werf

CLI for full-cycle CI/CD to Kubernetes: image builds, Helm-based deploys and container registry cleanup

CLIHigh risk

werf/werf

Install

Install werf following https://werf.io/getting_started/ and use https://werf.io/docs/ when configuring builds and deploys. Show me the planned changes before deploying to a cluster.

This is third-party code. Review the repository files before installing.

What it does

werf builds and publishes container images, deploys applications to Kubernetes, distributes release artifacts and cleans up the container registry. Configuration uses familiar Dockerfiles and Helm charts, while werf adds build caching, content-based tagging and resource tracking during deploys. It plugs into any CI system and relies on Git, Buildah and Helm.

Who it is for. DevOps engineers and developers building application delivery to Kubernetes.

Good fit when

  • You want one tool for building and deploying to Kubernetes
  • You need build caching and content-based image tags
  • The registry keeps growing and needs regular cleanup of old images
  • An agent has to prepare CI/CD config for a project with a Dockerfile and a Helm chart

Not a fit when

  • The application is not deployed to Kubernetes
  • You only deploy existing charts without builds: Nelm or Helm is simpler

Example request

Prepare werf.yaml and GitLab CI steps to build our Dockerfile and deploy the Helm chart to staging

Limitations

Built around Kubernetes and the Git, Dockerfile and Helm stack. Detailed installation and setup live on werf.io, not in the README.

How to disable. Remove the werf binary or drop the werf steps from your CI configuration.

Security check

  • Deploys to Kubernetes and deletes images from the registry
  • Requires cluster and registry credentials

README in short

werf is a CNCF Sandbox CLI for full-cycle CI/CD to Kubernetes. It manages the application lifecycle from image builds to registry cleanup. It builds on Git, Dockerfile, Helm and Buildah, with build caching and enhanced resource tracking. Documentation and guides for Node.js, Spring Boot, Django, Rails and Laravel are published on werf.io.

FAQ

Is there a Russian-speaking community?

Yes, besides the werf_io chat the README lists the Russian-speaking Telegram chat werf_ru.

Is werf production-ready?

According to the README, werf has been used in production since 2017 and is a CNCF Sandbox project.

Kubernetes MCP

MCP Server Kubernetes

Editors’ pick

MCP server for managing a Kubernetes cluster through kubectl and Helm, with a non-destructive mode

MCP serverHigh risk1.6K
Editors’ pick

HashiCorp's official MCP server for the Terraform Registry and HCP Terraform: providers, modules, policies and workspaces

MCP serverHigh risk1.5K

Terraform Skill

Terraform & OpenTofu Skill for AI Agents

A Terraform and OpenTofu best-practices skill: tests, modules, state, CI/CD and security scanning for AWS, Azure and GCP

SkillLow risk2.3K

A Helm alternative for deploying charts to Kubernetes with release plans, resource tracking and encrypted secrets

CLIHigh risk1.1K