Apply a Kubernetes resource (e.g., a Kubernetes deployment).

yaml
type: "io.kestra.plugin.kubernetes.kubectl.apply"

Examples

Apply a Kubernetes resource, using YAML.

yaml
id: create_or_replace_deployment
namespace: company.team

tasks:
  - id: apply
    type: io.kestra.plugin.kubernetes.kubectl.Apply
    namespace: default
    spec: |-
      apiVersion: apps/v1
      kind: Deployment
      metadata:
        name: mypod

Apply a Kubernetes resource, using a namespace file.

yaml
id: create_or_replace_deployment
namespace: company.team

tasks:
  - id: apply
    type: io.kestra.plugin.kubernetes.kubectl.Apply
    namespaceFiles:
      enabled: true
    namespace: default
    spec: "{{ read('deployment.yaml') }}"

Apply a Kubernetes custom resource definition, using YAML.

yaml
id: k8s
namespace: company.name

tasks:
  - id: apply
    type: io.kestra.plugin.kubernetes.kubectl.Apply
    namespace: default
    spec: |-
      apiVersion: apiextensions.k8s.io/v1
      kind: CustomResourceDefinition
      metadata:
        name: shirts.stable.example.com
      spec:
        group: stable.example.com
        scope: Namespaced
        names:
          plural: shirts
          singular: shirt
          kind: Shirt
        versions:
        - name: v1
          served: true
          storage: true
          schema:
            openAPIV3Schema:
              type: object
              properties:
                apiVersion:
                  type: string
                kind:
                  type: string
                metadata:
                  type: object
                spec:
                  type: object
                  x-kubernetes-preserve-unknown-fields: true # Allows any fields in spec
                  properties:
                    # You should define your actual Shirt properties here later
                    # For example:
                    # color:
                    #   type: string
                    # size:
                    #   type: string
                    #   enum: ["S", "M", "L", "XL"]
                status:
                  type: object
                  x-kubernetes-preserve-unknown-fields: true # Allows any fields in status
                  properties:
                    # Define your status properties here
                    # message:
                    #   type: string

Apply a custom resource and wait for it to become ready.

yaml
id: apply_and_wait_for_custom_resource
namespace: company.team

tasks:
  - id: apply
    type: io.kestra.plugin.kubernetes.kubectl.Apply
    namespace: default
    waitUntilReady: PT10M
    spec: |-
      apiVersion: example.com/v1
      kind: MyResource
      metadata:
        name: my-resource
      spec:
        foo: bar

Properties

spec *string

The Kubernetes resource spec

connection Connection

The connection parameters to the Kubernetes cluster

If no connection is defined, we try to load the connection from the current context in the following order:

System properties
Environment variables
Kube config file
Service account token and a mounted CA certificate.

You can pass a full configuration with all options if needed.

containerDefaultSpec object

Default container spec applied to all containers in the pod

When set, these container spec fields are merged into all containers including:

User-defined containers in the spec
Init and sidecar containers for file transfer (unless fileSidecar.defaultSpec is set)

This provides a convenient way to apply uniform container settings across all containers, which is especially useful in restrictive environments like GovCloud.

Supports any valid Kubernetes container spec fields such as:

securityContext: Security settings for all containers
volumeMounts: Volume mounts to add to all containers
resources: Resource limits/requests for all containers
env: Environment variables for all containers

Merge behavior:

For nested objects (like securityContext): deep merge, container-specific values take precedence
For lists (like volumeMounts, env): concatenated, with defaults added first
Container-specific values always override defaults

Example configuration:

text

containerDefaultSpec: 
  securityContext: 
    allowPrivilegeEscalation: false
    capabilities: 
      drop: 
      - ALL
    readOnlyRootFilesystem: true
    seccompProfile: 
      type: RuntimeDefault
  volumeMounts: 
    - name: tmp
      mountPath: /tmp
  resources: 
    limits: 
      memory: "256Mi"

fileSidecar SideCar

Default

{
  "image": "busybox"
}

The configuration of the file sidecar container that handles the download and upload of files

inputFiles object

SubType string

The files to create on the local filesystem – it can be a map or a JSON object.

The files will be available inside the kestra/working-dir directory of the container. You can use the special variable {{workingDir}} in your command to refer to it.

namespace string

Default default

The namespace where the operation will be done

The Kubernetes namespace in which to execute the operation. Defaults to 'default' if not specified.

outputFiles array

SubType string

The files from the container filesystem to send to Kestra's internal storage

Only files created inside the kestra/working-dir directory of the container can be retrieved. Must be a list of glob expressions relative to the current working directory, some examples: my-dir/**, my-dir/*/** or my-dir/my-file.txt..

waitRunning string

Default PT1H

Format duration

The maximum duration to wait for pod completion

Maximum duration allowed for the pod to complete after reaching Running state. If the pod does not complete within this time, the task will fail and the pod will be deleted. Only used by PodCreate task.

waitUntilReady string

Default PT0S

Format duration

The maximum duration to wait until the resource becomes ready

When set to a positive duration, waits for the resource to report Ready=True in its status conditions. Set to PT0S (zero, default) to skip waiting. Supports Pods, StatefulSets, and custom resources that use the Ready condition. Note: Deployments are not supported as they use the Available condition instead of Ready.

waitUntilRunning string

Default PT10M

Format duration

The maximum duration to wait until the pod is running

Maximum time to wait for the pod to reach Running state, including scheduler assignment, image pull, and container startup. Only used by PodCreate task.

Outputs

metadata array

SubType

The resource metadata

Definitions

io.kestra.plugin.kubernetes.models.Connection

apiVersion string

Default v1

The API version

caCertData string

CA certificate as data

caCertFile string

CA certificate as file path

clientCertData string

Client certificate as data

clientCertFile string

Client certificate as a file path

clientKeyAlgo string

Default RSA

Client key encryption algorithm

default is RSA

clientKeyData string

Client key as data

clientKeyFile string

Client key as a file path

clientKeyPassphrase string

Client key passphrase

disableHostnameVerification booleanstring

Disable hostname verification

keyStoreFile string

Key store file

keyStorePassphrase string

Key store passphrase

masterUrl string

Default https://kubernetes.default.svc

The URL to the Kubernetes API

namespace string

The namespace used

oauthToken string

Oauth token

oauthTokenProvider OAuthTokenProvider

Oauth token provider

password string

Password

trustCerts booleanstring

Trust all certificates

trustStoreFile string

Truststore file

trustStorePassphrase string

Truststore passphrase

username string

Username

io.fabric8.kubernetes.api.model.FieldsV1

io.kestra.plugin.kubernetes.models.Metadata

annotations object

SubType string

List of all annotations of the resource

clusterName string

Name of the current cluster

creationTimestamp string

Format date-time

Creation datetime

deletionGracePeriodSeconds integer

Deletetion grace period in seconds

deletionTimestamp string

Format date-time

Deletion datetime

finalizers array

SubType string

List of finalizers

generateName string

Generate name of the resource

generation integer

Generation

labels object

SubType string

List of labels

managedFields array

SubType

List of managed fields

name string

Name of the resource

namespace string

Namespace of the resource

ownerReferences array

SubType

List of owner reference

resourceVersion string

Resource version

selfLink string

Direct link to the API of this resource

uid string

Generated UUID of this resource

io.fabric8.kubernetes.api.model.ManagedFieldsEntry

apiVersion string

fieldsType string

fieldsV1 FieldsV1

manager string

operation string

subresource string

time string

io.kestra.plugin.kubernetes.models.SideCar

defaultSpec object

Default container spec for the file sidecar and init containers

Default container spec fields applied to the init and sidecar containers used for file transfer. When set, this overrides containerDefaultSpec for file transfer containers only.

Supports the same fields as containerDefaultSpec:

securityContext: Security settings for file transfer containers
volumeMounts: Volume mounts to add to file transfer containers
resources: Resource limits/requests (note: also available as top-level 'resources' property)
env: Environment variables for file transfer containers

Example configuration:

text

fileSidecar: 
  defaultSpec: 
    securityContext: 
      allowPrivilegeEscalation: false
      capabilities: 
        drop: 
        - ALL
      readOnlyRootFilesystem: true
      seccompProfile: 
        type: RuntimeDefault
    volumeMounts: 
      - name: tmp
        mountPath: /tmp

image string

Default busybox

The image used for the file sidecar container

resources object

The resource requirements applied to the file sidecar container

io.kestra.plugin.kubernetes.models.OAuthTokenProvider

output string

task Task

io.fabric8.kubernetes.api.model.OwnerReference

apiVersion string

blockOwnerDeletion boolean

controller boolean

kind string

name string

uid string