Overview
Clu is an agentic AI-powered operations platform for Kubernetes, built for platform engineers and SREs who run production clusters. Unlike SaaS observability tools, Clu runs entirely inside your cluster - telemetry, chat context, and generated artifacts never leave your AWS account. Inference runs on your own Amazon Bedrock, so your data and your model stay under your IAM boundary.
Three modules stack to fit your team's scope. Cluster Agent (always on) handles Kubernetes troubleshooting, automatic knowledge-graph scanning, scheduled health reports, convention detection, and Prometheus + CloudWatch integration. Cloud Agent adds IAM and IRSA mapping, managed-service discovery (RDS, ElastiCache, S3, ECR), VPC topology, cost analysis, and Terraform generation for AWS resources. IDP Platform adds application scaffolding, manifest generation, Helm golden paths, and safe write operations - every change dry-runs first and requires explicit operator approval before it lands.
Safety is a first-class invariant: protected namespaces (kube-system, kube-public, and any flagged by policy) are hardcoded and cannot be overridden by configuration. Writes go through a two-step gate - the agent produces a dry-run and diff, parks the request in an approval queue visible in the in-cluster UI, and only executes after an operator explicitly clicks Approve. Every approved action is logged with the operator's identity for audit review.
Deployed as a single pod with a browser UI reachable via kubectl port-forward or your own ingress, Clu runs on both AMD64 and Graviton (ARM64) from day one, connects to Bedrock via IRSA or EKS Pod Identity, and requires no outbound network beyond Bedrock itself - air-gap friendly for regulated environments.
Highlights
- Your cluster telemetry and chat context never leave your AWS account. Inference runs on your own Amazon Bedrock, scoped by IAM. No SaaS control plane, no third-party data collection, no outbound dependency beyond Bedrock itself. Air-gap friendly for regulated and FedRAMP environments.
- Every write produces a dry-run and diff, lands in an approval queue, and only executes after an explicit operator click. Protected namespaces are hardcoded - no config can override them. Every approved action is logged with operator identity, so you always know who applied what and when.
- Start with Cluster Agent for Kubernetes troubleshooting on any conformant cluster. Add Cloud Agent for AWS inventory, IRSA mapping, and cost analysis. Add IDP Platform for scaffolding, golden paths, and gated write operations. Each module is independently licensable - pay for what you actually use.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Free trial
Dimension | Description | Cost/unit/hour |
|---|---|---|
Hours | Container Hours | $0.10 |
Vendor refund policy
Clu offers a 30-day free trial to evaluate functionality prior to paid usage. Refunds for paid hourly charges are considered case-by-case for: (1) sustained product defects preventing core functionality, or (2) documented service unavailability exceeding 24 hours in a billing period. Refund requests must be submitted within 30 days of the charge. Contact: support@cloudology.cloud
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
ECR Delivery
- Amazon EKS
Container image
Containers are lightweight, portable execution environments that wrap server application software in a filesystem that includes everything it needs to run. Container applications run on supported container runtimes and orchestration services, such as Amazon Elastic Container Service (Amazon ECS) or Amazon Elastic Kubernetes Service (Amazon EKS). Both eliminate the need for you to install and operate your own container orchestration software by managing and scheduling containers on a scalable cluster of virtual machines.
Version release notes
Clu v0.2.5. See https://getclu.dev/ for documentation.
Additional details
Usage instructions
Pull the backend and frontend images from your subscribed ECR. Both images are multi-arch (linux/amd64 + linux/arm64).
You will also need to set up:
- IAM role for ServiceAccount (IRSA) granting bedrock:InvokeModel and the per-module read permissions
- The 'clu-ops' namespace and ServiceAccount 'clu-ops-agent'
- ClusterRole 'clu-ops-reader' (always) and 'clu-ops-writer' (Module 3 only)
- ConfigMap with BEDROCK_REGION, MARKETPLACE_PRODUCT_CODE, module toggles
- Service exposing the frontend on port 8080
Full manifests + IAM policies + step-by-step setup: https://getclu.dev/docs/install
For most installs, the Helm or EKS Add-on delivery options handle this wiring automatically.
Resources
Vendor resources
Support
Vendor support
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.