cleyrop

The Cleyrop command-line interface. A single self-contained binary that covers every Cleyrop API — files, folders, devspace tunnels, IAM service accounts, search.

$ curl -fsSL https://downloads.cleyrop.tech/install.sh | sh

latest · sha256-verified · WORM · ten-year retention

version: —
released: —
license: Proprietary

subcommands

cleyrop --help

files: Upload, download, list, move, copy, rename, delete, restore files.
folders: Recursive directory uploads. One-shot ZIP downloads. Move, rename, restore with structure preserved.
devspace: Open a tunnel to your devspace. Writes a ~/.ssh/config block so every devspace becomes ssh <name>.
iam sa: Register service accounts, rotate client secrets, provision matching Kubernetes secrets.
search: Full-text search across reachable projects. Add --format json to pipe into jq.
projects: List projects you can reach, fetch project contents.
context: Switch between tenants — internal, external, local — without re-typing the domain.
login | logout | me: OIDC authentication via Keycloak. Tokens cached under ~/.cleyrop/.
trash: List and empty per-project trash.
version: Print the CLI version. Used by the installer smoke test.

pinning

reproducible builds

URLs at /cli/<version>/cleyrop-<platform> are immutable. Set CLEYROP_CLI_VERSION in front of the installer to lock the binary in CI.

.gitlab-ci.yml yaml

# pin the CLI for reproducible runners
script:
  - CLEYROP_CLI_VERSION=1.14.2 \
      curl -fsSL https://downloads.cleyrop.tech/install.sh | sh
  - cleyrop login --client-secret $CLEYROP_CLIENT_SECRET
  - cleyrop files upload ./build/artifact.tar.gz \
      --project-id $PROJECT_ID

binaries · latest

all releases →

file	platform	size	sha256
loading…

Raw manifest: releases.json · latest.json

distribution

supply chain

runtime: Self-contained executable. No Python, no Node, no venv required on the target.
integrity: Every artifact ships a .sha256 sidecar. Installer verifies before extracting.
macOS signing: Signed with an Apple Developer ID certificate and notarized by Apple. Launches without a Gatekeeper prompt — no xattr workaround required.
retention: WORM-archived for ten years (OVH Object Storage, Object Lock COMPLIANCE mode). No version is retro-editable.
platforms: —