// the find
konstructio/kubefirst
The Kubefirst Open Source Platform
Kubefirst is a CLI tool that bootstraps a full GitOps platform on Kubernetes across multiple cloud providers (AWS, GCP, Azure, Civo, DigitalOcean, etc.) in a single command. It wires together ArgoCD, Vault, Atlantis, external-secrets, and related tooling automatically. Aimed at platform engineers who want an opinionated, pre-integrated starting point rather than assembling these pieces themselves.
- Broad provider coverage (9 targets including local k3d) with consistent CLI UX across all of them, which is genuinely hard to maintain
- The toolchain choices are sensible and widely adopted: ArgoCD for GitOps, Vault for secrets, Atlantis for Terraform PRs, external-secrets-operator — not random experiments
- Active CI with commit linting, signed commits enforcement, link checking, and golangci-lint config shows real engineering discipline rather than just star farming
- Has a local k3d path, which means you can actually validate the full stack on a laptop before spending cloud money
- The OSS CLI essentially installs Kubefirst Pro by default — the commercial UI is bundled in the open-source flow, which blurs the line between OSS and product and creates a bait-and-switch risk for users who want a purely open setup
- Almost no unit tests visible in the tree; the few test files (aws/create_test.go, provisionWatcher_test.go, scaffold_test.go, stepper_test.go) are sparse for a tool that provisions real cloud infrastructure — failures here are expensive to debug
- The core provisioning logic appears to live in an external API/service (internal/provision calls out to a remote watcher), meaning the CLI is a thin wrapper and you can't fully audit or run the provisioning logic offline
- Documentation lives at kubefirst-pro.konstruct.io, not in the repo itself, so if the company pivots or disappears the OSS project loses its install guides — a real concern given the rebranding from kubefirst to konstructio already happened