$ bns environments deploy --target customer-cloud

Ship to Any Cloud.
Any Customer.

Deploy cloud-native apps to enterprise customers — on-premises, private clouds, or hybrid. Same definition, any destination.

No credit card required

B
Enterprise Delivery / Customer Environments
CustomerRegionStatus
acme-produs-east-1Running
techcorp-prodeu-west-1Running
globalbankon-premDeploying
How Bunnyshell works — architecture diagram

$ cat how-it-works.md

How Bunnyshell works

01

Connect your repo

Link your GitHub, GitLab, or Bitbucket repository. Define your environment using Docker Compose, Helm, or Terraform — tools you already use.

GitHubGitHub
GitLabGitLab
BitbucketBitbucket
DockerDocker
HelmHelm
K8sK8s
02

Open a pull request

Bunnyshell auto-provisions an isolated, full-stack environment for every PR. Share the preview URL with your team.

PR #142env-142.preview.bunnyshell.dev• Running
PR #143env-143.preview.bunnyshell.dev• Running
PR #144env-144.preview.bunnyshell.dev• Running
03

Merge and move on

Tests pass, code is reviewed, PR merges. The environment auto-destroys. No cleanup. No surprise cloud bills.

End-to-end tests passed
Code review approved
Merged — environment destroyed

See it in action.

Deploy your first customer environment in under 30 minutes. Free tier — no credit card required.

01

One Definition.
Every Customer.

Same bunnyshell.yaml deploys to AWS, GCP, Azure, on-prem, or air-gapped environments. Write once, deliver everywhere.

  • Cloud-agnostic definitionsone YAML file targets AWS, GCP, Azure, on-prem, and air-gapped clusters
  • Helm + Terraform nativeuse the same charts and modules across every customer deployment
  • Template inheritancebase templates with per-customer overrides. No copy-paste drift
  • Version-controlledevery definition change tracked in Git. Full audit trail on who changed what
See environment definitions
B
Enterprise Delivery / bunnyshell.yaml
# Single definition — deploys everywhere
kind: Environment
name: {{ customer.name }}-prod
cloud: {{ customer.cloud }}
region: {{ customer.region }}
# Targets:
   AWS   GCP   Azure
   On-prem   Air-gapped
02

Per-Customer
Configuration.

Variable Groups per customer. Different regions, different resource limits, different feature flags — same base definition.

  • Variable Groupsdefine region, resources, and feature flags per customer without touching the template
  • Secret scopingcustomer-specific credentials and API keys isolated at the environment level
  • Resource limitsset CPU, memory, and storage quotas per customer environment
  • Feature flagstoggle features per customer without maintaining separate codebases
See variable groups
B
Enterprise Delivery / Variable Groups
CustomerRegionResourcesFlags
acme-produs-east-14 vCPUanalytics=on
techcorp-prodeu-west-18 vCPUsso=on, audit=on
globalbankon-prem16 vCPUair-gap=on
03

Automated
Upgrade Paths.

Push an update to the template. Roll it out to customer environments one by one or all at once. Controlled, versioned, auditable.

  • Staged rolloutsdeploy to canary customers first, then roll out to the full fleet
  • Version pinningpin specific customers to stable versions while others get the latest
  • Rollback in secondsrevert any customer to a previous version with a single command
  • Audit trailevery upgrade logged — who triggered it, what changed, which customers were affected
See deployment workflows
B
Enterprise Delivery / Rollout — v2.4.1
CustomerVersionStatus
acme-prodv2.4.1Deployed
techcorp-prodv2.4.1Deploying
globalbankv2.3.8Scheduled
04

Multi-Tenant
Isolation.

Each customer gets dedicated namespaces, network policies, and secrets. Full isolation on shared or dedicated clusters.

  • Namespace isolationevery customer runs in a dedicated Kubernetes namespace with its own service accounts
  • Network policiesdeny-all-ingress by default. Explicit rules for cross-service communication
  • Secrets per customerVault-backed secrets scoped to individual customer environments
  • Shared or dedicated clustersrun multiple customers on one cluster or give enterprise customers their own
See isolation & security
B
Enterprise Delivery / Isolation & Security
# Customer: acme-prod
namespace: acme-prod-ns
networkPolicy: deny-all-ingress
secrets: vault://acme-prod/*
cluster: shared-us-east-1
# Customer: globalbank
namespace: globalbank-ns
networkPolicy: deny-all-ingress
secrets: vault://globalbank/*
cluster: dedicated-on-prem

Every team in your delivery org
moves faster.

ISVs

Ship to customer clouds

Deploy your product to any customer infrastructure — AWS, GCP, Azure, or on-prem. One definition, every destination.

Platform Teams

Standardize delivery

Define golden templates. Enforce deployment standards across every customer environment without manual intervention.

DevOps Engineers

Automate customer deploys

Stop writing custom scripts per customer. Bunnyshell handles multi-cloud orchestration with a single pipeline.

Solution Architects

Design once, deploy anywhere

Architect a single reference deployment that adapts to each customer's cloud, region, and compliance requirements.

Customer Success

Manage customer environments

Monitor status, trigger upgrades, and troubleshoot customer deployments — all from a single dashboard.

Engineering Leaders

Scale delivery operations

Go from 5 customers to 500 without scaling your DevOps team linearly. Standardized delivery that compounds.

One definition. Every customer cloud.

Free tier includes 5 environments. No credit card required. Free white-glove onboarding.

Teams delivering software
to enterprise customers.

Enterprise-grade security.
Your data stays in your cloud.

Bunnyshell connects to YOUR Kubernetes cluster. Your code and data never leave your infrastructure. SOC 2, ISO 27001, and ISO 9001 compliant.

SOC 2
ISO 27001
ISO 9001

RBAC

Three-layer permission model: Policies, Resource Selectors, and Teams. Granular enough for enterprise.

SSO

Enterprise single sign-on. Integrate with your existing identity provider.

Network Isolation

Dedicated Kubernetes namespace per environment. Pods accessible only within their namespace.

Secrets Management

Environment variables and secrets handled securely. Never hard-coded, always encrypted.

IP Whitelisting

Restrict access to specific IP ranges. Control who can reach your environments.

Audit Logs

Full audit trail for every environment action. Who deployed what, when, and where.

Frequently asked
questions

Can’t find what you’re looking for? Talk to our team

Enterprise delivery is the process of deploying your software product to your customers’ infrastructure — whether that is AWS, GCP, Azure, on-premises, or air-gapped environments. Bunnyshell lets you define your application once in a bunnyshell.yaml and deploy it to any target cloud using per-customer variable groups.

Scale delivery without scaling your team.

Start free — deploy to your first customer environment in minutes. Free tier includes 5 environments. No credit card required. Free white-glove onboarding.