{"slug": "an-ai-assisted-plugin-for-eks-to-gke-migrations-with-built-in-governance", "title": "An AI-assisted plugin for EKS-to-GKE migrations with built-in governance", "summary": "Google released GKE agentic migration, an open-source agent plugin that converts AWS EKS infrastructure-as-code and Kubernetes manifests into Google Kubernetes Engine landing zones through automated pull requests. The plugin pairs LLM authoring with deterministic validation and a local Model Context Protocol server, and Persistent EVP Rahul Shrivastava said it provides \"structured state persistence, multi-persona boundaries between platform and app teams, and non-negotiable human approval gates.\" Google said the tool targets the automation trust gap, ClickOps-style live cluster mutation, siloed multi-week handoffs, and fragmented toolchains such as Velero backups that capture AWS-specific configurations like ALBs.", "body_md": "Enterprises are increasingly standardizing on Google Kubernetes Engine (GKE) to run their most critical and AI-driven workloads. From Cloud Storage FUSE for high-throughput data access to custom compute classes (CCC) and advanced GPU slicing, GKE provides the scale and efficiency required for modern applications.\n\nHowever, migrating complex Kubernetes environments from AWS EKS to GKE has traditionally been a daunting, high-friction engineering endeavor. Your platform teams must manually dissect sprawling infrastructure-as-code (IaC), navigate cloud-specific architectural differences, and build custom translation scripts.\n\nWhile your engineering teams often experiment with general-purpose LLMs to draft conversions, ad-hoc prompting quickly can become an operational trap. Raw models hallucinate non-existent resource properties, drop critical network or identity configurations, and lose context across interdependent files. The time platform engineers spend auditing, untangling, and debugging model errors ends up cannibalizing any upfront speed gains, creating manual toil and unpredictability.\n\nToday, we are excited to announce the open-source release of GKE agentic migration, a purpose-built agent plugin that replaces brittle, ad-hoc prompting with an AI-assisted migration pipeline protected by deterministic guardrails.\n\n“For large enterprise clients, the biggest barrier to cloud modernization is execution risk and unpredictability. Unlike raw chat prompts that lose context and hallucinate configurations, Google’s GKE agentic migration pairs the speed of generative AI with the deterministic guardrails enterprises need: structured state persistence, multi-persona boundaries between platform and app teams, and non-negotiable human approval gates. It gives our global engineering practice a provable, compiler-grade migration factory that slashes delivery risk.- **Rahul Shrivastava****,** **EVP, Persistent**\n\nWhen talking to customers about their infrastructure migration journeys, we consistently hear about several governance challenges:\n\n**The automation trust gap:** Refactoring Kubernetes configurations manually can be agonizingly slow. Yet, using generic AI coding assistants introduces unacceptable risk. Standard LLMs can hallucinate infrastructure code, use deprecated API fields, or omit critical security rules. Generating code that is \"almost right\" simply shifts the bottleneck from writing code to debugging it.\n\n**The danger of live cluster mutability (ClickOps):** Legacy migration tools often connect directly to live clusters and deploy via API calls. This bypasses the organization's Git repository (the true source of truth), breaks CI/CD pipelines, and makes rollbacks incredibly difficult.\n\n**The siloed handoff bottleneck:** Migrations are often long-running, multi-week operations. Platform engineers build the landing zone and your application developers migrate the workloads. Standard AI tools lose context across the handoff.\n\n**The fragmented toolchain:** Backup tools like Velero are excellent for disaster recovery but capture exact AWS-specific configurations (like ALBs) without translating them for Google Cloud. Reverse-engineering tools, meanwhile, generate flat configurations that strip away the developer's original logical intent.\n\nThe GKE agentic migration addresses these challenges by combining the reasoning capabilities of LLMs with strict, deterministic tooling. Designed as a compilation of agent skills and a local Model Context Protocol (MCP) server, it uses AI to translate complex AWS EKS IaC and Kubernetes manifests directly into GKE landing zones via automated Pull Requests.\n\nHere are the key capabilities that set the GKE agentic migration apart:\n\n**1. Hybrid verification** — **LLM-generated, deterministically validated.** To combat dangerous IaC hallucinations, LLM workers handle the complex authoring of Terraform and Kubernetes YAML, while the server runs deterministic transforms for exact mappings such as Workload Identity annotations and image registries. Crucially, these AI-generated translations are then submitted to strict deterministic validations (e.g., terraform validate, Kubernetes manifest contracts) before they are presented to the user. This approach helps maintain safety against hallucinations while gating everything behind human-in-the-loop (HITL) approval.\n\n**2. GitOps-native PR workflows:** The plugin never applies changes directly to a live cluster. Instead, it reads your source of truth, generates the target state, and opens a Pull Request. This helps route all changes through your standard human-in-the-loop (HITL) CI/CD review process. No \"ClickOps.\"\n\n**3. Protected separation of translation vs. transport:** The plugin automates the tedious logic of architectural translation, but it intentionally does not transport stateful data. To protect your most sensitive assets, the plugin generates contextual runbooks that guide your team in using purpose-built, SLA-backed tools (like Google Cloud's Database Migration Service or Storage Transfer Service).\n\n**4. Multi-persona state management:** Migrations are team efforts. The plugin persists the long-running migration state.  This enables protected, asynchronous handoffs: Platform engineers establish the baseline landing zone, while app developers independently join the workspace from their own machines to translate individual workloads within permission-isolated folders.\n\nUnder the hood, the GKE agentic migration utilizes a migration state graph of executable functions, systematically passing context down the chain. Packaged as an open-source agent plugin, there are no custom CLI binaries to install and no central control planes to manage — your team collaborates through your existing development harness, delivering validated pull requests and actionable runbooks directly into your source repositories. This provides:\n\nThe GKE agentic migration transforms cloud migrations from disjointed refactoring exercises into predictable, AI-assisted, and reviewable GitOps workflows. **Ready to accelerate your journey to GKE?**\n\nStar and clone the [GKE agentic migration repository on GitHub](https://github.com/gke-labs/gke-agentic-migration)\n\nRead the [onboarding guide](https://github.com/gke-labs/gke-agentic-migration/tree/main/docs/onboarding-guide.md) to run the plugin against a sample EKS repository.\n\nJoin the [Google Cloud Community](https://cloud.google.com/communities) to share feedback, ask questions, and contribute.", "url": "https://wpnews.pro/news/an-ai-assisted-plugin-for-eks-to-gke-migrations-with-built-in-governance", "canonical_source": "https://cloud.google.com/blog/products/containers-kubernetes/gke-agentic-migration/", "published_at": "2026-09-24 16:00:00+00:00", "updated_at": "2026-09-24 16:32:29.881749+00:00", "lang": "en", "topics": ["ai-agents", "agent-protocols", "ai-infrastructure", "developer-tools", "ai-tools"], "entities": ["Google", "Google Kubernetes Engine", "AWS EKS", "GKE agentic migration", "Model Context Protocol", "Rahul Shrivastava", "Persistent", "Velero"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/an-ai-assisted-plugin-for-eks-to-gke-migrations-with-built-in-governance", "markdown": "https://wpnews.pro/news/an-ai-assisted-plugin-for-eks-to-gke-migrations-with-built-in-governance.md", "text": "https://wpnews.pro/news/an-ai-assisted-plugin-for-eks-to-gke-migrations-with-built-in-governance.txt", "jsonld": "https://wpnews.pro/news/an-ai-assisted-plugin-for-eks-to-gke-migrations-with-built-in-governance.jsonld"}}