Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -174,7 +174,7 @@ The KubeRocketCI portal ships a dedicated `tekton` module with full pipeline man

**DAG visualization.** The pipeline details page renders the task graph using React Flow - nodes for each task, directed edges from `runAfter` dependencies, isolated tasks shown separately. Colors map to live status: blue (running), green (succeeded), red (failed), amber (pending). Finally-tasks are distinguished visually from the main execution chain.

![KubeRocketCI portal DAG view of a review pipeline - tasks for sonar, helm-lint, dockerfile-lint, and GitHub status reporting](./dag-pipeline-visualization.png)
![KubeRocketCI portal DAG view of a review pipeline - tasks for sonar, helm-lint, dockerfile-lint, and GitHub status reporting](../assets/dag-pipeline-visualization.png)

**Live logs and history.** The PipelineRun details page streams live container logs while a run is active. After completion, logs are served from Tekton Results - the same view, no separate log aggregation setup needed.

Expand Down Expand Up @@ -221,7 +221,7 @@ Once the platform is running, every onboarded application has:

This is what our own dogfooding instance looks like - we run KubeRocketCI on KubeRocketCI itself. Over 90 days, the `krci` namespace logged **18,397 pipeline runs** (~200/day across build, review, and deploy types), with build pipelines hitting a **93% success rate** at an average duration of **14 minutes 38 seconds**. No external CI server involved.

![KubeRocketCI Pipeline Metrics: 18,397 runs over 90 days, 74% success rate, 93% build success rate, 14m 38s average duration](./pipeline-metrics.png)
![KubeRocketCI Pipeline Metrics: 18,397 runs over 90 days, 74% success rate, 93% build success rate, 14m 38s average duration](../assets/pipeline-metrics.png)

The entire path - review pipeline on PR open, build pipeline on merge, artifact versioning, image push, and Argo CD sync - runs without the developer writing a single line of Jenkins Groovy or pipeline YAML. The only required input is declaring the tech stack at onboarding time.

Expand Down
10 changes: 5 additions & 5 deletions blog/2026-05-05/krci-cli-daily-use.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
---
title: "krci CLI: Daily Platform Ops from Terminal to AI Agents"
title: "krci CLI: From Terminal to AI Agents"
description: "How I use the krci CLI as a tool surface for Claude Code and other AI assistants to answer day-to-day platform questions in plain language."
slug: krci-cli-daily-use
tags: [KubeRocketCI, CLI, AI Agents, DevOps, SCA, Claude Code, Platform Engineering, Dependency-Track]
Expand All @@ -24,7 +24,7 @@ KubeRocketCI is built so the platform's primitives are reachable from every runt
- **Pipelines.** A `krci` invocation that answers a question in my terminal runs unchanged inside a Tekton task or a GitLab CI job. Quality gates and release governance read live platform state without bespoke API clients.
- **Schedulers.** A short bash wrapper in cron, or a Kubernetes CronJob produces a daily report on a hands-off cadence - same command, same output, same trust boundary.
- **Chat and webhooks.** JSON output drops straight into Slack, Teams, or PagerDuty without a translation layer.
- **AI agents in the SDLC.** AI coding agents - [Claude Code](https://docs.claude.com/claude-code), Cursor, the Anthropic and OpenAI SDKs - read terminal output natively. Giving an agent shell access to `krci` turns the platform into a tool surface it can call: list codebases, inspect SBOMs, compare branches, summarize changes since the previous run. No MCP server to write, no proprietary protocol to learn, no stale API client to maintain.
- **AI agents in the SDLC.** AI coding agents - [Claude Code](https://code.claude.com/docs), Cursor, the Anthropic and OpenAI SDKs - read terminal output natively. Giving an agent shell access to `krci` turns the platform into a tool surface it can call: list codebases, inspect SBOMs, compare branches, summarize changes since the previous run. No MCP server to write, no proprietary protocol to learn, no stale API client to maintain.

The portal and the CLI are peers: the portal is the right interface for browsing, comparing, and approving; the CLI is the right interface for composing, scheduling, and handing off to agents. Both are first-class products and ship in lockstep.

Expand All @@ -47,9 +47,9 @@ Available Commands:

When you run any of these commands - say, `krci deployment list` to inspect CD pipelines across your environments-the output follows the same disciplined structure. Columns are consistent, status values are predictable, and the table is human-readable *and* machine-parseable without any translation. Here's what that looks like in practice:

<img alt="Example of krci deployment list command output showing a table with deployment status, environment, sync state, and other metadata. The table displays three deployments: krci-gitfusion with healthy status in dev, and two tekton instances in dev and qa environments with varying sync states." src="krci-deployment-example.png" />
![Example of krci deployment list command output showing a table with deployment status, environment, sync state, and other metadata. The table displays three deployments: krci-gitfusion with healthy status in dev, and two tekton instances in dev and qa environments with varying sync states.](../assets/krci-deployment-example.png)

This table shows exactly what's deployed where. The `VERSION` column tracks the build artifact (`0.5.0-SNAPSHOT.4`), the `ENV` column shows which environment it's in, and the `STATUS` column tells you health at a glance -`healthy` or `missing`. The `SYNC` column flags when an environment has drifted (`outofsynced`) from what GitOps expects. In seconds, you can answer: *"What's actually running in qa? Is it in sync? What version?"* The agent can answer it too, and answer the next question - *"Show me all deployments older than 30 days"* - without any special prompting.
This table shows exactly what's deployed where. The `VERSION` column tracks the build artifact (`0.5.0-SNAPSHOT.4`), the `ENV` column shows which environment it's in, and the `STATUS` column tells you health at a glance -`healthy` or `missing`. The `SYNC` column flags when an environment has drifted (`OutOfSync`) from what GitOps expects. In seconds, you can answer: *"What's actually running in qa? Is it in sync? What version?"* The agent can answer it too, and answer the next question - *"Show me all deployments older than 30 days"* - without any special prompting.

Every group follows the same shape - `list`, `get`, sometimes a third verb - and the flags repeat (`--branch`, `--severity`, `-o json|table`). Predictability is the point: an agent can reason about the next command from the previous one, and so can I. Authentication is OIDC against the same Keycloak the portal uses; the agent inherits the existing session, so there is no long-lived API key embedded in any prompt.

Expand Down Expand Up @@ -173,6 +173,6 @@ That's the entire loop: ask in language, get an answer the CLI can verify, sched
- [krci CLI on GitHub](https://github.com/KubeRocketCI/cli) - command reference, authentication setup, and release binaries.
- [SCA with Dependency-Track](/docs/operator-guide/devsecops/dependency-track) - how SBOMs reach the platform.
- [Kubernetes-Native CI/CD with Tekton](/blog/kubernetes-native-cicd-tekton-kuberocketci) - the pipeline layer that produces those SBOMs.
- [CycloneDX SBOM](https://cyclonedx.org/), [Dependency-Track](https://dependencytrack.org/), and [Claude Code](https://docs.claude.com/claude-code) - the upstream tools used in this post.
- [CycloneDX SBOM](https://cyclonedx.org/), [Dependency-Track](https://dependencytrack.org/), and [Claude Code](https://code.claude.com/docs) - the upstream tools used in this post.

The krci CLI is open-source under Apache License 2.0. Source, issues, and release binaries live on [GitHub](https://github.com/KubeRocketCI/cli).
Loading