
PipeCD
PipeCD is an open-source, GitOps-style continuous delivery platform for consistent deployment and operations across applications.
What PipeCD is
PipeCD is an open-source, GitOps-style continuous delivery platform for consistent deployment and operations across applications. Deployment operations run through Git pull requests, with one interface for Kubernetes, Terraform, GCP Cloud Run, AWS Lambda, AWS ECS, and other targets. A plugin architecture lets users add deployment support for custom applications or platforms. PipeCD says a pipeline definition and application manifests are sufficient, without changes to CRDs or application manifests. Built-in deployment analysis evaluates impact using metrics, logs, and emitted requests. The platform can roll back automatically after an analysis or pipeline-stage failure, detect configuration drift, and trigger deployments from defined events. Its interface presents deployment pipelines, per-deployment logs, real-time application state, and delivery-performance insights. PipeCD is self-hosted: a Control Plane manages deployments centrally, while piped agents execute them through plugin binaries. Security features include single sign-on and role-based access control; credentials stay out of the control plane, and piped makes only outbound requests. For private Git repositories, piped needs a private SSH key and the matching public key added to the repository. PipeCD is released under the Apache 2.0 license.
Good
- Git pull requests drive deployment operations
- Supports Kubernetes, Terraform, Cloud Run, Lambda, and ECS
- Can roll back after analysis or pipeline-stage failures
- Detects configuration drift and supports event-triggered deployments
- Open source under the Apache 2.0 license
Watch out
- Requires self-hosting on your own infrastructure
- Private Git repositories require SSH key setup
- Deployment operations depend on pipeline definitions and application manifests
Who it suits
PipeCD suits teams seeking a self-hosted GitOps deployment platform across multiple infrastructure targets, including custom platforms.
Verdict
PipeCD offers a self-hosted delivery workflow with deployment analysis, rollback, and support for multiple targets. Teams need to operate its Control Plane and piped agents, and configure SSH keys for private repositories.
Plans and prices
From PipeCD's own pricing page, checked 1 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Open source | Free | Apache 2.0 license |
The facts
Each one read from PipeCD's own pages, with the date it was checked.
What it does
- Analysis integrations
- Named analysis integrations include Prometheus, Datadog, Stackdriver and CloudWatch.checked 15 Oct 2026
- API
- The control plane provides gRPC connectivity for piped agents and web/API endpoints for clients.checked 15 Oct 2026
- Architecture
- The control plane is a web service exposing UI, API endpoints and metadata storage, while piped is a lightweight agent that runs plugins.checked 15 Oct 2026
- Automatic rollback
- The product can stop a failed deployment and roll back to the preceding state.checked 15 Oct 2026
- Automation
- PipeCD can automatically roll back after an analysis or pipeline-stage failure, detect configuration drift and trigger deployments from defined events.checked 1 Oct 2026
- CNCF code metrics
- CNCF reports 176 GitHub stars, 239 forks and estimated software value of $17.7 million.checked 15 Oct 2026
- CNCF contributors
- CNCF reports 494 contributors and 118 contributing organizations for PipeCD.checked 15 Oct 2026
- CNCF health score
- The CNCF project page shows a health score marked Concerning (33).checked 15 Oct 2026
- CNCF project age
- CNCF lists PipeCD's first commit as March 9, 2020.checked 15 Oct 2026
- CNCF status
- CNCF accepted PipeCD as a Sandbox project on May 17, 2023.checked 15 Oct 2026
- Credential handling
- PipeCD states that deployment credentials remain in the cluster and are not stored in the control plane.checked 15 Oct 2026
- Deployment analysis
- PipeCD can evaluate deployments with metrics, logs and emitted requests through analysis providers.checked 15 Oct 2026
- Deployment targets
- The same deployment interface supports Kubernetes, Terraform, GCP Cloud Run, AWS Lambda, AWS ECS and more.checked 1 Oct 2026
- Documentation
- Documentation includes overview, concepts, quickstart, installation, user and contributor guides, examples, feature status, FAQ and release links.checked 15 Oct 2026
- Drift detection
- PipeCD detects configuration drift and can notify users about changes.checked 15 Oct 2026
- Event triggers
- Deployments can be triggered by events such as a container image push or Helm chart publication.checked 15 Oct 2026
- GitOps workflow
- PipeCD enables deployment operations through pull requests on Git.checked 1 Oct 2026
- Installation prerequisite
- Single-machine installation requires a registered piped identifier and key, plus an SSH key for private Git repositories.checked 15 Oct 2026
- Integrations
- Analysis providers include Prometheus, Datadog and Stackdriver, while notifications can be sent to Slack or webhook endpoints.checked 1 Oct 2026
- Internal usage
- CyberAgent reports PipeCD is used by more than 3,500 internal applications and supports thousands of deployments per day.checked 15 Oct 2026
- Latest release
- GitHub lists PipeCD v0.58.0 released on August 23, 2026.checked 15 Oct 2026
- License
- PipeCD is released as open source under Apache License 2.0.checked 15 Oct 2026
- Limit: API authorization granularity
- An open GitHub issue requests API-key scopes beyond the existing READ_ONLY and READ_WRITE choices.checked 15 Oct 2026
Money
- Control-plane storage
- The architecture supports managed or self-managed MySQL-compatible data storage and managed or self-managed object/file storage such as S3 or Minio.checked 15 Oct 2026
The full review of PipeCD
Overview
PipeCD is an open-source continuous delivery platform for teams that manage deployments through Git pull requests. It suits organizations that want one workflow across varied deployment targets and can run the delivery infrastructure themselves. Its broad target support and automatic rollback are strong draws; operating the Control Plane and piped agents is the central trade-off.
Key features
PipeCD brings deployment operations into pull requests and uses a shared interface for Kubernetes, Terraform, GCP Cloud Run, AWS Lambda, AWS ECS and other targets. Its plugin architecture lets teams extend deployments to custom applications or platforms, making it useful for mixed environments. That flexibility comes with plugin and pipeline configuration to manage.
PipeCD does not require changes to CRDs or application manifests, but teams still need a pipeline definition. That can preserve existing application configuration while adding a separate delivery artifact to maintain.
Built-in deployment analysis measures impact through metrics, logs and emitted requests. Teams can configure automatic rollback after analysis or pipeline-stage failures, detect configuration drift and trigger deployments from defined events. These controls can reduce manual response, though their usefulness depends on defining appropriate checks and stages.
The interface combines pipeline visibility, per-deployment logs, real-time application-state views and delivery-performance insights. Prometheus, Datadog and Stackdriver can provide analysis data; notifications can go to Slack or webhook endpoints. Single sign-on and role-based access control support access management. Credentials stay out of the Control Plane, and piped makes only outbound requests, a design that may suit teams with tighter infrastructure boundaries.
Pricing
PipeCD is open source under the Apache 2.0 license, with its Open source plan listed as free. It includes pipeline as code, approval gates, progressive delivery and automated rollback, and uses a self-hosted deployment model. There is no paid tier described; teams should weigh the zero license cost against the work of operating the Control Plane and agents.
Platforms
PipeCD is listed for API, Linux, macOS, self-hosted use and web. Its architecture centers on a Control Plane for centralized management and piped agents that execute deployments through plugin binaries. Self-hosting requires installation and operation on your own infrastructure. For private Git repositories, piped needs a private SSH key, with the corresponding public key added to the repository.
Who it's for
PipeCD is best for teams that want Git-based delivery across several deployment targets, need analysis and rollback in the workflow, and have the capacity to operate self-hosted infrastructure. It is less suitable for readers seeking a managed delivery service or teams unwilling to configure agents, pipelines and private-repository access. Support is community-oriented through documentation, GitHub issues and discussions, and the CNCF Slack #pipecd channel.
Pros and cons
- Pros: One pull-request workflow spans multiple deployment targets, and plugins can extend it to custom platforms.
- Pros: Analysis-driven rollback, drift detection and event-triggered deployments give teams several ways to automate delivery operations.
- Pros: The Apache 2.0 open-source plan costs nothing and includes approval gates and progressive delivery.
- Cons: Teams must run the Control Plane and piped agents themselves, so zero license cost does not remove operational responsibility.
- Cons: Private Git repositories require SSH key setup, adding a credential-management step to deployment configuration.
Alternatives
For a Kubernetes-focused controller and CRD approach, Argo Rollouts offers a self-hosted free and open-source plan at no cost. KubeVela is another self-hosted Kubernetes option, with its Apache-2.0 open-source control plane at no cost.
Weave GitOps may suit teams already using Flux and a Kubernetes cluster: its open-source plan is free and its CLI supports macOS and Linux, while its Enterprise plan has custom pricing. Kargo is worth considering for teams wanting an Akuity Pro instance, priced at $495 a month, with one instance and 50 Kargo stages included.
Octopus Deploy offers a freemium option and a Machines add-on priced at $770 a year, with a default of 10 machines and options shown up to 1,000. Northflank has a free Sandbox with two services, one database and two cron jobs, plus always-on compute. Kanary is a self-managed, MIT-licensed Kubernetes deployment option. Spinnaker is another free, self-hosted open-source choice that requires installation and configuration.
Browse more options in Progressive Delivery Software, Continuous Delivery Software, GitOps Tools and Kubernetes Deployment Tools.
Verdict
Choose PipeCD if your team wants a Git-driven delivery workflow that can span multiple targets, with deployment analysis and automated rollback, and is prepared to operate its own infrastructure. Look elsewhere if you need a managed service or want to avoid the ongoing responsibility of running the Control Plane and piped agents.
Alternatives to PipeCD
- 1

Codemagic
Free planAndroidiOSWebAPI8.2From $99 a month - 2

Bitrise
Free planAndroidiOSWebAPI7.7From $89 a month - 3
OpsMx Intelligent Software Delivery Platform
Free planWebAPISelf-hosted7.4From $25 a month - 4

Octopus Deploy
Free planWebAPILinuxSelf-hosted7.3From $4,330 a year - 5
GoCD
Free planWebAPILinuxmacOS7.2Free plan - 6

Appcircle
Free planAndroidiOSWebAPI7.0Free plan
