Agentic DevOps with Claude Code: Build governed AI platforms on Kubernetes with GitOps, observability, and self-service workflows
暫譯: 使用 Claude Code 實踐 Agentic DevOps:在 Kubernetes 上以 GitOps、可觀測性與自助服務工作流程打造受治理的 AI 平台

Forrester, Michael Rishi

  • 出版商: Packt Publishing
  • 出版日期: 2026-09-25
  • 售價: $1,710
  • 貴賓價: 9.5 折 $1,624
  • 語言: 英文
  • 頁數: 322
  • 裝訂: Quality Paper - also called trade paper
  • ISBN: 1808344197
  • ISBN-13: 9781808344190
  • 相關分類: Kubernetes、Large language model、CI/CD
  • 海外代購書籍(需單獨結帳)

相關主題

商品描述

Build and validate a governed AI-native developer platform with Claude, Kubernetes, GitOps, policy controls, observability, and reproducible workflows.

Key Features:

- Control Claude with specifications, permissions, tests, and auditable workflows

- Build governed agent and model infrastructure on Kubernetes with GitOps

- Create a Backstage self-service path from developer request to traced agent

- Purchase of the print or Kindle book includes a free PDF eBook

Book Description:

Build agentic DevOps workflows without bypassing the controls your Kubernetes platform already depends on. This book shows you how to use Claude as a controlled platform-engineering worker while introducing agents, model serving, and developer self-service through reproducible GitOps workflows, explicit trust boundaries, policy checks, and testable completion gates.

You'll establish a cloud-native foundation with Argo CD, cert-manager, OpenBao, External Secrets Operator, Kyverno, Prometheus, Grafana, Loki, Tempo, and OpenTelemetry. You'll then add governed AI traffic using Gateway API, kgateway, agentgateway, kagent, MCP tools, and LLM Guard before serving an OpenAI-compatible model with KServe and vLLM.

The hands-on approach shows you how to constrain Claude with specifications, permissions, audit hooks, tests, and Git checkpoints. You'll trace agent and model activity, diagnose failures from evidence, and turn operational fixes into reusable tests. You'll also build a Backstage template and Argo CD ApplicationSet that provide a governed path from developer request to running agent.

By the end of the book, you'll be able to build and validate an AI-native internal developer platform in phases, route agent and model activity through existing platform controls, and prepare the architecture for production use.

What You Will Learn:

- Control Claude with specifications, permissions, and test gates

- Design an AI-native IDP with clear ownership and trust boundaries

- Build a reproducible Kubernetes foundation with Argo CD

- Trace platform, agent, and model activity with OpenTelemetry

- Govern LLM, MCP, and agent traffic through shared gateways

- Run Kubernetes-native agents with guardrails and policy controls

- Serve OpenAI-compatible models using KServe and vLLM

- Build a governed Backstage self-service path for agent services

Who this book is for:

Platform engineers, DevOps engineers, SREs, cloud engineers, and platform architects who want to use Claude to build and operate governed AI capabilities on Kubernetes. Engineering and technical leads can also use the architecture and production guidance to assess scope and risk. Experience with Kubernetes, Helm, and GitOps is required; prior Backstage experience is not.

Table of Contents

- Designing an AI-Native Internal Developer Platform

- Governing Claude Code with Specifications, Tests, and Permissions

- Bootstrapping the GitOps Foundation

- Building the Platform Observability Plane

- Delivering the Developer Portal and Platform Extensions

- Creating a Governed Gateway for Agent Traffic

- Running Agents as Kubernetes Resources

- Serving and Observing Models on Kubernetes

- Shipping a Governed Self-Service Golden Path

- Enforcing Governance and Taking the Platform to Production

商品描述(中文翻譯)

建立並驗證受治理的 AI 原生開發者平台,運用 Claude、Kubernetes、GitOps、政策控制、可觀測性與可重現的工作流程。

主要特色:

- 透過規格、權限、測試與可稽核的工作流程控制 Claude
- 在 Kubernetes 上使用 GitOps 建立受治理的代理程式與模型基礎架構
- 建立以 Backstage 為基礎的自助服務流程,從開發者提出請求到追蹤代理程式的完整歷程
- 購買紙本書或 Kindle 電子書,即可免費獲得 PDF 電子書

書籍簡介:

在不繞過 Kubernetes 平台既有控制機制的前提下,建立代理程式化的 DevOps 工作流程。本書將介紹如何將 Claude 作為受控的平台工程工作者使用,並透過可重現的 GitOps 工作流程、明確的信任邊界、政策檢查與可測試的完成條件,引入代理程式、模型服務與開發者自助服務。

您將使用 Argo CD、cert-manager、OpenBao、External Secrets Operator、Kyverno、Prometheus、Grafana、Loki、Tempo 與 OpenTelemetry,建立雲原生基礎。接著,您將透過 Gateway API、kgateway、agentgateway、kagent、MCP 工具與 LLM Guard,加入受治理的 AI 流量,最後使用 KServe 與 vLLM 提供相容於 OpenAI API 的模型服務。

本書採用實作導向的方法,示範如何透過規格、權限、稽核掛鉤、測試與 Git 檢查點,限制 Claude 的行為。您將追蹤代理程式與模型的活動、根據證據診斷失敗原因,並將營運修正轉化為可重複使用的測試。此外,您還將建立 Backstage 範本與 Argo CD ApplicationSet,為開發者建立一條受治理的流程,從提出請求一路到執行中的代理程式。

讀完本書後,您將能夠分階段建立並驗證 AI 原生的內部開發者平台(Internal Developer Platform, IDP),讓代理程式與模型的活動經由既有的平台控制機制進行路由,並為正式環境使用做好架構準備。

您將學到:

- 使用規格、權限與測試閘門控制 Claude
- 設計具備明確責任歸屬與信任邊界的 AI 原生 IDP
- 使用 Argo CD 建立可重現的 Kubernetes 基礎
- 使用 OpenTelemetry 追蹤平台、代理程式與模型的活動
- 透過共用閘道治理 LLM、MCP 與代理程式流量
- 運用防護機制與政策控制執行 Kubernetes 原生代理程式
- 使用 KServe 與 vLLM 提供相容於 OpenAI API 的模型服務
- 為代理程式服務建立受治理的 Backstage 自助服務流程

適合讀者:

本書適合希望運用 Claude,在 Kubernetes 上建立與操作受治理 AI 能力的平台工程師、DevOps 工程師、SRE、雲端工程師與平台架構師。工程與技術主管也能運用本書的架構與正式環境實務指南,評估專案範圍與風險。讀者需要具備 Kubernetes、Helm 與 GitOps 經驗,但不要求事先具備 Backstage 使用經驗。

目錄:

- 設計 AI 原生內部開發者平台
- 使用規格、測試與權限治理 Claude Code
- 建立 GitOps 基礎
- 建置平台可觀測性層
- 提供開發者入口網站與平台擴充功能
- 為代理程式流量建立受治理的閘道
- 將代理程式以 Kubernetes 資源的形式執行
- 在 Kubernetes 上提供模型服務並進行觀測
- 發布受治理的自助服務黃金路徑
- 強制執行治理並將平台推向正式環境