Rancher Fleet
What Rancher Fleet is
Rancher Fleet is an open-source engine for deploying and managing Kubernetes clusters through GitOps. It can deploy raw Kubernetes YAML, Helm charts, Kustomize configurations, or combinations of them from Git repositories. Fleet can handle an individual cluster or coordinate deployments across many clusters from a central point. In multi-cluster mode, a central manager works with downstream clusters, whose agents initiate communication with the Fleet controller; this network model allows managed clusters to sit behind NATs or in private networks. Fleet runs as a controller on an existing Kubernetes cluster and is distributed as a Helm chart, with installation requiring Helm 3. Private Git repository authentication supports HTTP basic authentication, SSH keys, and GitHub Apps. Fleet documents SSH host key entries for GitHub, GitLab, Bitbucket, and Azure DevOps, and strict SSH host key checks are enabled by default from version 0.13 onward. Fleet is self-hosted, supports Kubernetes cluster targets, and is listed as free. Its image scanning feature must be enabled during installation to use it.
Who it suits
Fleet suits teams that deploy Kubernetes resources from Git repositories and want to manage one cluster or coordinate many. It is relevant to users who can run a controller on an existing Kubernetes cluster and install Helm charts with Helm 3.
What it does well
- Deploys YAML, Helm charts, and Kustomize configurations from Git.
- Supports single-cluster and multi-cluster management.
- Supports GitHub, GitLab, Azure DevOps, Bitbucket, Bitbucket Server, and Gogs.
- Private Git authentication supports HTTP basic authentication, SSH keys, and GitHub Apps.
- Managed cluster agents can connect from behind NATs or private networks.
What to know first
- Requires an existing Kubernetes cluster and Helm 3 for installation.
- Does not support SSH proxy server authentication for private Git or Helm repositories.
- Image scanning is disabled by default.
- Helm credentials are forwarded only when helmRepoURLRegex is set and matches the chart repository URL.
Limits
Fleet does not support SSH proxy server authentication when cloning private Git repositories or using private Helm repositories. Image scanning is disabled by default and must be enabled during installation; Helm credentials are forwarded only when helmRepoURLRegex is set and matches the chart repository URL.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Fleet | Runs on an existing Kubernetes cluster · distributed as a Helm chart | Free |
As fleet.rancher.io lists them, read 2 Oct 2026. The maker's own page has the final word.
Getting started
- Open the Fleet website and installation documentation.
- Prepare an existing Kubernetes cluster.
- Install Helm 3.
- Install Fleet as a Helm chart on the cluster.
- Choose single-cluster or multi-cluster installation mode.
- Connect Git repositories and configure deployment sources and authentication as needed.
Verdict
Choose Fleet if you need a free, self-hosted GitOps engine to deploy Kubernetes resources from Git and manage clusters centrally. Look elsewhere if your private repository workflow requires SSH proxy server authentication; image scanning also needs to be enabled during installation.
Questions
How much does Fleet cost?
The listed Fleet plan is free. Fleet is open source and has a free plan.
What does Fleet deploy?
It deploys raw Kubernetes YAML, Helm charts, Kustomize configurations, or combinations of them from Git repositories.
What is required to install Fleet?
Fleet runs as a controller on an existing Kubernetes cluster, is distributed as a Helm chart, and its installation documentation requires Helm 3.
Which Git sources does Fleet support?
Supported sources include Azure DevOps, GitHub, GitLab, Bitbucket, Bitbucket Server, and Gogs.
Can Fleet manage multiple clusters?
Yes. It supports single-cluster and multi-cluster modes, with a central manager for downstream clusters in multi-cluster mode.
Does Fleet support SSH proxy authentication?
No. It does not support SSH proxy server authentication when cloning private Git repositories or using private Helm repositories.
Facts from Rancher Fleet's own pages
- Deployment formats
- Fleet can deploy raw Kubernetes YAML, Helm charts, Kustomize, or combinations of them from Git repositories. · fleet.rancher.io, 2 Oct 2026
- Feature default
- The image scanning feature is disabled by default and must be enabled during installation to use it. · fleet.rancher.io, 2 Oct 2026
- Git integrations
- Fleet documents SSH host key entries for GitHub, GitLab, Bitbucket, and Azure DevOps. · fleet.rancher.io, 2 Oct 2026
- Helm credential handling
- Fleet forwards Helm credentials only when helmRepoURLRegex is set and matches the chart repository URL. · fleet.rancher.io, 2 Oct 2026
- Install modes
- Fleet supports single-cluster and multi-cluster installation modes, with a central manager for downstream clusters in multi-cluster mode. · fleet.rancher.io, 2 Oct 2026
- Multi-cluster
- Fleet can manage a single Kubernetes cluster or large-scale deployments of clusters from a central point. · fleet.rancher.io, 2 Oct 2026
- Network model
- Managed cluster agents initiate communication to the Fleet controller, allowing managed clusters to run behind NATs or in private networks. · fleet.rancher.io, 2 Oct 2026
- Notable limitation
- Fleet does not support SSH proxy server authentication when cloning private Git repositories or using private Helm repositories. · fleet.rancher.io, 2 Oct 2026
- Purpose
- Fleet is a container management and deployment engine that uses GitOps to manage and monitor Kubernetes clusters. · fleet.rancher.io, 2 Oct 2026
- Repository authentication
- Private Git repository authentication supports HTTP basic authentication, SSH keys, and GitHub Apps. · fleet.rancher.io, 2 Oct 2026
- Requirements
- Fleet runs as a controller on an existing Kubernetes cluster and is distributed as a Helm chart; the installation documentation requires Helm 3. · fleet.rancher.io, 2 Oct 2026
- Security
- Fleet uses Kubernetes service accounts with restricted permissions for downstream clusters and individual Git repositories. · fleet.rancher.io, 2 Oct 2026
- SSH security default
- Strict SSH host key checks are enabled by default from Fleet v0.13 onward. · fleet.rancher.io, 2 Oct 2026
Where Rancher Fleet stands on Freedom251
- GitOps Tools#20 of 35