Many startups begin with one application and a hosted deployment service. That is usually the right decision. The team can ship without first building networking, deployment automation, or an operations layer.
The requirements change as the company adds services, environments, enterprise customers, private networking, and infrastructure ownership. The team still needs a short path to production, but the applications now need to run in infrastructure the company controls.
AstroPulse gives growing engineering teams a repeatable path from code to production in infrastructure they control, without requiring them to build the platform themselves.
From code in the editor to a healthy application, with one platform reused across multiple services.
Our earlier build-your-own-PaaS blueprint wired up ingress, TLS, and DNS by hand. Now it's three managed add-ons and one domain verification: install NGINX + cert-manager + ExternalDNS, verify a domain once, and every container image you deploy comes up on your own domain with real, auto-renewing HTTPS. Do it from the console, the CLI, or just ask your AI. All three drive the same platform.
Three ways to follow along. Each step below leads with the console walkthrough, with the CLI and AI equivalents in the tabs underneath:
Console: point and click; the walkthroughs below are the real UI.
CLI: astroctl …, copy-paste ready.
AI: ask Nova in the console, or connect your editor's assistant to the AstroPulse MCP (platform.astropulse.io/mcp) and describe what you want. For building an image straight from a repo, the astro-deploy MCP does that too.
Before you start: one cluster with cloud identity
You need exactly one thing: a Kubernetes cluster connected to AstroPulse, running with the cloud's own identity — IRSA on AWS, Workload Identity on GCP/Azure. That identity is what lets ExternalDNS manage DNS and cert-manager solve ACME challenges without ever handling a cloud credential.
The easy path is to let AstroPulse provision the cluster. It wires that identity up for you:
CLI
Ask your AI
Connect your cloud, then provision (identity configured for you)
$ # one-time: connect your cloud account
astroctl cloud aws connect --account-id 123456789012 --region us-east-1 --cluster-name prod
# provision the cluster — IRSA / Workload Identity is set up automatically
astroctl infra k8s apply -f cluster.yaml
Already run your own cluster? Register it instead, then set up the identity per the add-on docs:
Terminal
$ astroctl infra k8s register --cluster-name my-cluster
Nova / your editor's AI
Provision an EKS cluster with IRSA enabled and connect it to AstroPulse.
Done. I generated the cluster manifest with IRSA turned on, connected your AWS account (123456789012, us-east-1), and applied it. The cluster is provisioning now; its ExternalDNS and cert-manager service accounts will be bound to the IAM role automatically. Want me to install the ingress add-ons once it’s ready?
On your cluster's Add-ons tab, choose Install Add-on and pick from the catalog. Each installs with production-sensible defaults; you tune only what matters.
NGINX Ingress: routes public traffic. The default terminates TLS at the ingress (there's a passthrough option for backends that terminate their own). On a cloud cluster it comes up behind a real LoadBalancer with the right provider annotations already set.
cert-manager: issues and renews TLS certificates. Turn on Create a Let's Encrypt ClusterIssuer and add a contact email for real, auto-renewing public certificates, with no manual cert wrangling.
ExternalDNS: publishes DNS records for your apps. Pick your DNS provider and set the domain filter to your zone (e.g. example.com). It uses the cluster identity from the prerequisite step, so no keys are ever stored.
CLI
Ask your AI
Prefer YAML? The same add-ons apply declaratively. Copy-paste the example manifests:
Apply add-ons and watch them go healthy
$ astroctl infra k8s addons apply -f nginx-ingress.yaml
astroctl infra k8s addons apply -f cert-manager.yaml
astroctl infra k8s addons apply -f external-dns.yaml
astroctl infra k8s addons get prod # all add-ons + health
Nova / your editor's AI
Install NGINX, cert-manager with a Let’s Encrypt issuer, and ExternalDNS for example.com on my cluster.
Installing all three on prod: NGINX (TLS terminated at the ingress), cert-manager with a Let’s Encrypt ClusterIssuer using ops@example.com, and ExternalDNS scoped to the example.com zone via the cluster identity. They’re rolling out; I’ll report back when all three are Healthy.
Installed together, they compose into automatic, production-grade HTTPS: cert-manager solves the ACME challenge through NGINX, ExternalDNS creates the DNS record, and NGINX terminates TLS at the edge with the issued certificate. Certificates renew themselves.
In Settings → Domains, add a domain you control and publish the TXT record it shows you. Once it verifies, every internet-facing app can serve on it, on a hostname you choose (shop.example.com) or an auto-generated one.
CLI
Ask your AI
Claim and verify a domain
$ astroctl domain add example.com # prints the TXT record to publish
astroctl domain verify example.com # run once DNS has propagated
Nova / your editor's AI
Add example.com as a custom domain and tell me the DNS record to publish.
Claimed example.com. Publish this TXT record at _astropulse-challenge.example.com → "astro-verify=9f2c…". Once it resolves, say the word and I’ll verify it for you.
Deploy astropulse/latency:v1.0.0 to my cluster on shop.example.com.
Deploying the image as an app with external access on shop.example.com (a hostname under your verified example.com). ExternalDNS is creating the record and cert-manager is issuing the certificate now; it’ll be live on https://shop.example.com shortly.
Want to validate the wiring before touching a cloud account? The whole flow runs on a local kind cluster, with a few local swaps:
NGINX: install it with Expose via NodePort (Advanced settings). kind has no cloud LoadBalancer, so the controller is reachable on a node port instead. That's the only local-vs-cloud difference.
cert-manager: enable a self-signed ClusterIssuer: no ACME account, no public DNS, no email. It's Ready offline, which is all you need to prove the TLS path.
ExternalDNS: skip it locally; it needs a real cloud DNS zone.
Deploy any container image with an ingressClassName: nginx Ingress and it's reachable through NGINX exactly as it would be through a cloud LoadBalancer in production. Full steps are in the add-on docs' local testing section.
The blueprint still stands if you want to own every piece. But the ingress, TLS, and DNS plumbing is now something AstroPulse installs, keeps healthy, and upgrades for you, reachable from a console, a CLI, or a sentence to your AI. Push an image, get a live URL on your own domain with real HTTPS. That's the whole idea.
When I started AstroPulse, the problem was easy to name and hard to live with: teams moving to the cloud were drowning in tools. Every provider had its own consoles, its own primitives, its own way to deploy an app and stand up a cluster. The work that mattered, shipping software, kept getting buried under the work of operating it.
I wanted one place to deploy an application and run a cluster, on any cloud, without learning five different platforms first. That was the beginning. Everything since has been built on top of that one idea, one layer at a time.
Six months in as platform lead and you have a spreadsheet you haven't shown your manager. Eleven Kubernetes clusters. EKS for production. GKE for the ML team. Two on-prem clusters behind the firewall that predate your tenure. A handful of Kind clusters developers spun up locally. Each one has its own deployment pipeline, its own credentials rotation process, its own way of answering "is this service healthy?"
Your team isn't building features anymore. You're maintaining eleven slightly different versions of the same tooling.
You want the simplicity of "push code, get a live URL"—the developer experience Vercel pioneered—but with full control over your deployment, infrastructure, and compliance. This guide shows you how to build that experience on your own AWS infrastructure using AstroPulse and open-source tools: kpack, cert-manager, external-dns, and nginx-ingress.
You'll build a production-grade platform that delivers Git-push deployments with automatic TLS certificates, preview URLs, and complete observability—all running on infrastructure you own and control. Unlike hosted PaaS platforms, you'll be building on Kubernetes with full deployment control. That means you can run any workload: microservices (with or without public endpoints), stateful databases, WebSockets, long-running background jobs, AI/ML model training and serving, or traditional web applications in any language. You get the simple developer experience with complete architectural control.
How operations work: The infrastructure industry is moving toward an agentic era—AI agents autonomously handling complex workflows (MCP, A2A, multi-agent orchestration). We're heading toward infrastructure that self-configures, self-heals, and self-optimizes. We're not there yet, but Nova brings you AI-assisted operations today with human-in-the-loop. Day 1 (this guide): You build the platform. Day 2 (ongoing): Nova analyzes issues, diagnoses problems, recommends fixes—you approve. As AI matures, more becomes autonomous.
📖 About This Guide
This is a comprehensive, production-ready blueprint. We cover everything from architecture to production deployment with complete working examples, security, compliance, and troubleshooting.
⚡ Want the fast track? Jump to our automated setup script (platform deploys in 30 minutes)
Platform engineering represents the natural evolution of DevOps and SRE principles, but it faces a fundamental challenge: how do you scale platform expertise across an entire organization without requiring every developer to become a cloud expert?
This is where Nova comes in — your AI platform engineer that makes infrastructure accessible to everyone through natural conversation.
The Platform Engineering Evolution
DevOps broke down silos → SRE brought engineering rigor to operations → Platform Engineering created self-service infrastructure → Nova makes platform engineering conversational and accessible to everyone.
The Platform Engineering Challenge: Scale vs. Expertise
Platform engineering promised to solve the "you build it, you run it" scaling problem by creating Internal Developer Platforms (IDPs). But even the best platforms face fundamental limitations:
👥
Expert Bottlenecks
Platform teams become the new constraint—everyone depends on their expertise
📚
Documentation Decay
Complex systems require constant documentation that quickly becomes outdated
🧠
Context Loss
Critical operational knowledge lives in tribal knowledge, not systems
⚙️
Cognitive Load
Developers still need to understand infrastructure concepts to use platforms effectively
The Core Issue
We've built self-service platforms, but we haven't solved the underlying problem of democratizing platform engineering expertise.
Nova is an AI platform engineer that helps you manage infrastructure through natural conversation. Ask questions, get answers, generate configurations, and troubleshoot issues — all through simple chat.
What makes Nova different:
Works with your existing tools (Slack, GitHub, AWS, Terraform, Kubernetes, and more)
Available however you want to work — browser, self-hosted, or in your editor
Nova's power comes from its extensibility. Connect the tools you already use:
Available Skills:
Cloud Providers — AWS, Google Cloud, Azure cost calculations and resource management
Communication — Slack integration for team collaboration
Development — GitHub for code search, issues, and PRs
Infrastructure — Terraform and Helm configuration generation
Kubernetes — Cluster management and troubleshooting
And more — Add any MCP server for custom integrations
Bring Your Own Tools
Nova Direct includes the built-in MCP Marketplace for custom integrations. Nova Connect works through standard MCP-compatible clients, so teams can bring Nova into existing editor and CLI workflows without running the server locally.
The evolution from DevOps → SRE → Platform Engineering → AI-Assisted Platform Engineering represents more than technological progress — it's about democratizing expertise that has historically been scarce and expensive.
Traditional Model
Small teams of platform experts serve entire organizations
Welcome to our technical deep-dive podcast where we explore how Astro Platform is transforming cloud infrastructure management. Join us as we discuss the challenges, solutions, and future of cloud computing with industry experts.
According to Gartner's prediction highlighted in our discussion, by 2025, over 95% of new digital workloads will be deployed on cloud-native platforms, up from 30% in 2021. This dramatic shift underscores the urgency for efficient cloud management solutions.
In my journey through the cloud infrastructure landscape, I've encountered a recurring challenge: businesses transitioning from traditional on-premises solutions to public clouds often struggle with managing application deployments and Kubernetes cluster configurations.
The existing cloud ecosystem, with its numerous providers and disparate tools, lacks unification, making it difficult to master each platform.
These complexities can be overwhelming, detracting from innovation and growth.
Gartner Report
"According to Gartner, by 2025, over 95% of new digital workloads will be deployed on cloud-native platforms, up from 30% in 2021"
At AstroPulse, we recognized these critical pain points and developed the Astro Platform to simplify and unify the management of applications and clusters.
By bringing everything under one streamlined service, Astro Platform eliminates the need to juggle different tools and platforms, reducing the learning curve
and enabling businesses to maintain agility, enhance operational efficiency, and focus on their core mission of innovation. The platform integrates our Nova capabilities to provide intelligent insights and recommendations, making your cloud infrastructure both powerful and intuitive. Additionally, Astro Platform simplifies the management of multi-cloud vendor environments, supporting both managed and self-hosted Kubernetes clusters.
Customer Testimonial
How did Astro Platform help your team handle multi-cloud operations?
Before Astro Platform, we struggled juggling different cloud providers with separate tools and interfaces. Now we have a single pane of glass for all our clusters, saving us hours of operational overhead each week. The standardized application deployment model has been a game-changer for our DevOps team.
Streamline Your Cloud Operations with Astro Platform
Are you struggling with managing application deployment and Kubernetes cluster configurations across multiple environments? Discover how Astro Platform can simplify your cloud infrastructure management and streamline your operations.
Our platform simplifies the deployment and management of applications through an intuitive use of YAML, Helm charts, or our tailored Astro Application resource abstraction. This approach not only supports a range of application types—stateless and stateful—but also integrates seamlessly into your existing workflows.
Broad Application Spectrum
Whether you are deploying a simple web app or a complex microservices architecture, AstroPulse has you covered.
Ease of Use
Our platform is designed with the user in mind, offering intuitive interfaces and automation to minimize manual intervention.
Nova Integration
Leverage the power of AI to get intelligent recommendations, automate routine tasks, and optimize your cloud operations.
Seamless Migration
We facilitate smooth migration across various cloud providers, enabling you to choose the best environment for your applications.
Integrated Cloud Native Technologies
AstroPulse integrates a range of cloud native technologies to provide a cohesive and robust platform for your deployments.
Security and Resilience
With a strong focus on security and operational resilience, it ensures that your applications run reliably and securely.
Astro Platform, enhanced by Nova, revolutionizes how you deploy and manage applications in the cloud. Nova analyzes your deployment patterns, infrastructure usage, and application behavior to provide intelligent recommendations that optimize performance, scalability, and reliability.
Our platform supports multiple deployment methods, giving you the flexibility to use what works best for your workflow:
Application Profiles
Define deployment targets with profiles that specify cluster and environment settings.
Container Images
Deploy container images directly from any registry with simple configuration.
Public Helm Charts
Integrate with public Helm repositories to deploy common applications and services.
Private Helm Charts
Use your own Helm charts from private repositories for custom applications.
YAML Resources
Deploy Kubernetes resources directly from YAML files in your repositories.
Nova analyzes these configurations in real-time, suggesting optimizations, catching potential issues before deployment, and learning from your usage patterns to provide increasingly personalized recommendations.
One of the standout features of Astro Platform is its ability to manage multiple Kubernetes clusters effortlessly.
Our management tool, astroctl, provides a comprehensive view across all deployments, allowing you to monitor logs, events, and application statuses
irrespective of the specific cluster or cloud provider they reside on. This unified pipeline significantly reduces the
complexities associated with managing diverse cloud environments.
But what truly sets Astro Platform apart is its advanced capability to support direct use of the kubectl command by retrieving the kubeconfig file.
With a simple command, you can pull the kubeconfig of any cluster running on any public cloud provider.
KubeConfig Retrieval
$ astroctl infra k8s set-context dev-stack-aws.k8s.local
fetched kubeconfig
kubeconfig entry generated for cluster: dev-stack-aws.k8s.local
This powerful feature allows for straightforward debugging and troubleshooting. For instance, one of our clients resolved a critical deployment
issue within minutes using this feature, significantly reducing downtime and boosting their team's productivity.
Bring Your Own Account or Cluster?
Looking for enhanced security and control? Bring your own account or cluster with Astro Platform for seamless integration with your existing systems.
This ensures that your account, your cluster, and your security rules are fully under your control.