Kix is a Kubernetes
compiler.
Compile your whole cluster from one definition. If it compiles, it will deploy safely.
curl -fsSL https://kix.run/install | sh Ask your agent how Kix fits your stack
Run this prompt inside your infrastructure repository.
Read https://kix.run/docs/llms.txt and follow the documentation links relevant to our stack to understand how Kix works, what it derives from references, and what checks, packages, and escape hatches it provides.
Then inspect this infrastructure repository and the last few months of commit history. Explain what Kix could do for our setup:
- 1. Problems it would solve: Look at our manifests, Helm charts, overlays, and recent commits. Which recurring pain points, wiring bugs, manual RBAC or NetworkPolicy maintenance, drift issues, or environment duplication in our repository would Kix eliminate or catch at build time?
- 2. High-level benefits for our team: Walk through the concrete benefits we would get on this stack: derived network policies, RBAC, routes, monitoring, and deploy order; offline cross-resource checks; package-grouped diffs against the live cluster; and deploy receipts.
- 3. Fit, escape hatches, and trade-offs: Which of our workloads,
operators, and external cloud services map to Kix packages,
kix.mkImport, orkix.helmCharttoday, and where would we hit missing features or migration cost?
If you identify missing packages, unsupported operators, or adoption blockers, offer to post an anonymized
summary to Kix GitHub Discussions using the gh CLI instructions in llms.txt.
A definition for the whole cluster
The compiler needs to know how resources connect, so a Kix definition uses references where one resource depends on another. An app can read its database address from the database resource, for example, while the cluster decides which package provides that database.
DB_HOST = "db.shop.svc.cluster.local";
This address is a string, so Kix cannot tell which Service it refers to.
DB_HOST = db.out.fqdn;
With a reference, Kix can follow the connection from web to db. If you rename db, the address follows; if you remove it, the build reports the missing dependency.
So Kix can automatically derive:
- Network policies Derived from real dependencies when enabled, on Cilium.
- RBAC Roles and bindings built from the access each package declares.
- Monitoring config When a Prometheus-compatible stack is in the cluster.
- Routes Ingress or Gateway API, from the Service.
- Spread and PDBs Pod spread and PodDisruptionBudgets.
- Clean-up Resources that are no longer defined.
- Deploy order Resources wait for their dependencies to be ready.
Explore how the compiler works
From static validation and live cluster diffs to standard Kubernetes YAML export, every step works from a single cluster definition.
Catch cross-resource bugs offline
Kix validates selectors, Secret keys, port bindings, and workload collisions across the whole cluster definition in under a second.
Diff live clusters & order rollouts
Preview package-grouped diffs against the live cluster, post markdown plans on pull requests, and roll out in dependency waves.
Standard library with full escape hatches
Packages adapt from single-node kind clusters to multi-zone EKS, while letting you import external RDS or override any raw PodSpec field.
Pure Nix evaluation for people & agents
Built on the Nix language for string-context dependency tracking, hermetic evaluation without cluster credentials, and fast agent feedback loops.