Skip to main content

Ostrich SDK

Deploy like an Ostrich! 🦩

Ostrich SDK is a powerful, template-driven application deployment engine and orchestration platform. It provides a unified interface for DevOps workflows, including template management, local containerized execution, remote SSH/Kubernetes orchestration, registry management, and plugin execution.

By leveraging parameterized template packages called osplates, developers can easily package, configure, and deploy application architectures across diverse environments without managing low-level orchestration configurations directly.


🚀 Key Features

  • Template-driven (Osplates): Build once, deploy anywhere using customizable parameters and templates.
  • Jinja2 Templating Engine: Parameterize configurations safely using custom Jinja2 delimiters ([[ and ]]) to avoid conflicts with Helm or Kubernetes syntax.
  • Docker/Podman Sandbox: Execute deployment tasks locally within isolated containers without cluttering host machines with toolchains (Helm, Kubernetes CLI, jq, yq, etc.).
  • Remote K8s/SSH Orchestration: Deploy and manage workloads on remote Kubernetes endpoints over secure SSH tunnel connections using ostr.
  • Registry & OCI Management: Built-in commands to authenticate, list, pull, and push OCI registry images and packages.
  • Plugin Architecture: Define modular application lifecycles with declarative task definitions in ostrich.yaml.

🏗️ System Architecture Overview

The Ostrich SDK is composed of three primary components:

  1. ost-core (The Engine): A Python 3 execution engine (ost) that processes templates, resolves configuration parameters, and executes deployment tasks using flexible runners (inprocess, shell, container).
  2. ostd (Local Container CLI): A compiled Go utility that launches the ost engine inside a local Docker/Podman container, mounting workspace files and host credential configs (e.g., .kube/config, .docker/config.json) seamlessly.
  3. ostr (Remote K8s CLI): A compiled Go utility that connects to an SSH-enabled agent pod running inside a remote Kubernetes cluster to sync files and execute ost deployment tasks remotely.

🚀 Quickstart

1. Build and Install CLIs

To build the CLI binaries (ostd and ostr), run the build script:

./scripts/build.sh

The compiled binaries for Linux, macOS, and Windows will be placed in the bin/ directory. Copy the appropriate binaries to your system PATH (e.g. /usr/local/bin/).

2. Installing Python Engine via pip

To install the ost Python CLI and engine directly from PyPI:

pip install ostrich-sdk

Or install from local repository source:

# Install locally in editable mode
pip install -e .

# Or install standard package from local source
pip install .

Verify the installation:

ost --version
ost help

📘 Developer Guide: For instructions on setting up PyPI publishing credentials and automated GitHub Action releases, see PYPI.md.

3. Running Tasks Locally with ostd

Using ostd allows you to execute deployment tasks locally without setting up the core Python environment on your host machine.

# Check version
ostd --version

# Show current default Docker image
ostd image show

# Set custom default Docker image & tag
ostd image ghcr.io/rockops/ostrich-sdk:0.2.1

# Remove custom image setting (revert to default)
ostd image --rm

# List available templates
ostd template list

# Inspect template details
ostd template describe <template-name>

# Generate a sample configuration file
ostd template config <template-name>

# Dry run deployment task
ostd -dr run deploy

# Execute deployment task
ostd run deploy

3. Running Tasks Remotely with ostr

ostr lets you orchestrate deployments on a remote Kubernetes cluster containing an Ostrich SDK agent.

# Initialize connection to remote endpoint
ostr init <endpoint_name> <ip_address>

# Manage and select active endpoints
ostr endpoint list
ostr endpoint select <endpoint-name>

# Synchronize local files and execute task remotely
ostr run deploy

# Open interactive remote shell
ostr ssh

🛠️ Plugin & Osplate Development

Plugin Structure (ostrich.yaml)

Applications managed by Ostrich SDK define their lifecycle using an ostrich.yaml descriptor in the root directory:

  • Metadata: Name, version, description, and dependencies.
  • Template / Osplate Kind: Specifies the osplate blueprint to extend.
  • Tasks: Pre-defined operations (e.g., deploy, package, test) consisting of execution steps.
  • Configuration: Custom template variables and default parameter overrides.

Example ostrich.yaml

name: my-plugin
version: 1.0.0
description: Custom application plugin

tasks:
  deploy:
    description: Deploy application to Kubernetes
    steps:
      - name: Build Docker image
        run: docker build -t my-image .
      - name: Push to registry
        run: docker push my-image
      - name: Deploy to Kubernetes
        run: kubectl apply -f k8s/

📦 Registry & Operations Reference

Standard Commands

Command Description
init Setup connection to a remote endpoint
endpoint Manage endpoints (list, select, set)
ssh Open interactive shell on remote endpoint
put Upload files to remote endpoint
docker Run docker commands remotely
kubectl Run kubectl commands remotely
run Execute a task defined in a plugin/osplate
cert install Install a trusted certificate remotely
host Add a host entry remotely
version Display version information

Template Operations

Command Description
template list List available plugin templates (osplates)
template describe <name> Get detailed information about a template
template config <name> Generate sample configuration file

Registry Operations

Command Description
registry login <url> Authenticate with an OCI registry
registry ls <url> List images in a registry
registry pull <image> Pull an image from registry
registry push <image> Push an image to registry

⚙️ Configuration & Environment

Global Configuration

# Display current configuration
ost config get

# Set configuration key-value
ost config set <key> <value>

Environment Variables

Variable Description
PRIVATE_DOCKER_REGISTRY Default private Docker registry URL
PRIVATE_HELM_REGISTRY Default private Helm registry URL
KUBECONFIG Path to host Kubernetes configuration file

📚 Documentation & Reference

For additional technical specifications, architectural details, and guides:


🤝 Contributing & Support

Contributions are welcome! Please refer to CLAUDE.md for development rules and guidelines.

For issues and support, please open an issue on the GitHub repository.

Metadata

Release files for ostrich-sdk 0.2.9

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for ostrich-sdk 0.2.9
File Size Uploaded
ostrich_sdk-0.2.9.tar.gz 57.8 kB Details

Built distribution (wheel)

Table of built distributions (wheels) for ostrich-sdk 0.2.9
File Interpreter ABI Platform
ostrich_sdk-0.2.9-py3-none-any.whl Python 3 none any Details

Total release size: 130.6 kB

Release files / ostrich_sdk-0.2.9.tar.gz

Download URL ostrich_sdk-0.2.9.tar.gz
Size 57.8 kB
Tags Source
SHA-256 checksum
How to use checksums
cd0ac830f678a3350b369205acf0afa0d4cb4444409e8f4187b5ab8b9e3c731f
BLAKE2b-256 checksum
How to use checksums
9e457e7273cc7374169dd241e16a703b487c130ec43798ebf23c6f3cad6d35b2
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Sep 2, 2026.

Transparency log

Release files / ostrich_sdk-0.2.9-py3-none-any.whl

Download URL ostrich_sdk-0.2.9-py3-none-any.whl
Size 72.8 kB
Tags Python 3
SHA-256 checksum
How to use checksums
f8d2b8ac5a53e03c929ef4f4f503242283679ef370174bb6ebf7ba92dc61295d
BLAKE2b-256 checksum
How to use checksums
c89cc03759eb293078c52db14352612ad9c1ceb7f1fbb8a8a700b595a58a1b04
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Sep 2, 2026.

Transparency log

Release history Release notifications | RSS feed

This release

0.2.9 This release

2 release files

0.2.8

2 release files

0.2.7

2 release files

0.2.6

2 release files

0.2.5

2 release files

0.2.4

2 release files

0.2.3

2 release files

0.2.1

2 release files

0.2.0

2 release files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page