Agents propose. Hooks block. Git decides.

The engineering guide to bringing Claude Code, MCP and subagents into your daily Terraform, Kubernetes, AWS and CI/CD work, with the safeguards a production environment demands.

One-time payment. 1 year of updates. 14-day guarantee.

The explorer shows a sample of what ends up in your repository. There are 52 templates (subagents, hooks, rules, skills and CLAUDE.md), each one explained in the chapter where it is built.

your-repo/ Click a file
  • .claude/
  • agents/
  • hooks/
  • rules/
  • skills/


        

One system, in the order it runs in production

Installing Claude Code takes five minutes. What the guide teaches is the chain that keeps an agent from doing damage: each step delivers something the next one uses.

Illustrative example: a nodepool change moving through all six steps. Click a step or run the whole thing.


      

This guide has a changelog

Claude Code, MCP and the providers change every month. A static PDF is outdated the day it ships. Here every change is published with its date, section and what was added, and your access includes all of them for a year.

Last updated: 08/12/2026

See the full history
  1. Container security with a gated executor (section 10.9)

    Four ADRs on auditor autonomy, a fail-closed PreToolUse hook and CVE triage memory: a CVE already analyzed does not come back on every scan.

  2. Spec-driven FinOps with a gated reaper (section 11.5)

    "Delete immediately" for zombie resources becomes a snapshot and a PR with a 7-day grace period. A hook blocks direct deletes.

  3. Spec-driven CI/CD: ADRs, deployer and rules (section 8.15)

    A deployer that verifies the Cosign signature, bumps the GitOps repository and never touches the cluster.

  4. AWS with executable guardrails (section 6.6)

    Delete, Terminate and Revoke actions never leave the agent: they become a ready command for a human to run.

Written for the people accountable for the environment

The guide assumes you already run something that can't go down. The question isn't whether AI can write Terraform. It's what you let it execute, and behind which safeguard.

It's not for anyone looking for NoOps. The guide argues for human-in-the-loop, governance and technical accountability. If the plan is to let an agent apply straight to production, this material will disagree with you the whole way.

DevOps, SRE and Platform Engineers

Who already maintain Terraform, Kubernetes and pipelines and want speed without giving up review and rollback.

Tech leads and Staff engineers bringing AI to their team

And who need ADRs, rules and permissions to show leadership there is control, not just enthusiasm.

People moving into DevOps

The chapters explain why each safeguard exists, not just the command. That cuts years of trial and error.

16 chapters, 176 sections, 300+ pages

Three chapters are open right now. Read before you buy.

01The silent revolutionFree
09Observability and incidents
02AI fundamentalsLLMs, context, MCP
10Container and Kubernetes securitySpec-driven, executor gated
03The modern IDEVS Code and Claude CodeFree for a limited time
11FinOps with AITagging, Infracost, zombie resources
04AI agentsSubagents, ADRs, spec-driven
12Runbook RAG
05Terraform with AI
13Guardrails and professional use
06AWS with AIAWS MCP, Bedrock, spec-driven
14AI-assisted GitOpsArgoCD, ApplicationSet, Argo Rollouts
07Kubernetes with AIK8sGPT, MCP, EKS upgrades with Karpenter
15Governance and adoption
08CI/CD with AIOIDC, GitOps, spec-driven
16Conclusion and the futureFree

From readers

"Finally the first AI guide focused on DevOps that covers what matters. No fluff."
Leonardo Magalhaes, Tech Lead
"I didn't know several of the tools mentioned... MCP, RAG, all together. Now I never leave the IDE."
Claudiano Silva, Senior SRE
"Highly technical and conceptual at the same time. It gave me the foundation to discuss strategy with leadership."
Bruno Sereballos, Senior DevOps Engineer
"Even with little experience, I closed the gap with other professionals and was able to apply many of the concepts."
Bernando Gomes, Junior DevOps
Filipe Motta

Who wrote it

Filipe Motta. Senior DevOps, Cloud and Platform Engineer since 2015.

This guide was written from real problems: incidents, automation that failed and hard decisions in critical production, cloud, Kubernetes and automation at scale. Every safeguard in it exists because, at some point, someone needed it.

CKA CKAD CKS AWS Solutions Architect AWS DevOps Engineer GCP DevOps Engineer Terraform Associate LPIC-1

LinkedIn profile

Everything on this page, for a year

  • 16 interactive chapters, 300+ pages
  • 52 ready-made templates: subagents, hooks, rules, skills and CLAUDE.md
  • Every update published in the changelog for 12 months
  • AWS examples, with concepts that apply to GCP, Azure and on-prem

From $97 to

$57

One-time payment, no automatic renewal.

Buy the guide

14-day guarantee. Read it and it wasn't for you? Ask for a full refund, no form and no explanation.

Frequently asked questions

Does it work for Azure and GCP, or only AWS?
The concepts (Terraform, Kubernetes, MCP, agents, hooks) are cloud-agnostic and work on Azure, GCP and on-prem. Chapter 6 is dedicated to AWS, and there are public skills for GKE too.
Is it practical or just theory?
Practical, with production context, trade-offs and clear limits. The templates you saw at the top of this page are the same ones the guide explains line by line.
Does the guide keep up with changes in AI tools?
Yes, and you can check before buying: the release notes are public and list every section added, with dates.
How long do I have access?
1 year, including every update in that period. One-time payment, no automatic renewal.
Can I read part of it first?
Yes. Chapters 1 and 16 are free, and chapter 3 (VS Code and Claude Code) is open for a limited time. Start reading.
I'm new to DevOps. Can I keep up?
Yes. The guide explains the reasoning behind each decision, and early-career readers say it narrowed the gap with more experienced professionals.

Start with the free chapter. Come back when you want the safeguards.