finnest deploy

Deploy Finnest for a deployment target.

Run readiness checks, preview, apply, release status, and smoke checks for a target. Regulated seed material (Open Finance & Open Insurance) comes from the FINNEST_* env vars, falling back per key to the secrets write persisted store — env always overrides persisted.

Examples

finnest deploy --cloud=aws --environment=sandbox --preview

finnest deploy --cloud=azure --environment=sandbox --preview

finnest deploy --cloud=aws --environment=prod --apply --yes

finnest deploy --cloud=azure --environment=prod --apply --yes

Options

• --cloud <cloud> — Target cloud for setup, deploy, and diagnostics.
• --environment <environment> — Target environment: sandbox or prod.
• --region <region> — Target cloud region or Azure location.
• --config <path> — Path to an explicit Finnest TOML configuration file.
• --preview — Preview runtime changes without applying them.
• --apply — Apply runtime changes in explicit mutating mode.
• --yes — Approve a mutating operation.
• --runtime-source <path> — Finnest runtime bundle source directory.
• --skip-bootstrap — Skip bootstrap during deploy recovery.
• --adopt — Preview deploy recovery adoption for safe state drift cases.
• --non-interactive — Disable interactive prompts where a command supports a prompt-based flow.
• --plain — Force headless output even on an interactive TTY.
• --allow-demo-trust-anchors — Accept a resolved Azure-sandbox demo trust anchor (Kong admin CA / OPIN probe pair) as a warning instead of a deploy-preflight failure.
• --allow-image-drift — Accept a live-vs-expected runtime image mismatch as a warning instead of a deploy-preflight failure.
• --json — Emit a schema-versioned JSON envelope to stdout.
• --output <format> — Select text, json, or ndjson output.
• --no-color — Disable ANSI color without changing the output content mode.
• --no-evidence — Do not write .finnest run evidence.
• --verbose — Enable debug-level diagnostics.