BlanketOps Environments CLI is a self-contained Kubernetes platform bootstrapper.
A single binary installs a complete cloud-native delivery stack directly into a cluster using the Kubernetes API — no kubectl required.
The binary embeds all manifests and bootstrap scripts, making it ideal for minimal systems, immutable appliances, and automated cluster provisioning.
Grab the latest signed release from the Releases page:
# Linux amd64
curl -LO https://github.com/blanketops/environments-cli/releases/latest/download/bops-env-static
chmod +x bops-env-static
sudo mv bops-env-static /usr/local/bin/bops-env
# Linux arm64
curl -LO https://github.com/blanketops/environments-cli/releases/latest/download/bops-env-static-arm64
chmod +x bops-env-static-arm64
sudo mv bops-env-static-arm64 /usr/local/bin/bops-envSee Provenance, Signing & Security below to verify the download before running it.
git clone https://github.com/blanketops/environments-cli.git
cd environments-cli
mage install # builds and installs to ~/.local/bin (falls back to ~/bin if noexec)Either way, once bops-env is on your PATH, bops-env self install re-fetches and replaces the CLI binary itself, kept separate from bops-env install, which only ever manages the operator on your cluster. Run bops-env version any time to check which build is currently installed.
We take supply chain security seriously. Every release is signed and attested to ensure artifact integrity from build to deployment.
- Signed: Binaries are signed using
cosign(keyless mode). - Attested: Every build generates a formal SLSA-compliant provenance attestation.
Verification:
Run these against the file as downloaded, before you chmod/mv it (substitute bops-env-static-arm64 for the arm64 asset, or bin/bops-env-static if you built locally with mage static):
# Verify the signature (fetch the matching .sig asset first)
curl -LO https://github.com/blanketops/environments-cli/releases/latest/download/bops-env-static.sig
cosign verify-blob --certificate-identity-regexp ".*" --signature bops-env-static.sig bops-env-static
# Verify the attestation via GitHub CLI
gh attest verify bops-env-static --owner blanketopsbops-env install installs the BlanketOps Environments operator — the CRDs, RBAC, and controller-manager Deployment that reconcile the platform's custom resources.
That bundle isn't built here: it's published by blanketops/environments-install, an install-only repo that owns CRDs, RBAC, and manager manifests as kustomize overlays. Its make build-installer target renders config/default into a single dist/install.yaml, published as the install.yaml asset on every tagged release. bops-env install/uninstall apply/delete that same asset from https://github.com/blanketops/environments-install/releases/latest/download/install.yaml.
The installer deploys a full platform stack:
| Component | Role |
|---|---|
| Carvel Kapp Controller | Packaging and lifecycle management |
| Argo Events | Event-driven pipelines |
| Tekton Pipelines | CI/CD execution engine |
| Tekton Dashboard | Pipeline UI |
| Shipwright Build | Kubernetes-native image builds |
| Crossplane | Infrastructure orchestration |
| External Secrets Operator | Secure secret integration |
| Knative Serving | Serverless workload runtime |
| Kourier | Knative's ingress/networking layer |
Built for environments where traditional tooling is unavailable:
- Air-gapped clusters
- Bare metal / Edge nodes
- Immutable appliances / Gokrazy
- Ephemeral CI environments
The client-go dynamic engine ensures deterministic installation order:
flowchart TD
CLI[BlanketOps Environments CLI] --> Engine[Go Apply Engine]
Engine --> Client[client-go Dynamic Client]
Engine --> Mapper[Discovery REST Mapper]
Mapper --> API[Kubernetes API Server]
Engine --> CRDs[CRD Install + Wait]
Engine --> Resources[Resource Apply]
Resources --> Platform[Platform Stack]
All manifests and scripts are compiled into the binary via go:embed. Zero filesystem dependencies at runtime.
dependencies/ # Embedded YAML manifests
scripts/ # Shell-based configuration logic
# Print the installed CLI's build version
bops-env version
# Install the BlanketOps Environments operator
bops-env install
# Uninstall the operator
bops-env uninstall
# Update the bops-env CLI binary itself
bops-env self install
bops-env self uninstall
# Install the platform stack (dependency manifests)
bops-env dependencies install
# Manage a single dependency instead of the whole stack
bops-env dependencies list
bops-env dependencies install <name>
bops-env dependencies status [name]
bops-env dependencies uninstall <name># Cluster management
bops-env cluster up [name]
bops-env cluster down [name]
bops-env cluster status [name]For ultra-minimal systems, build a fully static binary:
mage static
# Add to gokrazy
gok add ./bin/bops-env-static
gok build# Create a test cluster
kind create cluster
# Install the operator, then the platform stack
bops-env install
bops-env dependencies install
# Verify components
kubectl get pods -Aflowchart TD
Start[bops-env dependencies install] --> Carvel
Carvel --> ArgoEvents
ArgoEvents --> Tekton
Tekton --> Dashboard
Dashboard --> Shipwright
Shipwright --> Crossplane
Crossplane --> ExternalSecrets
ExternalSecrets --> Knative
Knative --> Kourier
Kourier --> Done[Platform Ready]
The project is evolving toward a fully self-hosted platform bootstrap system for Kubernetes environments. Pull requests and improvements are welcome!
Built with ❤️ for the Kubernetes community.