Deploy an App

​

Prerequisites

• A cluster connected to Niro (see Connect a Cluster)
• The apply capability enabled on the cluster (NIRO_ENABLE_APPLY=1)
• Optionally, a GitHub repo linked for GitOps (see Set Up GitOps)

​

1. Open the builder

In the dashboard, click Apps in the sidebar, then click Deploy app. Select the cluster you want to deploy to. If the cluster doesn’t have the apply capability enabled, you’ll see a prompt to enable it.

​

2. Configure the workload

The builder is organized into sections. Fill in the ones relevant to your app — you don’t need to fill in everything.

​

Workload (required)

​

Networking (optional)

Enable a Kubernetes Service to expose your app: Enable an Ingress to expose the app via HTTP(S):

​

Scaling (optional)

​

Storage (optional)

Add a PersistentVolumeClaim for stateful workloads:

​

Secrets (optional)

Reference Kubernetes Secrets or ConfigMaps as environment variables: Create or update those resources from the cluster Config panel before deploying the app. The app and the referenced Secret or ConfigMap must be in the same namespace. To inject private registry credentials, use Registry credentials instead — Niro adds imagePullSecrets automatically.

​

3. Review policy findings

As you fill in the form, Niro evaluates your configuration against policy rules in real time. Findings appear as inline warnings:

• High — should be fixed before deploying to production (e.g. privileged container, mutable :latest tag on a production cluster)
• Medium — best practice violations (e.g. missing resource limits)
• Low / Info — informational only

Findings are advisory — they never block deployment.

​

4. Deploy

Choose what to do with the generated manifests:

​

5. Monitor the deployment

After applying, Niro shows the deployment in the Apps list with its status:

• Succeeded — all objects applied cleanly
• Partial — some objects applied, some failed
• Failed — the apply command failed

Click the deployment to see per-object results, the apply history, and any policy findings on the current live state.

​

Editing a deployment

Open the deployment detail page and click Edit. The builder reopens with the previously entered form values. Edit what you need and re-apply or commit a new PR.

​

Private images

If your image requires authentication (Docker Hub private, GHCR, ECR, GCR, etc.), add your credentials in Registries first. Niro will inject the appropriate imagePullSecret into the generated manifests automatically when you select that registry’s image.

​

Related

• Visual Builder — full reference for all builder fields
• Manage Secrets and ConfigMaps — create configuration resources for apps
• Policies — advisory standards checks run at build time
• Private Registries — pull from private container registries
• Set Up GitOps — commit manifests to Git and auto-apply on merge