Core Features
Everything you need to manage Kubernetes clusters at scale
Real-time Sync
Informer Watch → WebSocket Push. Sub-second updates across all connected clients, zero polling overhead.
Multi-cluster
Manage all your clusters from a single dashboard. Switch contexts instantly, compare resources across environments.
Terminal & Logs
Full Pod terminal with session recording & playback. Real-time log streaming with search and filtering.
Enterprise Security
5-level RBAC, TOTP 2FA with recovery codes, audit logging, Secrets masking, and instant token revocation.
Resource Topology
Visual ownership graph showing relationships between Deployments, ReplicaSets, Pods, Services, and more.
Global Search
Cmd+K fuzzy search across all clusters, namespaces, and resource types. Find anything in milliseconds.
Architecture
Clean layered design with real-time data flow
Browser
┌────────┴────────┐
REST WebSocket
│ │
┌───────────▼─────────────────▼──────────────┐
│ Middleware: RequestID → Logger → Auth │
│ │
│ Handler ──→ Service ──→ K8sRepo │
│ │ │
│ ┌──────────┴──────────┐ │
│ │ │ │
│ Informer Cache API Server │
│ │ │
│ Informer Watch ──→ EventListener │
│ │ │
│ WS Hub ──→ Browser │
│ │
│ DB: SQLite (dev) / PostgreSQL (prod) │
└─────────────────────────────────────────────┘
📖 Read Path
Informer cache first for sub-millisecond responses. Automatic fallback to API Server when cache misses. 8 core resources cached, 18+ on-demand.
✏️ Write Path
API Server validates → Informer detects change → EventListener triggers → WS Hub broadcasts → all browsers update instantly.
🔌 Extensibility
Add a new resource type with 1 line of Go (registry) + 1 config block (UI). CRDs auto-discovered at runtime. Plugin system for Prometheus, Grafana, ArgoCD.
Unique Capabilities
Features no other Kubernetes dashboard provides
2FA (TOTP)
Two-factor authentication with QR setup, recovery codes, and admin-enforced enrollment. No other K8s dashboard offers this.
Dry-Run Diff
Preview every change before applying. API Server validates your YAML and shows a side-by-side diff.
Cross-Cluster Diff
Compare the same resource across clusters or environments. Spot configuration drift instantly with Monaco Diff Editor.
Terminal Recording
Every Pod/Node terminal session recorded in asciinema format. Admins can replay sessions for audit and training.
kubectl Hints
Every UI action shows the equivalent kubectl command. Learn Kubernetes CLI while using the dashboard.
Secrets Masking
Secrets are masked by default in all views. Explicit action required to reveal — no accidental exposure.
Quick Start
Get up and running in under 5 minutes
- Helm
- Docker
- Development
# Add the KubeVision Helm repository
helm repo add kubevision https://kubevision.github.io/charts
helm repo update
# Install KubeVision
helm install kubevision gocronx/kubevision
# Access the dashboard
kubectl port-forward svc/kubevision 8080:8080
open http://localhost:8080
# Build and run with Docker
docker build -f deploy/Dockerfile -t kubevision:latest .
docker run -p 8080:8080 \
-v ~/.kube/config:/root/.kube/config:ro \
kubevision:latest
# Open http://localhost:8080
# Default login: admin / admin123
git clone https://github.com/gocronx/kubevision.git
cd kubevision
# Backend — starts on :8080
go mod tidy && make dev
# Frontend — starts on :5173, proxies /api → :8080
cd web && pnpm install && pnpm dev
How We Compare
KubeVision vs popular Kubernetes dashboards
| Feature | KubeVision | Headlamp | K9s | Kuboard |
|---|---|---|---|---|
| Multi-cluster | ✓ | ✓ | ✓ | ✓ |
| 2FA (TOTP) | ✓ | — | — | — |
| Dry-Run Diff | ✓ | — | — | — |
| Cross-cluster Diff | ✓ | — | — | — |
| Terminal Recording | ✓ | — | — | — |
| Secrets Masking | ✓ | — | — | — |
| kubectl Hints | ✓ | — | — | — |
| Audit Logging | ✓ | — | — | ✓ |
| Resource Topology | ✓ | ✓ | ✓ | ✓ |
| Real-time WebSocket | ✓ | ✓ | ✓ | ✓ |
| Global Search | ✓ | ✓ | ✓ | — |
| Plugin System | ✓ | ✓ | ✓ | — |
| Dark Mode | ✓ | ✓ | ✓ | — |
| i18n | ✓ | ✓ | — | ✓ |