# Install cmctl with Homebrew, apk, MacPorts, Nix, pacman, scoop, zypper

Command-line tool to manage cert-manager. Version 2.5.0 via Homebrew; verified 2026-04-30.

## Install

```sh
sudo av install brew:cmctl
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install cmctl
```

  Evidence: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install cmctl
```

  Evidence: MacPorts ports tree: sysutils/cmctl/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- apk (92%):

```sh
sudo apk add cmctl
```

  Evidence: Alpine Linux edge package indexes: cmctl from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

- Nix (92%):

```sh
nix profile install nixpkgs#cmctl
```

  Evidence: nixpkgs package indexes: pkgs/by-name/cm/cmctl/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- pacman (92%):

```sh
sudo pacman -S cmctl
```

  Evidence: Arch Linux sync databases: cmctl from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

- zypper (92%):

```sh
sudo zypper install cmctl
```

  Evidence: openSUSE Tumbleweed package metadata: cmctl from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst

### Windows

- Scoop (92%):

```sh
scoop install main/cmctl
```

  Evidence: Scoop official bucket manifest trees: bucket/cmctl.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

## Package facts

- **Package key:** brew:cmctl
- **Package manager:** Homebrew
- **Package manager page:** <https://formulae.brew.sh/formula/cmctl>
- **Version:** 2.5.0
- **Source summary:** Command-line tool to manage cert-manager
- **Homepage:** <https://cert-manager.io>
- **Repository:** <https://github.com/cert-manager/cmctl>
- **Upstream docs:** <https://cert-manager.io/docs/cli/cmctl>
- **License:** Apache-2.0
- **Source archive:** <https://github.com/cert-manager/cmctl/archive/refs/tags/v2.5.0.tar.gz>
- **Last updated:** 2026-04-30T21:34:41Z
- **Generated:** 2026-07-08T07:18:31+00:00

## Executables

- cmctl (cli)
- cmctl (alias)

## Build dependencies

- go

## Install behavior

- Post-install hook: not defined
- Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux

## Freshness

- Page generated: 2026-07-08
- Package-manager version: 2.5.0
- Package-manager updated: 2026-04-30
- Local data: ok
- Upstream repository: https://github.com/cert-manager/cmctl
- Upstream latest detected: v2.5.0 (current)
## Project history and usage

cmctl is the command-line companion for cert-manager, focused on managing cert-manager resources inside Kubernetes clusters.

### Project history

The official README states that before v2, cmctl lived in the cert-manager repository and was versioned together with cert-manager. Starting with v2, cmctl is versioned separately in its own repository.

The standalone GitHub repository was created in January 2024 and its release stream begins with v2.0.0 prereleases and v2.0.0 in March 2024.

### Adoption history

cmctl follows cert-manager into Kubernetes operator workflows: it can inspect certificates, approve or deny CertificateRequests, check cert-manager health, and assist with installation, upgrade, and uninstall tasks. The official README documents Homebrew, Go install, manual release binaries, shell completion, and distributed third-party packages.

### How it is used

Official docs describe `cmctl` as a tool for managing cert-manager resources inside a cluster. Typical usage is operational rather than general-purpose: checking API health, inspecting Certificate and CertificateRequest objects, approving or denying requests, and using experimental `cmctl x` subcommands around cert-manager installation and lifecycle tasks.

### Why package nerds care

cmctl matters to package nerds because it is a Kubernetes ecosystem CLI with multiple distribution channels: Homebrew on macOS/Linux, Go install, GitHub release binaries, shell completions, and distro packages. Its separate v2 versioning is a packaging boundary: the CLI can now release independently of the controller it manages.

### Timeline

- 2024-01: Standalone cmctl repository created.
- 2024-03: v2.0.0 released, establishing the separately versioned CLI line.
- 2024-06: v2.1.0 released.
- 2025: v2.2.0 and later releases continue the standalone series.

### Related projects

- cmctl is directly related to cert-manager and Kubernetes. The README also documents an alternate installation name, `kubectl-cert_manager`, for use as a kubectl plugin-style command.

### Sources

- <https://github.com/cert-manager/cmctl#readme>
- <https://cert-manager.io/docs/reference/cmctl/>
- <https://api.github.com/repos/cert-manager/cmctl>
- <https://api.github.com/repos/cert-manager/cmctl/releases>


## Security Notes

narrow executable package without higher-risk signals.

- **Geiger risk:** green / low
- narrow executable package without higher-risk signals

## Source Database Details

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** cmctl
- **Version Scheme:** 0
- **Revision:** 0
- **Head Version:** HEAD
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** no
- **URL Keys:** head, stable

## Other Package-Manager Records

- Nix - cmctl: normalized package name match | nixpkgs package indexes: pkgs/by-name/cm/cmctl/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- apk - cmctl - 2.4.1-r2: normalized package name match | Alpine Linux edge package indexes: cmctl from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Command-line tool for interacting with cert-manager | https://cert-manager.io/
- apk - cmctl-bash-completion - 2.4.1-r2: normalized package name match | Alpine Linux edge package indexes: cmctl-bash-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Bash completions for cmctl | https://cert-manager.io/
- apk - cmctl-fish-completion - 2.4.1-r2: normalized package name match | Alpine Linux edge package indexes: cmctl-fish-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Fish completions for cmctl | https://cert-manager.io/
- apk - cmctl-zsh-completion - 2.4.1-r2: normalized package name match | Alpine Linux edge package indexes: cmctl-zsh-completion from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Zsh completions for cmctl | https://cert-manager.io/
- apk - kubectl-cert-manager - 2.4.1-r2: normalized package name match | Alpine Linux edge package indexes: kubectl-cert-manager from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Use cmctl as a kubectl plugin | https://cert-manager.io/
- pacman - cmctl - 2.5.0-1: normalized package name match | Arch Linux sync databases: cmctl from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | CLI tool manage and configure cert-manager resources for Kubernetes | https://github.com/cert-manager/cmctl
- zypper - cmctl - 2.5.0-1.1: normalized package name match | openSUSE Tumbleweed package metadata: cmctl from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | CLI tool that can help you to manage cert-manager resources inside your cluster | https://github.com/cert-manager/cmctl
- zypper - cmctl-bash-completion - 2.5.0-1.1: normalized package name match | openSUSE Tumbleweed package metadata: cmctl-bash-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Bash Completion for cmctl | https://github.com/cert-manager/cmctl
- zypper - cmctl-fish-completion - 2.5.0-1.1: normalized package name match | openSUSE Tumbleweed package metadata: cmctl-fish-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Fish Completion for cmctl | https://github.com/cert-manager/cmctl
- zypper - cmctl-zsh-completion - 2.5.0-1.1: normalized package name match | openSUSE Tumbleweed package metadata: cmctl-zsh-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Zsh Completion for cmctl | https://github.com/cert-manager/cmctl
- MacPorts - cmctl: normalized package name match | MacPorts ports tree: sysutils/cmctl/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
- Scoop - main/cmctl: normalized package name match | Scoop official bucket manifest trees: bucket/cmctl.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1


## Related links

- [Cloud CLI packages](https://www.automicvault.com/pkg/cloud-clis/) - Belongs to a cloud or infrastructure command family.
- [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata.
- [Text processing packages](https://www.automicvault.com/pkg/text-processing-tools/) - Matched text, document, or structured-data processing metadata.
- [Developer build packages](https://www.automicvault.com/pkg/developer-build-tools/) - Matched build, compiler, generator, or developer workflow metadata.
- [go](https://www.automicvault.com/pkg/brew/go/) - Build dependency declared by Homebrew.
- [kubekey](https://www.automicvault.com/pkg/brew/kubekey/) - Shares av.db curated category or tags: cli, cluster-management, developer-tools, kubernetes.
- [kubernetes-cli](https://www.automicvault.com/pkg/brew/kubernetes-cli/) - Shares av.db curated category or tags: cli, cluster-management, developer-tools, kubernetes.
- [chart-releaser](https://www.automicvault.com/pkg/brew/chart-releaser/) - Shares av.db curated category or tags: cli, developer-tools, kubernetes.
- [chart-testing](https://www.automicvault.com/pkg/brew/chart-testing/) - Shares av.db curated category or tags: cli, developer-tools, kubernetes.
- [cri-tools](https://www.automicvault.com/pkg/brew/cri-tools/) - Shares av.db curated category or tags: cli, developer-tools, kubernetes.
- [kamel](https://www.automicvault.com/pkg/brew/kamel/) - Shares av.db curated category or tags: cli, developer-tools, kubernetes.
- [kapp](https://www.automicvault.com/pkg/brew/kapp/) - Shares av.db curated category or tags: cli, developer-tools, kubernetes.
- [karmadactl](https://www.automicvault.com/pkg/brew/karmadactl/) - Shares av.db curated category or tags: cli, developer-tools, kubernetes.
- [krew](https://www.automicvault.com/pkg/brew/krew/) - Local package facts share a topical domain. Shared terms: cli, developer, developer-tools, kubernetes, management.

## Combined YAML source

View the package source record on GitHub. [combined/cmctl.yml](https://github.com/automic-vault/db/blob/main/combined/cmctl.yml)


## Sources

- Nucleus package database
- Geiger risk classifier
- package-page enrichment
- curated package history
- package version freshness
- av.db category and tag curation
- package relationship graph
- external package-manager database matches
- cross-ecosystem install command graph
