OCI-first GitOps delivery without sacrificing Git traceability
Git gives you history, review, and visibility. OCI gives you immutability, portability, and airgap compatibility. Kokumi is built on the premise that you shouldn't have to choose.
Get Started View on GitHub
Git properties. OCI strengths.
Immutable Artifacts
Every render produces a content-addressed OCI artifact. A Preparation is created once and never modified — giving you a permanent, reproducible history of everything ever shipped.
Instant Rollback
Roll back by pointing the Serving at any previous Preparation. The artifact already exists in the registry — no re-render, no rebuild, no waiting.
Approval Gates
Rendering and deployment are fully decoupled. Inspect the complete rendered manifest in the built-in UI before promoting, or require explicit human sign-off between environments.
What Runs Where
Every cluster runs one Preparation, pinned by its SHA-256 digest. Kokumi shows which one runs where and whether it is healthy, and Argo CD’s self-heal keeps it there.
Air-Gap Ready
The entire pipeline runs offline. All dependencies are OCI artifacts that can be mirrored into your private registry in advance — no external connectivity required at deploy time.
GitOps Native
Kokumi delegates runtime deployment to Argo CD. It feeds your existing GitOps workflow rather than replacing it, so your Argo CD dashboards, policies, and RBAC stay intact.