque algunas personas me han preguntado si vale la pena (o no) “invertir"en Bitcoin (o en otra criptomoneda). Quiero que quede claro, además, que mi opinión puede cambiar en cualquier momento.

Este texto pasará por alto muchísimos conceptos técnicos que es posible que no tenga sentido explicar en detalle, ya que la finalidad de este documento es que sea de alto nivel y sirva como punto de partida para que cada lector determine si quiere (o no) “invertir” en Bitcoin (o en otra criptomoneda). Como dice el dicho: “don’t trust, verify”.

🐍 Testing exit codes with Pytest

Sat, 10 Oct 2020 21:38:39 -0400

As almost every other sysadmin I know, python is the language of choice to do some scripting. And, as we all know, testing is an important part of any development.

My code is a simple parser that interacts with some Linux commands using subprocess, which instead of raising an exception it returns something != 0. In fact, the exit code is 2. How to test that with pytest? This is what I did (which might not be the best way to do it):

Microk8s: Unable to connect to the server: x509: certificate has expired or is not yet valid

Sun, 03 May 2020 15:31:40 -0400

This is an error that you might see once every 10 years, so it’s very likely you’ll forget the solution. The behavior is the following: When trying to do anything that interacts with API server you’ll get the following error:

boris@ubuntu:~$ microk8s kubectl get all --all-namespaces
Unable to connect to the server: x509: certificate has expired or is not yet valid: current time 2020-05-03T23:53:06Z is after 2020-05-03T16:38:01Z

How to solve it?

Easy, just renew your certificates. But first, it’s a good idea to check expiration time of current installed certificates: