Platforms CI/CD & Environments Pipeline Builder
Core 02 · CI/CD & Environments

Visual CI/CD pipelines for Kubernetes — ship what you run, no rewrite.

Build CI/CD pipelines visually or declare them as GitOps code. Source, build, scan, deploy, and promote across every cluster — with guardrails, rollbacks, and a full audit trail baked into every run.

  • Visual or GitOps
  • Works with existing workloads
  • Rollback on every run
01

Source

GitHub, GitLab or Bitbucket. Atmosly reads what's already running.

02

Build

Cached image builds with Kaniko — no privileged Docker daemon.

03

Scan

Security & policy checks gate the artifact before it ships.

04

Deploy

Roll out to any cluster — EKS, GKE, AKS or on-prem.

05

Promote

Change-window, approvals & audit trail to production.

How a pipeline comes together

From repo to production in four moves

1
Connect

Point at the repo — Atmosly reads what runs

Connect GitHub, GitLab, or Bitbucket. Atmosly inspects the services you already run, so you're not authoring pipelines from a blank file.

  • No rebuild — works with existing workloads
  • Detects language, build & runtime automatically
github.com/acme/checkoutlinked
detected · Go 1.22 · Dockerfile
services found7
2
Author

Visual editor or GitOps — your call

Drag stages together in the visual builder, or declare the whole pipeline as code and let GitOps reconcile it. Same engine, same guardrails, either way.

  • Visual builder for fast iteration
  • GitOps-as-code for review & version control
stages: build → scan → deployvalid
trigger: on push · main
target: prod-eu-west
3
Run

Build, scan, deploy — with cost reported

Every run builds a cached image, runs security and policy checks, deploys to the target cluster, and reports the cost delta — all visible on one screen.

  • Kaniko builds — no privileged daemon
  • Security gate blocks risky artifacts before deploy
build · cached42s
scan · 0 criticalpass
deploy · prod-eu-westlive
4
Promote

Promote to prod, inside the guardrails

Promotion runs through change-window checks, approvals, and a recorded audit trail — and every release carries a one-click rollback.

  • Approvals & change-window enforcement
  • Audit trail + one-click rollback on every release
change-window · open
approved by · 2 reviewers
rollback · readyarmed
Inside the builder

Everything a pipeline needs, nothing to wire yourself

The capabilities you'd normally stitch together from five tools — built into one engine.

Visual + GitOps, same engine

Drag stages in the visual editor or declare them as code — both compile to the same run, with the same guardrails and the same audit trail.

visual edit → appliedsynced to git
git push → reconciledlive

Deploy to any cluster

One pipeline targets EKS, GKE, AKS, or on-prem. No per-cloud rewrites, no separate tooling per environment.

EKS · prod-eu
GKE · prod-us
on-prem · dr

Cached builds

Kaniko image builds with layer caching — fast, and no privileged Docker daemon in your cluster.

One-click rollback

Every release records a rollback. Revert a bad deploy in one click — no runbook, no scramble.

Secrets injection

Pull from your secret manager at deploy time — nothing baked into images or stored in plain text.

Cost reported on every run

See the cost delta a change introduces before it reaches production — surfaced inline on the run, not waiting on next month's bill. The same cost signal the Operations core uses, right where you ship.

The payoff

What changes when CI/CD is built in

No rewrite
works with the workloads you already run
1 pipeline
for every service, across every cluster
30×/day
deploys with no release captain*
1-click
rollback on every release

*Representative of customer-reported outcomes. Your results depend on team and workload mix.

Questions

What teams ask before connecting a repo

Do I have to rewrite my services to use it?
No. Atmosly reads the services you already run and builds pipelines around them. There's no framework to adopt and no rewrite — you point it at your repo and it works with what's there.
Does it replace ArgoCD?
It can — or it can coexist. Atmosly speaks GitOps natively, so you can run it as your reconciler, or keep ArgoCD and let Atmosly handle the build, scan, and promotion stages around it.
Visual editor or pipeline-as-code?
Both, interchangeably. Edits in the visual builder sync to Git, and changes pushed as code reconcile back into the visual view. Teams that want review gates use code; teams that want speed use the editor — same engine underneath.
How do builds run without a privileged daemon?
Atmosly builds images with Kaniko, which builds inside the cluster without a Docker daemon or root privileges — so your CI doesn't widen your attack surface to ship a container.

Put your services on one pipeline.

Connect a repo and a cluster, read-only to start. See your services detected and a pipeline drafted in minutes — visual or as code. Free, no sales call.

Build a pipeline → Book a 15-min walkthrough