idyl deploy - IDYL Docs

Deploy an application imperatively from the command line. Automatically creates the appropriate resource type:

Job: when —completions or —parallelism is specified
Deployment: otherwise (default)

Use —platform, —isolation-class, and —network-class to declare workload runtime intent. When —network-class is omitted, the server applies internet, whatever the isolation class: outbound access to the public internet with the host, its local networks, and cloud instance metadata blocked. Admission and scheduling still require a target subnet policy and provider nodes that match the requested runtime capabilities.

Usage

idyl deploy IMAGE [flags]

Flags

Flag	Description
`--backoff-limit <uint64>`	Number of retries before the Job is marked failed. Default: `6`.
`--completions <uint64>`	Number of successful pod completions required for the Job. Default: `0`.
`--cpu <string>`	CPU limit, such as 500m or 1. Defaults to the configured value.
`-e <stringArray>, --env <stringArray>`	Environment variable in KEY=VALUE form; repeatable.
`--fleet <string>`	Constrain scheduling to eligible members of this fleet within the workload’s subnet, by fleet ID.
`--gpu <string>`	GPU requirement, such as rtx5090, 2:h100, or nvidia:24Gi.
`--image-pull-credential <string>`	RegistryCredential name in the workload namespace.
`--isolation-class <string>`	Workload isolation class (container, secure-container, or microvm); must be allowed by the target subnet.
`--memory <string>`	Memory limit, such as 256Mi or 1Gi. Defaults to the configured value.
`--name <string>`	Required. Name for the resource.
`--network-class <string>`	Workload network class (internet, none, restricted-egress, or unrestricted); when omitted the server applies internet, the public internet with local networks blocked, whatever the isolation class.
`--node <string>`	Constrain scheduling to this single node within the workload’s subnet, by node ID.
`--parallelism <uint64>`	Maximum number of pods the Job runs in parallel. Default: `0`.
`--platform <string>`	Target workload platform: linux/amd64 or linux/arm64.
`--replicas <uint64>`	Number of replicas for the Deployment. Default: `1`.
`--restart <string>`	Restart policy: always, on_failure, or never. Default: `always`.

Inherited flags

Flag	Description
`-a <string>, --account-id <string>`	Account ID to use, overriding the current context.
`-c <string>, --context <string>`	Use the named context for this command.
`--homedir <string>`	Override the configuration directory. Defaults to ~/.config/idyl.
`-n <string>, --namespace <string>`	Namespace to address, overriding the entered context.
`--network <string>`	Override the Network for this command.
`-p <string>, --profile <string>`	Override the access profile for this command.
`-s <string>, --subnet <string>`	Subnet to use for this command, overriding the current context.

Examples

# Deploy a single-replica deployment
idyl deploy nginx

# Deploy a deployment with 3 replicas
idyl deploy nginx --replicas=3

# Deploy a job that runs to completion
idyl deploy busybox --completions=5 --parallelism=2

# Deploy with resource limits
idyl deploy myapp:v2 --name=api --cpu=500m --memory=256Mi

# Deploy with GPU requirements
idyl deploy vllm:latest --name=llm --gpu=rtx5090
idyl deploy nvidia/cuda:12.0 --name=gpu-job --gpu="2:h100"
idyl deploy ollama --name=inference --gpu="nvidia:24Gi"

# Declare container isolation intent
idyl deploy nginx --name=web --platform linux/amd64 --isolation-class container

# Declare secure-container isolation intent
idyl deploy nginx --name=web --platform linux/amd64 --isolation-class secure-container

# Use the subnet default isolation class, when configured by runtime policy
idyl deploy nginx --name=web --subnet=secure-subnet --platform linux/amd64

# Declare secure-container isolation intent with no workload network
idyl deploy nginx --name=web --platform linux/amd64 --isolation-class secure-container --network-class none

# Declare microvm isolation intent with no workload network
idyl deploy nginx --name=web --platform linux/amd64 --isolation-class microvm --network-class none

# Deploy to a subnet
idyl deploy nginx --name=web --subnet=my-subnet

# Deploy from a private registry using a stored RegistryCredential
idyl deploy ghcr.io/acme/private-api:latest --name=api --image-pull-credential ghcr-prod --subnet=my-subnet

​Usage

​Flags

​Inherited flags

​Examples

Usage

Flags

Inherited flags

Examples