vpctl is the Unity command-line tool that manages Self-Hosted Deployment releases on customer-operated Kubernetes clusters. It renders Helm chart values from a single file. It can also pull release archives from the Unity registry, mirror images and ORAS artifacts to your registry, generate Kubernetes Secret manifests, and deploy to your cluster.

vpctl consists of five phases. Only Render is required; every other phase is optional and you can replace it with your existing tooling. There's also an optional step that verifies your cluster meets the deployment prerequisites.

The three usage modes combine these phases differently for different security postures. See Architecture and security for the complete trust boundary overview.