Deploy

Deploy component versions to Kubernetes with the OCM Controllers — credentials, RBAC, discovery, deployers, and signature verification.

Deploy guides take an OCM component version into a running Kubernetes cluster with the OCM Controllers. They cover configuring controller credentials and RBAC, discovering component graphs, deploying manifests and Helm charts (directly, with kro, or through a GitOps deployer), and verifying component signatures before reconciliation.

New to deploying with the OCM Controllers? Start with Deploy Kubernetes Manifests with the OCM Deployer for the shortest path from a component version to a running workload, then layer on credentials, RBAC, discovery, and signature verification as your setup needs them.

Configure Controller Credentials

Configure authentication for OCM Controllers to access private OCM repositories.

Configure Custom RBAC

How to grant the OCM Kubernetes Controller Toolkit additional RBAC permissions required by your deployer targets (e.g. kro ResourceGraphDefinitions).

Discover Component Graphs

Publish a filtered, projected view of a Component's transitive reference graph with the Discovery controller using CEL selectors and extraction.

Deploy with Chained kro RGDs

Package an OCM component with two chained kro ResourceGraphDefinitions and deploy it as plain manifests, no Helm chart or GitOps deployer needed.

Deploy a Helm Chart with kro and GitOps

Bootstrap a Helm chart deployment with OCM and kro, delivered through a GitOps deployer (Flux or Argo CD), for repeatable installs.

Deploy a Helm Chart with Crossplane and GitOps

Bootstrap a Helm chart deployment with OCM and Crossplane, composing GitOps deployer objects (Flux or Argo CD) directly from an XRD and Composition for repeatable localized installs.