# vpctl command-line tool

> Manage Unity Virtual Private Cloud releases on customer-operated Kubernetes clusters with vpctl command-line tool.

vpctl is the Unity command-line tool that manages Unity Virtual Private Cloud releases on customer-operated Kubernetes clusters. It renders Helm chart values from a single `manifest.yaml` file. It can also pull release archives from the Unity registry, mirror images and ORAS artifacts to your registry, generate Kubernetes Secret manifests, and deploy to your cluster.

vpctl consists of five phases. Only **Render** is required, every other phase is optional and can be replaced with your existing tooling.

![vpctl capability map](/api/media?file=/cloud/media/images/vpctl-capability-map.png)

The three usage modes combine these phases differently for different security postures. See [Architecture and security](/cloud/virtual-private-cloud/vpctl/architecture.md) for the complete trust boundary overview.

[Install vpctl](/cloud/virtual-private-cloud/vpctl/install.md): Install the vpctl binary, configure registry credentials, and review external CLI requirements
[Architecture and security](/cloud/virtual-private-cloud/vpctl/architecture.md): Three usage modes and what vpctl accesses on the network and in your cluster
[Manifest reference](/cloud/virtual-private-cloud/vpctl/manifest.md): The declarative input file that drives every vpctl operation
[Command reference](/cloud/virtual-private-cloud/vpctl/commands.md): Per-command walkthroughs with flags, examples, and dry-run instructions
[Troubleshooting](/cloud/virtual-private-cloud/vpctl/troubleshooting.md): Common vpctl errors and resolutions
[Changelog](/cloud/virtual-private-cloud/vpctl/changelog.md): Release history and migration guidance