September 2026
Intermediate
322 pages
7h 22m
English
Overview
Build and validate a governed AI-native developer platform with Claude, Kubernetes, GitOps, policy controls, observability, and reproducible workflows.
Key Features
- Control Claude with specifications, permissions, tests, and auditable workflows
- Build governed agent and model infrastructure on Kubernetes with GitOps
- Create a Backstage self-service path from developer request to traced agent
- Purchase of the print or Kindle book includes a free PDF eBook
Book Description
Build agentic DevOps workflows without bypassing the controls your Kubernetes platform already depends on. This book shows you how to use Claude as a controlled platform-engineering worker while introducing agents, model serving, and developer self-service through reproducible GitOps workflows, explicit trust boundaries, policy checks, and testable completion gates.
You’ll establish a cloud-native foundation with Argo CD, cert-manager, OpenBao, External Secrets Operator, Kyverno, Prometheus, Grafana, Loki, Tempo, and OpenTelemetry. You’ll then add governed AI traffic using Gateway API, kgateway, agentgateway, kagent, MCP tools, and LLM Guard before serving an OpenAI-compatible model with KServe and vLLM.
The hands-on approach shows you how to constrain Claude with specifications, permissions, audit hooks, tests, and Git checkpoints. You’ll trace agent and model activity, diagnose failures from evidence, and turn operational fixes into reusable tests. You’ll also build a Backstage template and Argo CD ApplicationSet that provide a governed path from developer request to running agent.
By the end of the book, you’ll be able to build and validate an AI-native internal developer platform in phases, route agent and model activity through existing platform controls, and prepare the architecture for production use.
What you will learn
- Control Claude with specifications, permissions, and test gates
- Design an AI-native IDP with clear ownership and trust boundaries
- Build a reproducible Kubernetes foundation with Argo CD
- Trace platform, agent, and model activity with OpenTelemetry
- Govern LLM, MCP, and agent traffic through shared gateways
- Run Kubernetes-native agents with guardrails and policy controls
- Serve OpenAI-compatible models using KServe and vLLM
- Build a governed Backstage self-service path for agent services
Who this book is for
Platform engineers, DevOps engineers, SREs, cloud engineers, and platform architects who want to use Claude to build and operate governed AI capabilities on Kubernetes. Engineering and technical leads can also use the architecture and production guidance to assess scope and risk. Experience with Kubernetes, Helm, and GitOps is required; prior Backstage experience is not.
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.