Introducing kprompt: talk to your cluster
We built an open-source CLI that turns plain English into a reviewable Kubernetes plan — then applies with your approval. Here's why, what shipped, and how to try it.
If you operate Kubernetes, you already know the drill: kubectl for reads, manifests or Helm for changes, dashboards when something breaks, and a mental map of which namespace, context, and deployment name you actually mean. kprompt is our bet that a single sentence should be enough to start — as long as what happens next is visible, reviewable, and under your control.
kprompt is an experimental, Apache-2.0-licensed CLI. You type what you want in natural language. The tool turns that into a structured plan against your existing kubeconfig, runs safety checks, asks you to approve on a TTY (unless you pass --approve), and only then executes. No hosted agent in your cluster. No vendor lock-in on the model — bring your own API keys.
The problem we're solving
LLMs are good at intent: “scale payment-api to three replicas”, “roll back redis”, “why is this pod crash-looping?”. They're not good enough to trust with blind apply. Operators need speed without giving up accountability — especially on shared clusters where a wrong command has blast radius.
- You shouldn't need to memorize kubectl flag order for routine day-2 work
- You shouldn't auto-apply model output without seeing the plan first
- You shouldn't send cluster credentials to a SaaS control plane just to run a prompt
How it works
Every interaction follows the same loop: Prompt → Plan → Safety → Apply. Reads (list, get, logs, describe, explain) run immediately. Mutations always produce a plan first — with live diffs when the API allows — then risk scoring and hard denies before anything touches the cluster.
Typical flow
$ kprompt "scale redis to 2" -n staging
Plan
1. kubectl scale deployment/redis --replicas=2 -n staging
Risk: low
Apply? [y/N]What's in v0.3.0 today
- Deploy, scale, rollback, and named delete
- Read path: get/list, explain, logs, describe
- Plan → safety → approve → apply with optional --wait on rollouts
- Deep Deployment → ReplicaSet → Pods → Events → Logs investigation
- Helm install/upgrade plans with template and dry-run previews
- Argo Workflow generation, submission, status, and wait
- Prometheus-backed workload performance diagnosis
- Jaeger/Tempo trace query adapter foundations
- Local prompt history (~/.kprompt/history.jsonl) — no manifests or keys stored
- CI-stable JSON PlanResult output for pipeline gates
- Terminal themes: auto, Dracula, Nord, Gruvbox, mono, and none
- Multiple LLM providers (Gemini, OpenAI, Anthropic, Groq, Ollama, and others) via BYOK
What we're not claiming
kprompt is early software. Plans can be incomplete or wrong. Hard-deny rules catch known-dangerous patterns, but they don't replace your judgment. Helm, Argo Workflows, and Prometheus support now ship, but GitOps, natural-language trace walking, Grafana, and in-cluster agents remain on the public roadmap.
- Not production-hardened — start on kind or a non-production cluster
- Not a replacement for code review of manifests you care about
- Not a hosted team product today — org policy and audit are explored for later
Try it in five minutes
Install
curl -fsSL https://kprompt.ai/install | bashConfigure provider and run a read
export KPROMPT_GEMINI_API_KEY="..."
kprompt config set provider gemini
kprompt config set namespace default
kprompt "list deployments"Full install, integration, theme, provider, safety, and CI docs live at kprompt.ai/docs. Source and issues are on GitHub — contributions and feedback welcome. We'll publish more here as we deepen observability, add Homebrew, and build the next integration layers.
Related posts
Building AI SRE in Public
A long-form series on building an AI SRE under an approval boundary — intent compiler, PlanResult, safety, multi-context, investigation, and why we refuse unsupervised auto-remediation. Episode index and honesty rules.
Read articlekprompt + kagent: PlanResult as an MCP tool under a CNCF agent platform
How to compose kprompt with kagent without collapsing the layers: kagent hosts Agents-as-CRDs via MCPServer / RemoteMCPServer; kprompt ships read/plan-only MCP tools that return a typed PlanResult and never auto-apply. Validated against kagent quickstart + first MCP tool docs.
Read articlekprompt + OpenTelemetry: trace payment request — without inventing spans
Day-2 OpenTelemetry with kprompt: bind Jaeger or Tempo, walk a span tree, narrate bottleneck waits, enrich service graphs with call edges when traces exist, and degrade honestly when OTel is missing. Not a Jaeger UI and not auto-remediation.
Read article