freshcrate
Home > MCP Servers > ksail

ksail

All-in-one Kubernetes SDK: create, manage, and operate clusters across distributions (Kind, K3d, Talos, VCluster) with built-in GitOps, secrets, AI assistant, and MCP server. Only requires Docker.

Description

All-in-one Kubernetes SDK: create, manage, and operate clusters across distributions (Kind, K3d, Talos, VCluster) with built-in GitOps, secrets, AI assistant, and MCP server. Only requires Docker.

README

License Go Reference codecov CI - KSail

πŸ›₯️🐳 KSail

ksail

KSail is a tool that bundles common Kubernetes tooling into a single binary. It provides a VSCode Extension, CLI, AI-Enabled Chat TUI or MCP interface to create clusters, deploy workloads, and operate cloud-native stacks across different distributions and providers.

Why KSail?

Setting up and operating Kubernetes clusters often requires juggling multiple CLI tools, writing bespoke scripts, and dealing with inconsistent workflows. KSail removes the tooling overhead so you can focus on your workloads.

Key Features

  • πŸ“¦ One Binary β€” Embeds cluster provisioning, GitOps engines, and deployment tooling. No tool sprawl.
  • ☸️ Simple Clusters β€” Spin up Vanilla, K3s, Talos, or VCluster clusters with one command. Same workflow across distributions.
  • πŸ”“ No Lock-In β€” Uses native configs (kind.yaml, k3d.yaml, Talos patches, vcluster.yaml). Run clusters with or without KSail.
  • πŸ“₯ Mirror Registries β€” Avoid rate limits, and store images once. Same mirrors used by different clusters.
  • πŸ“„ Everything as Code β€” Cluster settings, distribution configs, and workloads in version-controlled files.
  • πŸ”„ GitOps Native β€” Built-in Flux or ArgoCD support with bootstrap, push, and reconcile commands.
  • 🏒 Multi-Tenancy β€” Generate RBAC isolation, GitOps sync resources, and scaffold tenant repositories with ksail tenant create and ksail tenant delete.
  • βš™οΈ Customizable Stack β€” Select your CNI, CSI, policy engine, cert-manager, and mirror registries.
  • πŸ” SOPS Built In β€” Encrypt, decrypt, and edit secrets with integrated cipher commands.
  • πŸ’Ύ Backup & Restore β€” Export cluster resources to a compressed archive and restore to any cluster with provenance labels.
  • πŸ€– AI Assistant β€” Interactive chat powered by GitHub Copilot for configuration and troubleshooting.
  • πŸ’» VSCode Extension β€” Manage clusters from VSCode via VS Code Kubernetes extension integration (Cloud Explorer, Cluster Explorer), wizards, and command palette.

Getting Started

Prerequisites

KSail works on all major operating systems and CPU architectures:

OS Architecture
🐧 Linux amd64, arm64
ο£Ώ macOS arm64
⊞ Windows (native untested; WSL2 recommended) amd64, arm64

Supported distributions run on different infrastructure providers:

Provider Vanilla K3s Talos VCluster
Docker βœ… (Kind) βœ… (K3d) βœ… βœ… (Vind)
Hetzner β€” β€” βœ… β€”
Omni β€” β€” βœ… β€”

Installation

See the Installation Guide for detailed installation instructions.

Usage

flowchart TD
    Dev["πŸ§‘β€πŸ’» Developer"]

    Dev -->|"edits"| Project
    Dev -->|"runs"| KSail

    subgraph Project ["πŸ“ Project Repository"]
        Config["ksail.yaml"] ~~~ DistConfig["kind.yaml Β· k3d.yaml<br/>vcluster.yaml"] ~~~ Manifests["k8s/ manifests"]
    end

    KSail -->|"scaffolds & reads"| Project
    KSail -->|"provisions & operates"| Cluster

    subgraph KSail ["πŸ›₯️ KSail β€” One Binary"]
        CLI["CLI Commands"] ~~~ Tools["Kind Β· K3d Β· Talos Β· vCluster<br/>Flux Β· ArgoCD Β· SOPS<br/>Helm Β· Kustomize"]
    end

    subgraph Cluster ["☸️ Kubernetes Cluster"]
        Infra["CNI Β· CSI Β· Metrics<br/>Cert-Manager Β· Policy Engine"] ~~~ Workloads["Your Workloads βœ…"]
    end

    Manifests -.->|"GitOps sync"| Workloads

    style Dev fill:#f59e0b,stroke:#d97706,color:#000
    style Project fill:#7c3aed22,stroke:#7c3aed
    style KSail fill:#10b98122,stroke:#10b981
    style Cluster fill:#3b82f622,stroke:#3b82f6
    style CLI fill:#10b981,stroke:#059669,color:#000
    style Tools fill:#065f46,stroke:#10b981,color:#fff
    style Infra fill:#1e40af,stroke:#3b82f6,color:#fff
    style Workloads fill:#166534,stroke:#22c55e,color:#fff
    style Config fill:#5b21b6,stroke:#7c3aed,color:#fff
    style DistConfig fill:#5b21b6,stroke:#7c3aed,color:#fff
    style Manifests fill:#5b21b6,stroke:#7c3aed,color:#fff
Loading
# 1. Initialize a new project with your preferred stack
ksail cluster init \
  --name <cluster-name> \
  --distribution <Vanilla|K3s|Talos|VCluster> \
  --cni <Default|Cilium|Calico> \
  --csi <Default|Enabled|Disabled> \
  --metrics-server <Default|Enabled|Disabled> \
  --cert-manager <Enabled|Disabled> \
  --policy-engine <None|Kyverno|Gatekeeper> \
  --gitops-engine <None|Flux|ArgoCD> \
  --mirror-registry <host>=<upstream>

# 2. Create and start the cluster
ksail cluster create

# 3. Add your manifests to the k8s/ directory

# 4. Deploy your workloads
ksail workload apply -k ./k8s   # kubectl workflow
ksail workload reconcile        # gitops workflow

# 5. Update cluster configuration (modify ksail.yaml, then run)
ksail cluster update            # Apply configuration changes

# 6. Connect to the cluster with K9s
ksail cluster connect

Native Configuration Files

KSail generates standard distribution configuration files that you can use directly with the underlying tools:

# After ksail cluster init, you'll find native configs:
# - kind.yaml       (for Vanilla/Kind clusters)
# - k3d.yaml        (for K3s clusters)
# - talos/          (for Talos clusters)
# - vcluster.yaml   (for VCluster clusters)

# You can use these configs directly without KSail:
kind create cluster --config kind.yaml
k3d cluster create --config k3d.yaml
talosctl cluster create --config-patch @talos/cluster/patches.yaml
vcluster create my-cluster --values vcluster.yaml

# Or let KSail manage the lifecycle:
ksail cluster create

Documentation

Browse the documentation at https://ksail.devantler.tech (GitHub Pages)

Contributing

Contributions are welcome! Please read CONTRIBUTING.md for details on our development process, coding standards, and how to submit pull requests.

Related Projects

KSail is a powerful tool that can be used in many different ways. Here are some projects that use KSail in their setup:

Project Description Type
devantler-tech/platform My personal homelab Platform

If you use KSail in your project, feel free to open a PR to add it to the list, so others can see how you use KSail.

Presentations

Blog Posts

Star History

Star History Chart

Release History

VersionChangesUrgencyDate
v6.16.6## Changelog ### Bug Fixes * d4597a8b7fd826b6c41dc8134a926ba876dc8100 fix(talos): retry transient Hetzner apply-config gRPC handshake failures (#4129) ### Refactoring * 762560aa69d93f6241dda846761012309de1f92c refactor(update-skills): use reusable workflow for copilot skills updates (#4141) ## Quick Start **Homebrew Cask** (macOS): ```bash # Standard installation: brew install --cask devantler-tech/tap/ksail # If you encounter macOS quarantine issues: brew install --cask --no-quarantine devaHigh4/18/2026
v6.13.2## Changelog ### Bug Fixes * 87f31649c1d926a1d9649fcb16651c24f03aef7f fix(ci): prevent cloud test cleanup race on turnstyle timeout (#4056) ### Refactoring * 8b730388a6587f3e304f5c9dffb3675ecb4e16b2 [Repo Assist] refactor(setup): extract callEnsureOCIArtifact helper to remove nil-guard duplication (#4033) ### Other Changes * bd7116e8083cf5d59c7de02c5357e122d9e72de1 chore(deps): Bump actions/upload-pages-artifact from 4.0.0 to 5.0.0 (#4047) * ed656cbd5fc105553c40f5e0738fbfb667d52ccf chore(deps): High4/15/2026
v6.10.0## Changelog ### Features * a042bf9398d0b5ccddd2410da02c93f61c6114a7 feat(chat): adopt copilot-sdk v0.2.1 slash commands, elicitation, and command picker (#4012) ### Other Changes * cbdc5fb11727d882154ab03e4871b2663e7b5eaa [docs] docs(ai-chat): add COPILOT_GITHUB_TOKEN to filtered env vars note (#4009) * 920dbfd14564beab5dc8eab22567cc49b2e49213 chore(deps): Bump @astrojs/starlight from 0.38.2 to 0.38.3 in /docs (#4014) * b93e145c2da1b1edbe80a6ce5b82475f6102fb64 chore(deps): Bump starlight-links-High4/14/2026
v6.9.7## Changelog ### Bug Fixes * 140d5bd9759656fd286a98952724399ed8a1024b fix(ci): add contents:read permission to todos workflow (#4000) ### Other Changes * 346f24f1cd3558bf615909b0a9ec5ffb2df1bf59 Update workflows - 2026-04-12 (#3980) * 2f5a339bd560b33a0fb58eab8dc112ce3ea432ba [docs] docs: reduce bloat in ai-chat.mdx (#3975) * 3ad84844c28e9d4893d273f1af6c669a50ec89ed chore: pin actions to v2.1.0 SHA (#3979) * 52556dbb589c867d387148c347e374ed680e0430 chore: pin reusable-workflows to v2.2.0 SHA (#39High4/13/2026
v6.7.1## Changelog ### Bug Fixes * e480c1025dc45688b3574b293e7f4113faa4e4fa fix(gitops): use workload.tag for Flux and ArgoCD OCI artifact tag (#3930) ### Other Changes * 73d60a466f6a8382b981c19a6584b4fa583dd92c [docs] docs(development): reduce bloat in testing patterns section (#3921) * cd6c8dc1d68bc32d51e169252cc4173a38de396a [docs] document --update-kubernetes and --update-distribution flags for cluster update (#3926) * 190ebd825dfc1856e55c8a5723d4da276f968e97 docs: remove bloat from architecture.mHigh4/11/2026
v5.98.0## Changelog ### Features * 33375181e2dc36d56ba74aa1bf79d8c3b498ee0f feat(tenant): wire ArgoCD RBAC CM merge/remove into --register flow (#3814) ## Quick Start **Homebrew Cask** (macOS): ```bash # Standard installation: brew install --cask devantler-tech/tap/ksail # If you encounter macOS quarantine issues: brew install --cask --no-quarantine devantler-tech/tap/ksail ``` **Go Install**: ```bash go install github.com/devantler-tech/ksail/v5@v5.98.0 ``` **Download Binary**: Choose your platHigh4/9/2026

Dependencies & License Audit

Loading dependencies...

Similar Packages

shellguardπŸ›‘οΈ Enable secure, read-only SSH access for LLM agents to audit servers, run diagnostics, and inspect logs without risking data changes.main@2026-04-21
mcp-tidy🧹 Simplify your MCP servers with mcp-tidy, clearing server bloat to enhance performance and improve tool selection in Claude Code.main@2026-04-21
devkitA deterministic development harness for Claude Code β€” MCP workflow engine, enforcement hooks, YAML workflows, and multi-agent consensus (Claude + Codex + Gemini)v2.1.29
octocodeSemantic code searcher and codebase utility0.14.0
nmap-mcpπŸ” Enable AI-driven network security scanning with a production-ready Nmap MCP server supporting diverse tools, scan types, and timing templates.main@2026-04-21