Ankra CLI

What is Ankra CLI?

The Ankra CLI is a powerful command-line interface for interacting with the Ankra platform. It enables you to manage clusters, chat with AI about your infrastructure, browse Helm charts, manage credentials, deploy stacks, and automate platform operations directly from your terminal.

Installation

Homebrew (recommended for macOS and Linux)

brew install ankraio/tap/ankra

The formula lives in the ankraio/homebrew-tap tap and is bumped automatically on every stable release. Upgrade later with Homebrew as usual:

brew update && brew upgrade ankra

Install script

For macOS and Linux without Homebrew - and for CI runners - use the universal installer:

bash <(curl -sL https://github.com/ankraio/ankra-cli/releases/latest/download/install.sh)

It detects your OS and architecture, verifies the download against its published SHA-256 checksum, strips the macOS quarantine attribute where needed, and installs to /usr/local/bin/ankra. Pin an exact release by appending --version <tag>. After installing either way, verify with:

ankra --version

Direct Download

Download the binary directly from GitHub Releases.

chmod +x ankra
mv ankra ~/bin/ankra  # or /usr/local/bin/ankra

Upgrading the CLI

If you installed with Homebrew, upgrade through Homebrew:

brew update && brew upgrade ankra

A Homebrew-managed binary refuses ankra upgrade and points you at brew upgrade ankra instead, so the two upgrade paths never fight over the same file. For script and manual installs, the CLI can update itself in place with ankra upgrade (aliased as ankra self-update). The downloaded binary is verified against its published SHA-256 checksum before it replaces the running executable.

# Upgrade to the latest stable release
ankra upgrade

# Check whether a newer release exists without installing
ankra upgrade --check

# Pin an exact version (also works as a downgrade / rollback)
ankra upgrade --version v0.3.0

Flag	Description
`--version <tag>`	Install an exact release (e.g. `v0.3.0` or `0.3.0`); installs whether newer or older, so it doubles as a rollback
`--check`	Report whether a newer release is available without installing
`--beta`	Include pre-release versions for this run (overrides the saved channel)
`--force`	Reinstall even if already on the target version
`-y, --yes`	Skip the confirmation prompt
`--allow-unverified`	Install even when no checksum is published (insecure)

If the binary lives in a root-owned location, run sudo ankra upgrade or re-run the install script.

Beta (pre-release) channel

Opt in to release candidates (such as v0.3.0-rc.1) so ankra upgrade resolves the newest release including pre-releases:

ankra config beta enable    # opt in
ankra config beta status    # show current channel
ankra config beta disable   # back to stable only

The channel preference is stored locally in ~/.ankra/settings.json (separate from your credentials).

Authentication

The easiest way to authenticate is using browser-based SSO:

ankra login

This will:

Open your browser to the Ankra login page
After you authenticate, save your credentials locally
You can then use all ankra CLI commands

Your credentials are saved to ~/.ankra.yaml. To logout and clear credentials:

ankra logout

Environment Variables (Alternative)

You can also use environment variables:

export ANKRA_API_TOKEN=your-token-here
export ANKRA_BASE_URL=https://platform.ankra.app  # optional

Add to your shell profile (~/.zshrc or ~/.bashrc) for persistence.

Quick Start

# 1. Login with SSO
ankra login

# 2. List your clusters
ankra cluster list

# 3. Select a cluster to work with
ankra cluster select

# 4. Start chatting with AI about your infrastructure
ankra chat "What's the status of my deployments?"

Machine-readable output (`-o json|yaml`)

Commands that read or return data support structured output via the shared -o/--output flag, so scripts and AI agents never have to parse tables or prose:

-o json prints the result as indented JSON; -o yaml emits the same data as YAML.
The kubectl-style commands (cluster get ..., cluster describe, cluster events, cluster logs, cluster top ..., cluster helm releases, cluster metrics ...) default to -o table and accept json/yaml as alternatives.

ankra cluster list -o json
ankra cluster operations list -o json
ankra cluster get pods -o json
ankra org list -o json

Write commands (reconcile, provision, deprovision, scaling, node groups, token creation, …) also accept -o json and emit the API result - including operation IDs - so automation can poll ankra cluster operations list <id> -o json for completion. Asynchronous writes submitted without --wait emit {"submitted": true, ...}.

Command Reference

The full command reference - every command, subcommand, flag, and default - is generated from the CLI source on each release, so it never drifts:

CLI Command Reference

Browse all 21 command families: cluster, credentials, tokens, profile, org, chat, agents, application, skills, and more.

Every guide that shows an ankra command carries a CLI vX.Y.Z+ marker above it: the first stable release that shipped the command. Compare it with ankra --version; a marker newer than the latest stable release means a pre-release command, reachable through the beta channel. Highlights:

Task	Command	Since
Apply an ImportCluster manifest	`ankra cluster apply -f cluster.yaml`	v0.1.122
Watch operations	`ankra cluster operations list`	v0.1.122
Read the log a crash-looping container left behind	`ankra cluster logs my-pod -n default --previous`	v0.13.0
Ask one object why it is not ready	`ankra cluster describe pod my-pod -n default`	v0.13.0
See only the events for one object	`ankra cluster events --for pod/my-pod -n default`	v0.13.0
Find what just ate the memory	`ankra cluster top pods -A --sort-by memory`	v0.13.0
Chat with the AI about live cluster state	`ankra chat "why is my pod crashing?"`	v0.1.122
Confirm a write that agent-mode chat proposed	`ankra chat actions confirm <action_id>`	v0.9.0
Inspect what your AI agents are doing	`ankra agents runs`	v0.9.0
Answer the choice a blocked AI board ticket is waiting on	`ankra tickets decide T-8 --option a`	v0.13.0
See which of your vulnerabilities CISA lists as exploited in the wild	`ankra security findings --known-exploited`	v0.14.0 (pre-release)
Read the fleet’s security posture and CISA KEV exposure	`ankra security overview`	v0.14.0 (pre-release)
Read the platform’s advisory for a CVE - the parsed NVD/OSV record, CISA’s guidance, affected versions and your exposure	`ankra security advisory <cve>`	v0.14.0 (pre-release)
Accept the risk of a finding with a reason and a review deadline, after a server-side preview	`ankra security dispositions create --occurrence <id> --disposition accepted_risk --reason "…"`	v0.15.0 (pre-release)
Download the compliance evidence report an auditor asks for	`ankra security compliance export --format csv`	v0.15.0 (pre-release)
Switch a cluster’s pod-security policies from audit to enforce	`ankra security policy-mode enforce --cluster production`	v0.15.0 (pre-release)
Clone a stack between clusters	`ankra cluster stacks clone`	v0.1.124
Move a Docker deployment into a cluster (closed beta)	`ankra migrate up ./app --cluster production`	v0.14.0 (pre-release)
Extend the CLI with plugins	`ankra plugins`	v0.14.0 (pre-release)
Register a backup vault (closed beta)	`ankra backup vaults create`	v0.14.0 (pre-release)
Encrypt a Secret’s keys with SOPS	`ankra cluster encrypt manifest db-secret --key password`	v0.1.123
Provision a Hetzner cluster	`ankra cluster hetzner create`	v0.1.124
Mint a kubeconfig context	`ankra cluster kubeconfig add my-cluster --use`	v0.3.0
Open your account’s 2FA and passkey settings	`ankra profile auth open`	v0.9.0

ankra migrate up is the one that does the most in a single call: it converts a Docker Compose deployment into a stack, applies it to a cluster, and restores the deployment’s PostgreSQL, MySQL and MariaDB data into it. Run it with --plan first to see what it found. See Move a Docker deployment into a cluster. The conversion is done by a module, and docker is only the built-in one: another source format is an executable named ankra-module-<name> that the CLI talks JSON to, installed with ankra migrate modules install <url> or placed on PATH, and Write an ankra migrate module is the contract. The CLI is also extensible beyond migration, kubectl style: an unknown command runs an executable named ankra-<command> from ~/.ankra/plugins or PATH, and ankra plugins lists what is installed.

Agent Skills

The CLI carries Ankra’s curated Agent Skills - SKILL.md files that teach your AI assistant (Claude Code, the Claude app, Cursor, Codex, GitHub Copilot, Windsurf, Gemini CLI and others) to manage Kubernetes the Ankra way. ankra skills install detects the assistants on your machine and installs into all of them. See the Agent Skills guide.

Configuration

The CLI stores configuration in ~/.ankra.yaml:

token: your-api-token
base-url: https://platform.ankra.app
token_id: token-uuid
token_name: ankra-cli-hostname-username

Token resolution priority (highest to lowest):

--token flag (explicit CLI argument)
Config file token (saved by ankra login)
ANKRA_API_TOKEN environment variable

The base URL can be overridden with --base-url or the ANKRA_BASE_URL environment variable.

Troubleshooting

Common Issues

PATH issues:

which ankra  # verify installation location
echo $PATH   # check PATH includes ankra location

Authentication errors:

ankra logout  # clear credentials
ankra login   # re-authenticate

Check version:

ankra --version

Get help:

ankra --help
ankra cluster --help
ankra chat --help

Error Messages

“No active cluster selected” Run ankra cluster select first
“Resource not found” Verify the resource name and selected cluster
“Unauthorized” Re-authenticate with ankra login

Support & Resources

Slack: Join Ankra Community
Email: [email protected]
GitHub: ankraio/ankra-cli

For more advanced usage, see the full documentation or contact support.

Get Started

Concepts

Provision & Import

Operate

Security & Compliance

Deliver

Platform

AI

Kubernetes Resources

Reference

Integrations

What is Ankra CLI?

Installation

Homebrew (recommended for macOS and Linux)

Install script

Direct Download

Upgrading the CLI

Beta (pre-release) channel

Authentication

Environment Variables (Alternative)

Quick Start

Machine-readable output (`-o json|yaml`)

Command Reference

CLI Command Reference

Agent Skills

Configuration

Troubleshooting

Common Issues

Error Messages

Support & Resources

​What is Ankra CLI?

​Installation

​Homebrew (recommended for macOS and Linux)

​Install script

​Direct Download

​Upgrading the CLI

​Beta (pre-release) channel

​Authentication

​SSO Login (Recommended)

​Environment Variables (Alternative)

​Quick Start

​Machine-readable output (-o json|yaml)

​Command Reference

CLI Command Reference

​Agent Skills

​Configuration

​Troubleshooting

​Common Issues

​Error Messages

​Support & Resources

What is Ankra CLI?

Installation

Homebrew (recommended for macOS and Linux)

Install script

Direct Download

Upgrading the CLI

Beta (pre-release) channel

Authentication

SSO Login (Recommended)

Environment Variables (Alternative)

Quick Start

Machine-readable output (`-o json|yaml`)

Command Reference

Agent Skills

Configuration

Troubleshooting

Common Issues

Error Messages

Support & Resources