Skip to main content

⎈KubeVision

AI-native Kubernetes operations with human control

Investigate live cluster state, understand failures, and execute RBAC-controlled actions through natural language. Every mutation requires confirmation and remains auditable.

Get StartedGitHub →

Core Features

From natural-language investigation to guarded Kubernetes actions

AI

AI Operations Workspace

Investigate resources and logs with live page context, then execute RBAC-controlled actions with explicit approval.

⚡

Real-time Sync

Informer Watch → WebSocket Push. Sub-second updates across all connected clients, zero polling overhead.

🌐

Multi-cluster

Manage all your clusters from a single dashboard and switch contexts instantly.

💻

Terminal & Logs

Full Pod terminal with session recording & playback. Real-time log streaming with search and filtering.

🔒

Enterprise Security

5-level RBAC, TOTP 2FA with recovery codes, audit logging, Secrets masking, and instant token revocation.

🗺️

Resource Topology

Visual ownership graph showing relationships between Deployments, ReplicaSets, Pods, Services, and more.

Architecture

Clean layered design with real-time data flow

                    Browser
            ┌────────┴────────┐
            REST          WebSocket
            │                 │
┌───────────▼─────────────────▼──────────────┐
│  Middleware: RequestID → Logger → Auth       │
│                                             │
│  Handler ──→ Service ──→ K8sRepo            │
│                            │                │
│                 ┌──────────┴──────────┐     │
│                 │                     │     │
│          Informer Cache         API Server  │
│                 │                            │
│     Informer Watch ──→ EventListener        │
│                            │                │
│                        WS Hub ──→ Browser   │
│                                             │
│  DB: SQLite (dev) / PostgreSQL (prod)       │
└─────────────────────────────────────────────┘

📖 Read Path

Informer cache first for sub-millisecond responses. Automatic fallback to API Server when cache misses. 8 core resources cached, 18+ on-demand.

✏️ Write Path

API Server validates → Informer detects change → EventListener triggers → WS Hub broadcasts → all browsers update instantly.

🔌 Extensibility

Add a new resource type with 1 line of Go (registry) + 1 config block (UI). CRDs auto-discovered at runtime. Plugin system for Prometheus, Grafana, ArgoCD.

Human-in-the-loop

Operational Guardrails

AI assistance without giving up permission boundaries or accountability

AI

Guarded AI Actions

AI tools inherit user RBAC. Mutations pause for confirmation, are re-authorized at execution time, and produce audit records.

🔐

2FA (TOTP)

Two-factor authentication with QR setup, recovery codes, and admin-enforced enrollment.

🔬

Dry-Run Diff

Preview every change before applying. API Server validates your YAML and shows a side-by-side diff.

🎬

Terminal Recording

Every Pod/Node terminal session recorded in asciinema format. Admins can replay sessions for audit and training.

⌨️

kubectl Hints

Every UI action shows the equivalent kubectl command. Learn Kubernetes CLI while using the dashboard.

🙈

Secrets Masking

Secrets are masked by default in all views. Explicit action required to reveal — no accidental exposure.

Quick Start

Get up and running in under 5 minutes

# Add the KubeVision Helm repository
helm repo add kubevision https://kubevision.github.io/charts
helm repo update

# Install KubeVision
helm install kubevision gocronx/kubevision

# Temporarily access the dashboard from this machine
kubectl port-forward svc/kubevision 8080:8080
open http://localhost:8080