CLI Command Reference
Statically compiled in Go using Cobra, the kubeletto CLI manages your platform interactions.
Authenticates terminal sessions. Starts browser OAuth codes flow, or links directly using console generated API key credentials.
$ kubeletto login --token kl_abc123def...
Triggers application deployment. Supports container image references from any OCI registry, or remote Git repository builds. Use --port if your image doesn't listen on 8080.
$ kubeletto deploy my-api --image nginx:alpine --port 80 -w
Streams runtime and build logs. Supports filtering by service, deployment, or build ID with live follow mode.
$ kubeletto logs my-api --tail 50 --follow
Manages environment values. Contains subcommands: list, set, and delete.
$ kubeletto env set my-api DB_URL=postgres://...
Lists deployment revisions and reverts traffic to a previous revision. Use --list to inspect history.
$ kubeletto rollback my-api --list
Prints the authenticated user and tenant resolved from the current credential. Useful in scripts and CI to confirm which account is active.
$ kubeletto whoami
Manages API keys for programmatic access. Create scoped keys for CI/CD pipelines, list active keys, or revoke compromised credentials.
$ kubeletto keys create ci-deploy --scopes deploy-only
Displays the current status of all applications or a specific deployment. Use --deploy with --watch to poll until a terminal state.
$ kubeletto status my-api
Lists all applications (projects) in your account. Use the alias ls for shorter output.
$ kubeletto apps list
Manages CLI configuration profiles for different environments. Supports set, get, list, use, and delete.
$ kubeletto config set --token kl_abc... --profile prod
Generates shell completion scripts for Bash, Zsh, Fish, and PowerShell. Enables tab-completion of commands and flags.
$ source <(kubeletto completion bash)
Local TLS Bypass Flag
If executing commands within isolated testing environments utilizing self-signed local CAs, prefix operations with the environment variable KUBELETTO_INSECURE=true to skip TLS handshake validation checks.