Skip to main content

ankra application

Connect application source repositories to Ankra for analysis, packaging, and deployment.

ankra application add

Add an application by reading a local Git checkout. The command detects the GitHub repository from the selected remote, uses the remote’s default branch when available, and falls back to the current branch. It selects an available GitHub credential automatically when the choice is unambiguous. Pass —registry-url to have the application publish to a container image registry you already operate instead of the organisation’s own Ankra registry project. Declare it here rather than afterwards: the setup job generates the build workflow from the declaration the application is created with, so a registry added later leaves a workflow that logs in with the wrong one.
Examples
Flags

ankra application ai-config

Read, set, or reset which AI lanes run on this application’s repository (pull request review, demo URL, and the rest), on which model, and within what limits. An application follows the organisation’s defaults until an override is set here.

ankra application ai-config clear

Reset the application to the organisation’s AI defaults
Flags

ankra application ai-config get

Show the application’s effective AI lane configuration
Flags

ankra application ai-config set

Replace the application’s AI lane configuration with a JSON document. Start from the current one: ‘ankra application ai-config get <id> -o json’, edit it, and pass the file back with —file (or ’-’ to read stdin).
Examples
Flags

ankra application auto-deploy

Inspect and set whether pushes to the tracked branch deploy themselves. With auto-deploy on, a build Ankra observes on the application’s tracked branch is rolled out to its deployments unattended. With it off, a push still builds - it just waits for an explicit ‘ankra application deploy’.

ankra application auto-deploy get

Show whether auto-deploy is on, and the newest build seen on the tracked branch. The newest observed build comes back with the switch so you can tell an auto-deploy that is off from one that is on but has had nothing to pick up.
Examples
Flags

ankra application auto-deploy set

Turn auto-deploy on or off. —enabled is required and must be given explicitly: turning unattended deployment on and turning it off are both deliberate acts, and neither is a safe default to infer from a bare ‘set’.
Examples
Flags

ankra application branch-files

List the tracked files on the setup branch
Flags

ankra application branches

List the application repository branches
Flags

ankra application build

Build an application’s image on Ankra’s builders. Ankra clones the commit, resolves a recipe for it (the repository’s own Dockerfile, else a generated one, else buildpacks), builds it, and pushes the image to the registry the application publishes to - without the repository’s CI running at all. The routes answer 404 for organisations without the platform_builds feature flag, which is off by default while the lane rolls out. Ask Ankra support to enable it for your organisation.

ankra application build get

Show one platform build. A failed build carries an error_class saying whose failure it was. build_failed is the repository’s - the recipe did not build - and is the one worth reading the error_message for. clone_auth and recipe_missing are the application’s configuration. push_failed, timeout and capacity are Ankra’s, and are already visible to Ankra without anyone reporting them.
Examples
Flags

ankra application build list

List the application’s platform builds, newest first
Examples
Flags

ankra application build request

Show a queued build request and the build it became. ‘start’ answers with a request id before there is a build to read: the build row is created when the scheduler claims the request. This is how a caller follows the gap - status is pending until it is claimed, and build_id names the build from that point on.
Examples
Flags

ankra application build start

Queue a build of the application’s image. —commit is required and must be a full 40- or 64-character commit sha. An abbreviation is refused rather than resolved: the queue deduplicates on the string it is given, so a full sha and its own prefix would be two keys for one commit and build it twice. The queue converges on the commit while a request is live. Asking twice joins one build, and the answer’s already_requested reports that it did. With —wait the command follows the request through to the finished build and exits non-zero if the build failed, so a pipeline step can be exactly “build this commit, and fail if it does not build”.
Examples
Flags

ankra application chart-versions

List an application’s published chart versions
Flags

ankra application code-security

Show source code security findings
Flags

ankra application container-security

Show container image vulnerability findings
Flags

ankra application credential

Inspect and re-bind the GitHub credential an application’s repository calls ride on. An application is bound to one GitHub credential of the organisation; its App installation must reach the repository for builds, deploys and Actions secrets to work. Move an application onto another credential when its installation lost - or never had - access to the repository.

ankra application credential get

Show the GitHub credential an application is bound to
Examples
Flags

ankra application credential set

Re-bind an application to another GitHub credential of the organisation. The credential must exist. Whether its App installation reaches the repository is reported in the answer (resolved / message) rather than refused, since a re-bind is usually how an application gets off an installation that cannot.
Examples
Flags

ankra application delete

Delete an application
Flags

ankra application demo

Deploy, inspect, and stop short-lived demo workspaces for a branch or pull request of an application.

ankra application demo build

Check whether a branch has a demo-ready container image
Flags

ankra application demo config

Read or update the application’s saved demo defaults

ankra application demo config get

Show the saved demo defaults (env, database, migration command, extensions)
Flags

ankra application demo config set

Update the application’s saved demo defaults. The command fetches the current configuration first and applies only the flags you set: —env entries override by name, everything else is carried forward.
Examples
Flags

ankra application demo deploy

Deploy a short-lived demo workspace for a branch or pull request. All flags are optional; only the flags you set are sent, so the backend applies its own defaults for the rest. A monorepo demo runs every recorded component as its own pod by default. —component narrows that to the components you name, and the per-component override flags (—component-tag, —component-port, —component-path) tune one component each. Because selection and overrides ride the same request field, an override may only name a component that —component selects: to tune one component of a full launch, list them all.
Examples
Flags

ankra application demo detail

Show a demo workspace’s record, its components, provisioning steps, and failure detail. The default rendering summarises the demo; -o json or -o yaml emit the full payload, including the resource inventory and the Kubernetes events behind a stalled step.
Flags

ankra application demo fix

Dispatch the AI pre-setup mission for a failed demo
Flags

ankra application demo fix-build

Fix a branch that has no demo-ready container image. This is what to run when ‘demo build’ reports that no image exists for a branch. Ankra applies its own deterministic fixes first (publish-readiness auto-fix, failed-run rerun, failed-setup retry) and, when those cannot produce an image, dispatches a one-shot mission agent that investigates the repository and opens a pull request with the fix. The answer points at the dispatched mission rather than carrying its result, so follow the agent run it names.
Examples
Flags

ankra application demo list

List the application’s active demo workspaces, one row each, with the components every demo runs. -o json or -o yaml emit the full payload, including the TTL policy and the staging cluster’s status.
Flags

ankra application demo logs

Fetch a bounded tail of the demo container’s logs. One-shot: the command returns after the fetch instead of following the stream. A multi-component demo runs one pod per component, and without a selector the backend reads whichever pod it finds first. —component picks the pod belonging to that component; —pod addresses one by name (from ankra application demo detail) when a component has more than one.
Examples
Flags

ankra application demo stop

Stop and tear down a demo workspace
Flags

ankra application deploy

Deploy a packaged application to a target cluster. The cluster is identified by ID. Use —set key=value (repeatable) to pass deploy inputs declared by the application’s chart.
Examples
Flags

ankra application deployments

List an application’s cluster deployments
Flags

ankra application env-secrets

Manage the environment secrets an application’s manifests read. The keys come from the application’s generated manifests. Setting a value stores it; it is sealed into a running deployment only when you apply it, so a set followed by no apply changes nothing about the workload. Values never travel outbound: ‘list’ reports which keys exist and whether each has a value, never the value itself.

ankra application env-secrets apply

Seal the stored environment secrets into the running deployments. Re-seals the values Ankra already holds into every deployment of the application and rolls the workloads that read them. It sends nothing: the values applied are the ones already stored. The endpoint answers 409 when the request does not apply to this application’s state - nothing set, not deployed yet, tearing down, or a deployment that cannot be sealed - and the reason is reported as the error message.
Examples
Flags

ankra application env-secrets delete

Clear the stored value of one environment secret. The key stays declared by the application’s manifests; only the value Ankra holds for it is removed. Deployments already running keep the value that was sealed into them until the next apply.
Examples
Flags

ankra application env-secrets list

List the environment secret keys an application needs, and their state. Reports the keys the application’s generated manifests declare and whether each one has a stored value. The values themselves are never returned.
Examples
Flags

ankra application env-secrets set

Store the value of one environment secret. Pass the value with —value, pipe it on stdin, or omit both to be prompted for it without echo. Prefer stdin or the prompt: a —value on the command line is recorded in your shell history and, on a shared host, in the process table. Storing a value does not reach a running workload. Run ‘env-secrets apply’ to seal the stored values into the application’s deployments and roll them.
Examples
Flags

ankra application files

Commit changes to the application’s setup pull request. Each —file maps a repository path to a local file whose contents are uploaded. Use —delete to remove a tracked path.
Examples
Flags

ankra application get

Show an application’s detail
Flags

ankra application installations

List an application’s installation intents
Flags

ankra application jobs

List an application’s platform jobs
Flags

ankra application list

List applications
Flags

ankra application manifest-addon

Inspect, install and withdraw add-ons published from an application’s manifests. Publish one with ‘ankra application publish-addon <application-id>’ and find its id with ‘ankra application published-addon <application-id>’. These commands take that add-on id, not an application id.

ankra application manifest-addon delete

Delete a manifest add-on and undeploy every installation of it. This is the most consequential of the three and the least reversible: it does not only withdraw the catalog entry, it undeploys the workloads installed from it on every cluster. Use ‘unpublish’ to withdraw the entry and leave those running.
Examples
Flags

ankra application manifest-addon diff

Compare two published versions of a manifest add-on. —to names the version to compare; —from names what to compare it against, defaulting to the version published before it. —path narrows the comparison to the named manifests and may be repeated.
Examples
Flags

ankra application manifest-addon get

Show a published manifest add-on: its catalog entry, published versions, and what it declares.
Examples
Flags

ankra application manifest-addon install

Install a published manifest add-on onto a cluster. —cluster-id is required. —namespace and —version default from the add-on’s own descriptor. —input answers an input the published manifests declare and may be repeated as —input key=value.
Examples
Flags

ankra application manifest-addon unpublish

Withdraw a manifest add-on from the catalog, leaving installations running. Nobody can install it again afterwards. What is already installed from it keeps running - use ‘delete’ if you want those undeployed too.
Examples
Flags

ankra application platform

Detect platform operators already present on a target cluster
Flags

ankra application publish-addon

Publish the application’s generated manifests to the organisation catalogue as a manifest add-on. Publishing again with a new —version adds a version; other clusters install the add-on from the catalogue.
Examples
Flags

ankra application publish-readiness

Report whether the repository can publish to the private Ankra registry
Flags

ankra application published-addon

Show the add-on this application published to the catalogue
Flags

ankra application pull-request-reviews

Show the AI reviews of the application’s pull requests
Flags

ankra application reconcile

Request an application refresh
Flags

ankra application registry

Inspect and set the container image registry an application publishes to. An application with no declaration publishes into the organisation’s own Ankra registry project. Declare a registry you already operate to have Ankra read image tags, verify builds, and pull demo images from there instead.

ankra application registry clear

Return an application to the organisation’s own Ankra registry. Clears the declaration, so the application publishes into - and is read back from - the organisation’s provisioned registry project again.
Examples
Flags

ankra application registry get

Show the image registry an application publishes to. Reports the stored declaration, whether it is one at all, the host and project it resolves to, and the image repository each component is expected to publish to - so you can compare them against where your builds actually push.
Examples
Flags

ankra application registry robot

Manage the registry robot account minted for an application. Ankra mints one push robot per application on the registry it publishes to, stores it as a managed registry credential, and writes it into the repository’s Actions secrets as the login the build workflow uses. On the organisation’s own Ankra registry that happens automatically; on a registry you operate it needs the declaration to name a credential with project administrator rights (ankra application registry set —admin-credential).

ankra application registry robot ensure

Mint the application’s registry robot if it has none, and store its login in the repository’s Actions secrets. An application that already has a robot keeps it; only its login is re-written into the repository. A registry Ankra may not administer answers with provisioned false and a message naming what would let it.
Examples
Flags

ankra application registry robot get

Show the registry robot account minted for an application. Reports whether a robot backs the application’s registry login, its name, the registry it lives on, when it was created and last rotated - and when none does, why, and what would let Ankra mint one. Never contacts the registry.
Examples
Flags

ankra application registry robot revoke

Delete the application’s registry robot from the registry and drop the credential holding its login. The repository’s Actions secrets are left holding a login that no longer works, which is the point of a revoke; run ‘ensure’ afterwards to mint a fresh robot and store it. Prefer ‘rotate’ when the application should keep working.
Examples
Flags

ankra application registry robot rotate

Rotate the application’s registry robot secret and store the new login in the repository’s Actions secrets. The previous secret stops working the moment the registry answers, which makes this the response to a leaked repository secret. A build that starts before the new login is stored fails at the registry login; re-run it afterwards. An application with no robot yet gets one minted.
Examples
Flags

ankra application registry set

Point an application at a container image registry you operate. —url is the registry project, as oci://<host>/<project> (the scheme is optional). —credential names an existing registry credential of this organisation; without one Ankra can describe where the images live but cannot read or pull them, so builds keep reporting as never published. Ankra never mints robots for a registry it was not handed the keys to. Name a credential with project administrator rights as —admin-credential to have Ankra mint, rotate and revoke a push robot for the application there and store it in the repository’s Actions secrets; without one it leaves the secrets to you unless you ask it to write the declared credential with —manage-actions-secrets.
Examples
Flags

ankra application rerun-workflow

Re-trigger a failed workflow run
Flags

ankra application retry

Re-trigger a failed application’s setup
Flags

ankra application settings

Inspect and set the organisation’s application CI settings. These apply to every application in the organisation, not to one of them. The CI runner label decides which GitHub Actions runner the pipelines Ankra generates request - change it when GitHub-hosted runners are unavailable to you and your builds run on self-hosted ones.

ankra application settings get

Show the organisation’s application CI settings. Readable by any member: a member who cannot explain why a build never started is the reason this setting exists.
Examples
Flags

ankra application settings set

Set or clear the GitHub Actions runner label generated pipelines run on. Pass —ci-runner-label to choose the label, or —clear to drop the organisation’s choice and put every future generation back on the default. Existing pipelines are not rewritten by either. Only organisation admins may change this.
Examples
Flags

ankra application upgrade-workflow

Add security scanning steps to the build workflow
Flags

ankra application workflow-run-jobs

List the jobs of a workflow run
Flags

ankra application workflow-runs

List the application’s GitHub Actions workflow runs
Flags