LocalOps Inc

Code got fast. Shipping didn't. Your devs build with Claude Code and a feature takes an afternoon. Then it waits for an environment, a database, a DevOps ticket. What we shipped at LocalOps to close that gap: ☁️ Google Cloud support. Same services, same ops.json, same dashboard and CLI as AWS. Run your SaaS on one cloud and deliver BYOC installs on the other. 🔌 Headless with Public API. Create services, deploy a git SHA or image tag, rotate secrets, attach domains. Onboarding a BYOC customer is now a script you run once or a form customers submit in your own platform. 🔐 Project roles and protected environments. Your contractor ships to staging all day and never sees a production secret. LocalOps is SOC 2 compliant. 🗄️ ops connect and ops proxy. Open a cli prompt on your private Postgres, MySQL, SQL Server, Redis or Valkey from your laptop. No bastion, no VPN. 📦 Hardened Helm charts for self-hosted customers. Kubernetes restricted Pod Security Standard, zero CVEs in the images we ship. Next up: an MCP server, so Claude Code or Cursor can ship what they build, straight like that. Full changelog in the comments. Want early access to the MCP server? Comment or DM me. #BYOC #PlatformEngineering #DevOps #GoogleCloud #AWS

We're #hiring a new Backend Engineer (Remote - India) in India. Apply today or share this post with your network.

New in LocalOps: Granular project & environment roles 🔐 Until now, everyone in a LocalOps project could do everything: edit secrets, add and delete services, and deploy to production. Now you control who can do what, per project and per environment: 🔹 Project roles: Read-only, Maintainer, Member 🔹 Protected environments: lock down production to the people you choose 🔹 Environment roles that override project roles, higher or lower 🔹 CLI access that follows your role (CLI updated to v3.3.1) Changelog: https://lnkd.in/gQdHVXiu Docs: https://lnkd.in/geZtgACQ

What's new: Deletion protection for critical services We've shipped deletion protection for services. Turn it on from a service's settings, and the service can't be deleted until someone explicitly turns protection off again. One deliberate step between a stray click and downtime. We'd recommend enabling it on production and anything else where an accidental delete means an outage. Changelog in comments. #DevOps #PlatformEngineering #BuildInPublic #CloudInfrastructure #saas

What's new: OpenSearch as a dependency You can now declare Amazon OpenSearch domains in your ops.json, and LocalOps provisions them with the rest of your environment. Domains come up production-tuned by default. 3-node multi-AZ, encryption at rest and node-to-node. Fine-grained access control with the master user in Secrets Manager, and audit logs to CloudWatch. Preview environments drop to a single node automatically, so you're not paying for three. Changelog in comments. #DevOps #BuildInPublic #CloudInfrastructure #saas

What's new: IP allowlists for services With LocalOps, you can now restrict which IPs can reach a service. Open the new Security tab on the service dashboard, add the IPs and CIDR ranges that should get through, and everything else gets rejected at the ingress. No hand-written ingress rules, no bastion, no WAF. Previews inherit the allowlist from their parent. Clone an environment and it comes along. Empty list means open to all IPs, same as today. Changelog in comments. #DevOps #PlatformEngineering #CloudSecurity #BuildInPublic

What's new: IP allowlists for services With LocalOps, you can now restrict which IPs can reach a service. Open the new Security tab on the service dashboard, add the IPs and CIDR ranges that should get through, and everything else gets rejected at the ingress. No hand-written ingress rules, no bastion, no WAF. Previews inherit the allowlist from their parent. Clone an environment and it comes along. Empty list means open to all IPs, same as today. Changelog in comments. #DevOps #PlatformEngineering #CloudSecurity #BuildInPublic

What's new: Valkey support for ElastiCache Set valkey as the engine for an ElastiCache cluster in ops.json, alongside redis and memcache. Manual path: subnet group, security group rules scoped to the app tier, parameter group, encryption at rest and in transit, pinned engine version, endpoint plumbed into each service. Repeated per environment. With LocalOps: one field in ops.json. Provisioned in your own AWS account. Wire-compatible with the Redis protocol, so clients work unchanged. AWS prices it below Redis OSS. Changelog in comments. #AWS #DevOps #PlatformEngineering #Valkey #BuildInPublic

What's new: Changelog for each Helm chart version You can now add an optional Markdown changelog when generating a new Helm chart version. Each version shows its changelog under Available Versions, with a short summary and the full text expandable inline. Teams installing your chart can read what changed and assess upgrade impact before they deploy. Changelog in comments. #HelmCharts #DevOps #PlatformEngineering #CloudInfrastructure

Apply now if you're passionate about Product Marketing. You get to work closely with our founder, be part of first $1M journey and get higher autonomy/ownership - https://lnkd.in/gKfeSqVz