vpctl is the Unity command-line tool that manages Self-Hosted Deployment releases on customer-operated Kubernetes clusters. It renders Helm chart values from a single file. It can also pull release archives from the Unity registry, mirror images and ORAS artifacts to your registry, generate Kubernetes Secret manifests, and deploy to your cluster.

vpctl consists of five phases. Only Render is required, every other phase is optional and can be replaced with your existing tooling.

The three usage modes combine these phases differently for different security postures. See Architecture and security for the complete trust boundary overview.