Blog
Design notes, comparisons, and practical Kubernetes ops — plan-before-apply, CI PlanResult, optimize reports, and where we are headed on AI SRE.
73 of 73
Muhtalip Dede7 min readHow to compose kprompt with kagent without collapsing the layers: kagent hosts Agents-as-CRDs via MCPServer / RemoteMCPServer; kprompt ships read/plan-only MCP tools that return a typed PlanResult and never auto-apply. Validated against kagent quickstart + first MCP tool docs.
Muhtalip Dede3 min readDay-2 OpenTelemetry with kprompt: bind Jaeger or Tempo, walk a span tree, narrate bottleneck waits, enrich service graphs with call edges when traces exist, and degrade honestly when OTel is missing. Not a Jaeger UI and not auto-remediation.
Muhtalip Dede4 min readDay-2 Argo CD with kprompt: detect Application CRDs, show gitops sync status, investigate drift vs Git, approve-gated sync/promote/rollback through the real Application API, and optional --gitops PR mode instead of live reconcile. Flux is the peer engine on the same contract. Not an Argo UI and not silent sync.
Emire Barış3 min readConfigMap vs Secret in Kubernetes: when to use each, env vars and volume mounts, kubectl get/describe, common beginner mistakes, and optional kprompt examples.
Muhtalip Dede5 min readkagent (CNCF Sandbox / Solo.io) is a Kubernetes-native agent runtime — Agents as CRDs, MCP, A2A, mesh. kprompt is an AI Runtime for cluster ops: PlanResult → approve, plus Observe notify. Is kprompt a kagent alternative? Only for the ops job — decision guide.
Muhtalip Dede4 min readUse kprompt against GKE the same way you use kubectl — get-credentials, aliases, plan-before-apply — plus Gemini BYOK. Optional Observe agent on the cluster; no Marketplace SaaS, no kubeconfig upload.
Muhtalip Dede4 min readUse kprompt against Amazon EKS the same way you use kubectl — update-kubeconfig, aliases, plan-before-apply — plus Ollama or cloud BYOK. Optional Observe agent on the cluster; no Marketplace SaaS, no kubeconfig upload. Native Bedrock preset still deferred.
Muhtalip Dede3 min readLooking for a kagent alternative? Map by job: kprompt for plan-before-apply day-2 + Observe notify, kubectl-ai for NL kubectl REPL, K8sGPT for diagnosis, ARK for agent apps as CRDs — plus when to keep CNCF kagent.
Muhtalip Dede4 min readagentgateway (Linux Foundation) is an AI-native proxy for LLM, MCP, and A2A traffic on Gateway API. kprompt is an AI Runtime for cluster ops: PlanResult → approve, plus Observe notify. Is kprompt an agentgateway alternative? Only for the ops job — decision guide.
Muhtalip Dede3 min readLooking for an agentgateway alternative? Map by job: kprompt for plan-before-apply day-2 + Observe notify, other AI/MCP gateways for LLM traffic policy, kagent for Agents-as-CRDs — plus when to keep Linux Foundation agentgateway.
Muhtalip Dede4 min readUse kprompt against Azure Kubernetes Service the same way you use kubectl — az aks get-credentials, aliases, plan-before-apply — plus Azure OpenAI BYOK or Ollama. Optional Observe agent on the cluster; no Marketplace SaaS, no kubeconfig upload.
Muhtalip Dede2 min readAlways-on Kubernetes watch only helps if you correlate into Incidents and gate by severity and confidence — not one Slack message per BackOff.
Muhtalip Dede2 min readSame Investigation Graph DNA — different trigger. Laptop investigate is reactive; the optional Observe agent is continuous watch → Incident → gated notify.
Muhtalip Dede4 min readThree Kubernetes AI layers that share vocabulary and confuse buyers: AI Runtime (kprompt PlanResult ops), AI Gateway (agentgateway LLM/MCP/A2A data plane), Agent Platform (kagent Agents-as-CRDs). One hub, honest jobs, deep links.
Muhtalip Dede3 min readDay-2 Prometheus with kprompt: bind an existing Prom URL, read-only performance explain (CPU, memory, p95, HPA), optimize idle/rightsizing, and fail clear when metrics are missing. Not a PromQL IDE and not auto-remediation.
Emire Barış3 min readLabels and selectors in Kubernetes: how Deployments label Pods, how Services find them, kubectl -l and endpoints checks, common mistakes, and optional kprompt examples.
Muhtalip Dede7 min readA tagged hub of ~100 real Kubernetes ops prompts—Operations, Debug, GitOps, Observability, Security, and Multi-cluster—each with a kubectl or tooling note, linked to our cheat sheet, error playbook, and edge-case guide.
Muhtalip Dede3 min readDay-2 Helm with kprompt: real helm install/upgrade plans, template and client dry-run previews, Bitnami recipes, and hard denies for uninstall-all — without replacing Helm or GitOps.
Muhtalip Dede4 min readkprompt mcp serve exposes read and plan tools to Cursor, Claude Desktop, and other IDE assistants over stdio. Mutations return a PlanResult and never auto-apply. IDE interop, not an agent platform.
Muhtalip Dede2 min readStarting from zero with kind is easy. The real challenge is attaching kprompt to a cluster you already run: bind existing Prometheus, read-first insight, optional MCP — install last.
Harun Temel3 min readA real on-call walkthrough: checkout pods stuck in CrashLoopBackOff, how we read the previous logs and events with kprompt, and why the fix still waited for human approve.
Emire Barış2 min readService vs Deployment in Kubernetes: Deployments run and update Pods; Services give those Pods a stable network identity. When you need each, how they connect via labels, and kubectl checks that stick.
Emire Barış3 min readWhy Pod IPs are not enough, what a Service does, ClusterIP vs NodePort vs LoadBalancer, selectors and Endpoints, kubectl commands, and optional natural-language checks with kprompt.
Emire Barış4 min readA plain guide to Pods and Deployments — what each one is, how they relate, kubectl commands that stick, common beginner mistakes, and optional natural-language checks with kprompt.
Emire Barış1 min readHow to read kubectl get pods output — READY, STATUS, RESTARTS, AGE — what CrashLoopBackOff and Pending mean, and which kubectl command to run next.
Emire Barış2 min readWhat a Kubernetes Deployment is, how it manages Pods and ReplicaSets, kubectl get/describe/rollout commands, common beginner mistakes, and optional natural-language checks with kprompt.
Muhtalip Dede3 min readWhy unsupervised auto-remediation is not the destination. Observe by default, Autopilot propose-only, reality anchors, and investigate → plan → approve → verify as the load-bearing loop — not a fleet of agents that apply because the model sounded sure.
Muhtalip Dede2 min readRead-only service topology as typed nodes/edges — Ingress, PVC, Secret/ConfigMap names, reverse impact — not a Secret CMDB or chat “who depends on what” folklore. Honest degraded when OTel/mesh are missing.
Muhtalip Dede3 min readNamespace dependency facts that bias Observe without becoming root-cause proof. Local or in-cluster stores — never cloud dumps as fake authority — with AG-034 confidence caps.
Muhtalip Dede3 min readIncident chronology as typed EvidenceRef[], not chat folklore. Events, rollout revisions, and HPA in one Investigation artifact — with honest degraded[] when Prom/OTel/mesh are missing.
Muhtalip Dede4 min readChat is a line; ops is a gated graph. Fan-out where edges are real, independent verify (not same-session soft-agree), PlanResult → approve → verify — without becoming a free-form agent fleet.
Muhtalip Dede10 min readMap of Kubernetes AI / k8s AI tools by job: K8sGPT (and Kubegpt-style searches) for diagnosis, kubectl-ai and kprompt for NL CLIs, Kagent for in-cluster agents — honest mutation contracts included.
Muhtalip Dede4 min readCompare kubectl alternatives: K9s terminal UI, Headlamp and Lens dashboards, and natural-language Kubernetes CLIs. Which interface fits navigation, visual management, troubleshooting, and plan-before-apply operations.
Muhtalip Dede5 min readkubectl vs K9s (and k9s vs kubectl): kubectl is the scriptable API client; K9s is a live terminal UI over the same API. When to use each in incidents, CI, and day-2 ops — plus where AI CLIs fit.
Muhtalip Dede3 min readA plain-language map of Kubernetes AI: analyzers like K8sGPT, intent CLIs like kubectl-ai and kprompt, in-cluster agents, and what belongs in CI vs on your laptop — for searches like kubernetes ai, k8s ai, and k8s ai tools.
Muhtalip Dede2 min readPractical shortlist of AI tools for Kubernetes troubleshooting: K8sGPT for scans, intent CLIs for explain/plan, kubectl for evidence — with an honest mutation checklist.
Muhtalip Dede1 min readWhat “chat with your Kubernetes cluster” means in practice: local NL CLIs, hosted consoles, and analyzers — and how to keep credentials and apply behind a human gate.
Muhtalip Dede2 min readHow to use AI on Kubernetes Pods safely: explain CrashLoopBackOff and ImagePullBackOff with kubectl, K8sGPT, or an intent CLI — without piping model output straight into apply.
Muhtalip Dede2 min readBest kubectl-ai alternatives by job: kprompt for gated PlanResult, K8sGPT for diagnosis, Kagent for in-cluster agents — plus when kubectl-ai is still the right REPL.
Muhtalip Dede1 min readPeople searching Kubegpt usually mean K8sGPT — the analyzer-first Kubernetes AI tool. How it differs from kubectl-ai and plan-before-apply CLIs, and when each job fits.
Muhtalip Dede2 min readBest K9s alternatives by job: stick with kubectl for scripts, Lens or Headlamp for visual multi-cluster, or a plan-before-apply AI CLI when intent is the bottleneck — not the TUI.
Muhtalip Dede1 min readk9s vs k8s is usually a category mistake: Kubernetes is the platform, K9s is a terminal UI for it. Clear the confusion, then see kubectl vs K9s and K9s alternatives.
Emire Barış2 min readWhat a Namespace is, why teams use dev/staging/prod separation, the default namespace trap, kubectl -n commands, common mistakes, and optional kprompt examples.
Muhtalip Dede4 min readMcKinsey’s ARK is an Agentic Runtime for Kubernetes — CRDs to run agent apps on the cluster. kprompt is an AI Runtime that reasons about the cluster under plan → approve. Same word “runtime,” different jobs. Decision guide.
Muhtalip Dede4 min readWhy kprompt’s category is an AI Runtime for Kubernetes: observe, reason, plan, approve, execute, learn — not a ChatGPT wrapper, chatbot, or silent auto-healer. Honest shipped vs building.
Muhtalip Dede4 min readFor Kubernetes AI, clever prompts lose to curated context: live cluster facts, tool detection, local history, and a typed PlanResult. Why the next leap is what you feed the model — not how you word the sentence.
Muhtalip Dede3 min readAI SRE across kubeconfig contexts: single-context default, explicit read fan-out, per-context mutate approval, aliases, and why we refuse silent fleet --approve or uploading cluster credentials.
Muhtalip Dede3 min readBoth turn English into Kubernetes actions on your laptop. kubectl-ai optimizes for kubectl fluency and agentic chat; kprompt compiles intent into a gated PlanResult — plan, safety, approve — then apply. Decision guide for operators choosing an AI Kubernetes CLI.
Muhtalip Dede1 min readOne command from kprompt-examples: kind up, seven failure scenarios, verify they actually broke, then run the Observe agent offline in heuristic mode.
Muhtalip Dede5 min readCrashLoopBackOff is a symptom, not a cause. How the restart backoff works, what exit codes tell you, the kubectl ladder for finding the real failure, and how to apply a bounded fix you actually reviewed.
Muhtalip Dede3 min readImagePullBackOff means the container never started. How ErrImagePull differs from CrashLoopBackOff, what Events tell you, common causes (bad tag, private registry, rate limit), and how to fix it without guessing.
Muhtalip Dede1 min readv0.5 ships the namespace-scoped Observe agent — watch → Incident → gated Slack/webhook — plus Operator, memory, patterns, and Autopilot propose-only under ADR-0015. The laptop CLI stays plan → approve → apply.
Muhtalip Dede2 min readPolicy is code, not LLM vibes. How kprompt’s safety engine hard-denies wipe-class intents, scores risk, forces approval, and why fail-closed is the load-bearing wall of AI SRE.
Muhtalip Dede3 min readPlanResult is the IR of AI SRE: one typed document for humans and CI. Why JSON, what applied means vs verify, how blastRadius attaches, what never gets stored, and how investigate/why must extend the same artifact.
Muhtalip Dede3 min readKubernetes deserves a compiler, not a chatbot. How kprompt turns natural language into Intent → Actions → PlanResult, why Go owns planning and safety, and why the IR must stay reviewable for AI SRE.
Muhtalip Dede3 min readAI kubectl is not enough. Production needs investigate, why, blast radius, and verify — still behind an approval boundary. Why the AI SRE category exists, what failed in classic AIOps, and what we ship first.
Muhtalip Dede2 min readA long-form series on building an AI SRE under an approval boundary — intent compiler, PlanResult, safety, multi-context, investigation, and why we refuse unsupervised auto-remediation. Episode index and honesty rules.
Muhtalip Dede3 min readSchema-focused companion to CI plan gates: apiVersion, plan.actions, risk.denied, result payloads, RouteResult / MultiContextResult, history vs CI artifacts, and hard rules on manifests and API keys.
Muhtalip Dede2 min readHow kprompt’s shipped optimize report works: inventory, Prometheus-backed idle and rightsizing findings, HPA hints, JSON output, and optional follow-up scale/patch plans that still require their own approval. What it is not.
Muhtalip Dede3 min readNatural language → plan → approve is the wedge. The differentiator is thinking about the cluster — investigate, why, timeline, blast radius, verify — still under the same approval contract. Honest shipped vs building vs exploring.
Muhtalip Dede4 min readA practical decision guide for Helm charts versus kubectl apply on day-2 Kubernetes ops — plus how kprompt maps install/upgrade prompts to reviewable Helm plans without replacing Helm or GitOps.
Muhtalip Dede4 min readWhy we compile natural language into a gated PlanResult instead of racing kubectl-ai on agentic chat — same NL CLI lane, different contract: typed plans, hard denies, CI JSON, multi-tool day-2 under one approval loop.
Muhtalip Dede3 min readA practical kubectl cheat sheet paired with natural-language prompts — get, list, describe, logs, scale, rollback, delete, explain, Helm, and JSON CI — for operators who know the API and want faster day-2 typing.
Muhtalip Dede6 min readEdge-case prompt scenarios for Kubernetes AI CLIs — wipe jokes, unscoped deletes, ambiguous resource names, missing tools, secrets reads, scale-to-zero, and --approve traps — with what kprompt does today.
Muhtalip Dede5 min readA playbook of real incident prompts for Kubernetes — what to type when pods crash, images fail to pull, memory kills, wipe-class mistakes, RBAC denials, and latency spikes — with kprompt examples that stay plan-before-apply.
Muhtalip Dede4 min readA practical guide to OOMKilled in Kubernetes — exit 137, Last State, memory requests vs limits, kubectl checks, and how kprompt explain can suggest a reviewable memory patch.
Muhtalip Dede4 min readWhy natural-language Kubernetes tools need plan-before-apply, risk scoring, and hard denies — with real kprompt examples for scale, rollback, and blocked wipe prompts.
Muhtalip Dede5 min readCompare Gemini, OpenAI, Anthropic, Groq, and Ollama for Kubernetes CLI workflows with kprompt — BYOK keys, air-gapped setups, model speed vs explain quality, and security rules for operators.
Muhtalip Dede4 min readHow to use kprompt PlanResult JSON in CI/CD pipelines to review Kubernetes scale, deploy, and rollback plans before apply — with jq gates, GitHub Actions patterns, and production safety rules.
Muhtalip Dede4 min readA practical guide to Kubernetes troubleshooting — CrashLoopBackOff, deployments not ready, image pull errors, and rollbacks — using kubectl workflows and natural-language explains with kprompt.
Muhtalip Dede6 min readAn open-source Kubernetes CLI should speak to Helm, Argo CD, Prometheus, and more — not just kubectl. Here's why kprompt is building natural-language integrations across the cloud-native ecosystem, what's shipping now, and what's on the horizon.
Muhtalip Dede6 min readLarge language models change how operators talk to clusters — but they don't replace kube-apiserver truth. A practical map of AI + Kubernetes: use cases, failure modes, and why plan-before-apply matters.
Muhtalip Dede2 min readWe built an open-source CLI that turns plain English into a reviewable Kubernetes plan — then applies with your approval. Here's why, what shipped, and how to try it.