This release is a pre-release and may not be stable for production use.
Kapitan: Configuration Management for Kubernetes, Terraform, and Infrastructure
Kapitan is an open source configuration management tool for Kubernetes, Terraform, and complex infrastructure systems. It helps teams generate, organize, reuse, and validate configuration across environments using an inventory-driven model, templates (Jsonnet, Jinja2, Kadet), and integrations with Helm, Kustomize, CUE, and external references.
Kapitan provides native secrets management (GPG, AWS KMS, GCP KMS, Azure Key Vault, HashiCorp Vault) and is designed for Platform Engineering and GitOps workflows.
- Website: https://kapitan.dev
- Documentation: https://kapitan.dev/getting_started/
- Community:
#kapitanon Kubernetes Slack - Sponsor: GitHub Sponsors
Quick start
The fastest way to try Kapitan is with the Kapitan Reference repository:
git clone https://github.com/kapicorp/kapitan-reference.git kapitan-templates
cd kapitan-templates
./kapitan compile
For a minimal project from a cookiecutter template:
pip3 install cruft
cruft create https://github.com/kapicorp/kapitan-reference --checkout cookiecutter --no-input
What is Kapitan?
Kapitan lets you model infrastructure configuration with reusable inventory classes and targets, then compile that data into manifests, scripts, documentation, and Terraform resources. Instead of copying values across Helm values files, Kustomize overlays, and Terraform variables, you define everything once in the Kapitan inventory and let each input type generate the files it needs.
Install Kapitan
Docker (recommended)
docker run -t --rm -v $(pwd):/src:delegated kapicorp/kapitan -h
On Linux, add -u $(id -u) to preserve file permissions.
Pip
Kapitan requires Python 3.10 or newer.
pip3 install --user --upgrade kapitan
See the full installation guide for platform-specific steps.
What Kapitan does
Kapitan turns a hierarchical inventory and a set of input templates into compiled configuration files ready for deployment.
- Define reusable classes and per-environment targets in YAML.
- Write templates with your preferred tools.
- Run
kapitan compile. - Deploy the generated output from the
compiled/directory.
Supported input types
Native integrations
- Secret management: GPG, HashiCorp Vault, AWS KMS, GCP KMS, Azure Key Vault
- Remote dependencies: Git, HTTP, ORAS (OCI registry)
- Validation: JSON Schema, TOML, YAML linting
- GitOps-friendly: compiles to fully rendered, plain-text output
When to use Kapitan
- You manage the same application across many environments (dev, staging, prod, regions) and want a single source of truth.
- You need to reuse configuration fragments across targets without copy-paste.
- You want to combine multiple templating tools in one pipeline.
- You need native secret management embedded in the same configuration workflow.
- You prefer a compile step that generates fully rendered output before deployment.
When another tool may be enough
- Helm alone is sufficient if you only need to template a single chart with values files and do not share complex configuration across many services.
- Kustomize alone is sufficient if your environment differences are mostly patches and overlays on a small set of bases.
- Plain YAML with a CD tool is sufficient if you have very few environments and simple configuration with little reuse.
- Terraform alone is sufficient if you only manage infrastructure resources and do not need a broader multi-language configuration layer.
Project status
Kapitan is actively maintained by KapiCorp and the open source community. Releases are published regularly with release notes. The project uses an MIT license.
Contributing
We welcome contributions. Please open an issue or pull request to get started.
Security
If you discover a security issue, please open a private security advisory or contact the maintainers directly.
Support
- Ask questions in the
#kapitanSlack channel. - Read the FAQ.
- Open a GitHub Discussion or Issue.
Related projects
- Tesoro — Kubernetes admission controller for Kapitan secrets.
- Kapitan Reference — working examples to get started.
- Kapitan Generators — reusable generators for common patterns.
Release files for kapitan 0.36.4.dev7
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| kapitan-0.36.4.dev7.tar.gz | 4.1 MB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| kapitan-0.36.4.dev7-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 4.3 MB
Release files / kapitan-0.36.4.dev7.tar.gz
| Download URL | kapitan-0.36.4.dev7.tar.gz |
|---|---|
| Size | 4.1 MB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
6323fa589422a7ad0884d996cc24d3acecb09eb65ecd3f9c5aae3a5d6cfc3b3b
|
|
BLAKE2b-256 checksum How to use checksums |
268623b5a0d5924a8a3365e115d409db58d91c191b2bdac7ca4be61864bf9972
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Release files / kapitan-0.36.4.dev7-py3-none-any.whl
| Download URL | kapitan-0.36.4.dev7-py3-none-any.whl |
|---|---|
| Size | 172.6 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
3013bb05c7c8dcebd7c07c434a93178171eea421b6992dc25210f4f7a1b7c925
|
|
BLAKE2b-256 checksum How to use checksums |
ec487415af7ae41fd068fcb5d151ddb3310387b477cbcea15ce87a815deec3f3
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
