Infrastructure Automation
for Professionals

Package Ansible, Terraform and scripts as blocks. The toolchain (Ansible, kubectl, Helm) runs in a container — no local installs, deterministic and reproducible.

Interactive polycrate hub list (TUI), block pull / block push and OCI artifacts in Harbor or any compatible registry.

Init workspaces, check status and persist changes with polycrate git sync — commit, pull and push built in (go-git).

Use polycrate spec and polycrate release to drive feature lifecycle and versioning — agent-friendly and auditable.

workspace encrypt / decrypt keeps secrets safe in Git. No plaintext credentials in workspace.poly or blocks.

polycrate mcp exposes Hub, guides and schemas as an MCP server — block discovery and help inside your AI workflow.

polycrate ssh for exec, tunnel and copy against inventory hosts — Day-2 ops without a separate SSH toolchain.

polycrate logs and polycrate metrics query the platform via the API — VictoriaLogs and VictoriaMetrics without tool hopping.

Multi-step workflow runs and --local for container-free execution — ideal for pipelines and constrained environments.

Discovers Ingresses → Endpoints, Nodes → Hosts, Meta-Secrets → K8sApps, Velero → Backups, cert-manager → Certificates, PVs → Volumes.

Continuously syncs discovered resources into the Polycrate API — the basis for monitoring, alerting and multi-cluster views.

OperatorConfig, K8sCluster, Endpoint, Host, K8sApp, K8sVolume, Backup, BackupSchedule, Certificate, S3Bucket — declarative in-cluster.

S3Bucket CRs are provisioned via the API; credentials land as Secrets in the cluster — GitOps-ready.

polycrate run polycrate-operator install

Alternatively: polycrate operator run|status|health for lifecycle and diagnostics.

Heartbeats, leader election and the Operator Rollout Dashboard in the API show version, health and canary rollouts across clusters.

Automatic detection of endpoints from Kubernetes Ingresses. In-cluster checks, metrics and alerting for SLAs and incident response.

Automatic detection of cert-manager certificates across all clusters. Expiration dates, issuers and status at a glance - with alerting before expiration.

Read-only overview of all Velero backups in monitored clusters. Backup status, schedules and history aggregated - with alerting on failures.

The Operator detects Polycrate Blocks via meta-secrets and synchronizes them with the API. Block names, versions and installation status at a glance.

Manage domains and DNS zones — internal on ayedo PowerDNS or external via Cloudflare, Hetzner, Route 53 and other providers. Records, registrar status and audit in one UI.

Detailed metrics for each endpoint: latency, status codes, availability and performance history. Perfect for SLA monitoring and incident response.

CLI action runs land in the API: exit codes, duration, logs and audit trail — team visibility for every deployment.

Announce maintenances, define recurring windows and mute alerts during them — including downtime timeline.

Tenant-ready separation for MSPs and platform teams. SSO/OIDC, roles and isolated workspaces per organization.

Dashboard for operator versions, heartbeats and canary rollouts across the entire cluster fleet.

S3 buckets and load balancers as productized resources alongside Kubernetes and workspaces — provisionable and visible to the team.

Knowledge base, notes and conversations/ticketing on the platform — context stays with the infrastructure.

Deploy your platform consistently across all environments - from development to production. Polycrate guarantees that every deployment runs identically.

Manage multiple customer environments with different requirements from a central platform. Multi-tenancy and audit logs included.

Provide your developers with ready-made blocks that deploy complex infrastructure with simple commands - without deep knowledge of the implementation.

Standardize your operations with reusable blocks and workflows. GitOps best practices are built directly into Polycrate.

Complete audit trails for all changes to your infrastructure. Polycrate is certified for use under high compliance requirements.

Polycrate is deployed in production environments with high availability and security requirements - from financial services to government agencies.

Every team member executes the same actions with the same results - independent of the local environment. No more "Works on my machine" problems.

Your infrastructure is described in YAML files and automatically documented. Workspaces, blocks and actions are self-explanatory and versioned.

From Kubernetes to Docker to bare-metal servers: Polycrate provides a unified layer for provisioning and maintaining IT infrastructure and software.

Ansible, kubectl, Helm, cloud CLIs and more are included directly in the Polycrate container. Start developing immediately - without setup effort.

Create your own blocks for your specific requirements or use ready-made blocks from the PolyHub. Share blocks via OCI registries.

Blocks are stored as OCI artifacts in container registries. Use Harbor, Docker Hub or any other OCI-compatible registry.

Every action execution is logged with timestamps, exit codes and metadata. Perfect for compliance and debugging.

Integrated secrets management with age encryption. Secrets are stored encrypted in the Git repository and can be shared team-wide.

Polycrate is ideal for migrating software workloads between cloud providers. Kubernetes-native architecture guarantees portability.

We operate more than 100 Kubernetes clusters in production for our customers.

We operate, monitor, and protect more than 300 production databases.

We operate one petabyte of object storage for backups, artifacts, and application data.

Our monitoring systems ingest 4 million datapoints per second.

Our collectors capture logs continuously and store them GDPR-compliant — over 100 billion entries per month.

We write more than 5,000 backups every day to encrypted long-term storage — about 150 terabytes of backup volume per month.

More than 9 million end users use software we operate every day, on the internet or on-premises.

Our managed services are unavailable for less than one hour per year on average.

Our alerting typically detects faults and outages within a few minutes.

First-class support for Ansible playbooks as action implementation. Automatic inventory integration and SSH key management included.

Native integration with Kubernetes clusters. Kubeconfig management, Helm charts and multi-cluster support for enterprise deployments.

Full integration with Docker and Docker Compose for container-based deployments on any host.

Native Git integration based on go-git. Built-in commands for status, commit, push, pull and sync - without external Git installation.

Blocks are stored as OCI artifacts in container registries. Compatible with Harbor, Docker Hub, GitHub Container Registry and more.

Integrated MCP server for AI assistants like Claude and Cursor. Block discovery and configuration assistance through context-aware recommendations.

Create modular blocks with actions that describe your infrastructure. YAML-based, versioned and team-ready.

Execute Polycrate actions in CI/CD pipelines. Compatible with GitLab CI, GitHub Actions, Jenkins and more.

Ansible-based actions guarantee idempotent, testable deployments. Run the same action as many times as needed.

Combine multiple actions into workflows for complex, multi-stage deployments with rollback strategies.

Maintenance actions, SSH and Operator sync for updates, backups and troubleshooting — CLI and cluster truth in one workflow.

The Polycrate API provides real-time monitoring, alerting and audit logs for all your workspaces and deployments.

EU-Datenhaltung (Deutschland), Customer-Managed Keys (BYOK/BYOHSM), Verschlüsselung at rest/in transit. ISO 27001-zertifiziertes Datenschutz-Management. Mehr zur GDPR.

24/7 Monitoring, Incident-Response, BCP/DR-Prozesse, Supply-Chain-Transparenz (SBOM). Mehr zu NIS-2.

IKT-Risikomanagement, dokumentierte Exit-Strategien, Drittpartei-Risiko-Management, TLPT-Readiness. Mehr zu DORA.

SBOM-Generation, CVE-Scanning, signierte Container-Images, GitOps-basierte Audit-Trails. Mehr zum CRA.

EU-basierte Operations, offene Standards, Exit-Fähigkeit ohne Lock-in. Mehr zum Framework.

Offene APIs, standardisierte Formate, vollständige Exit-Runbooks. Mehr zum Data Act.

Wie ayedo GDPR, NIS-2, DORA, CRA, Data Act und ISO 27001/9001 systematisch adressiert. Zur Übersicht.

Download the CLI for your operating system from the Polycrate Hub or use the Docker-based installer.

The CLI runs on Linux, macOS and Windows (WSL).

Create a directory, add a workspace.poly file and define your first blocks with actions.

Execute actions with a simple command:

polycrate run my-block install