Your single pane of glass into Kubernetes.
Real-time visibility, FinOps, AI-powered debugging, cross-cluster ops, GitOps, security, and 40+ features in one binary. 29 distributions auto-detected. Zero dependencies. Opens in your browser in seconds.
Everything k9s, Lens, and kubectl do — plus FinOps, GitOps, Fleet Management, and more
See it in actionSee it in action.
Click through the features that make KubeGlass the last Kubernetes tool you'll need.
| Subject | get | list | watch | create | update | patch | delete | exec |
|---|---|---|---|---|---|---|---|---|
|
SA
|
✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
|
JC
|
✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✕ | ✓ |
|
MK
|
✓ | ✓ | ✓ | ✕ | ✕ | ✕ | ✕ | ✕ |
|
CI
|
✓ | ✓ | ✕ | ✓ | ✓ | ✓ | ✕ | ✕ |
| Namespace | CPU Cost | Mem Cost | Total | Efficiency | Right-sizing |
|---|---|---|---|---|---|
| production | $1,240 | $680 | $1,920 | 78% | Optimized |
| staging | $520 | $410 | $930 | 45% | ⚠ Over-provisioned |
| data-pipeline | $380 | $290 | $670 | 82% | Optimized |
| monitoring | $290 | $180 | $470 | 63% | ⚠ Review |
| kube-system | $140 | $88 | $228 | 91% | Optimized |
| Release | Chart | Version | Status | Updated | Rev |
|---|---|---|---|---|---|
| ingress-nginx kube-system |
ingress-nginx | 4.10.0 | ● deployed | 2 hours ago | 14 |
| cert-manager cert-manager |
cert-manager | 1.14.4 | ● deployed | 1 day ago | 8 |
| prometheus-stack monitoring |
kube-prometheus-stack | 57.2.0 → 58.1.0 | ● upgrade available | 3 days ago | 21 |
| redis caching |
redis | 18.16.1 | ● deployed | 5 days ago | 6 |
| api-gateway production |
api-gateway | 2.14.1 | ● failed | 12 min ago | 9 |
| external-dns kube-system |
external-dns | 1.14.3 | ● deployed | 1 week ago | 3 |
Everything you need.
Nothing you don't.
A single binary that replaces your entire Kubernetes toolchain. Real-time. Zero config. Zero external dependencies.
Real-Time Dashboard
WebSocket-powered live updates. Watch pods spin up, events fire, and metrics change in real-time. Not polling every 5 seconds like everyone else. Truly instant cluster visibility.
Integrated Terminal
Pod exec, node shell, local shell. Split panes, broadcast mode, session recording, k9s-style colon commands — all in your browser.
Resource Explorer
Browse, search, and manage every resource type. CRD auto-discovery runs every 5 minutes. YAML editor with apply. No restarts needed.
RBAC Access Matrix
Visual access matrix showing who can do what, across every namespace. Spot overprivileged secrets in seconds.
Prometheus Metrics
Native Prometheus integration. Resource heatmaps for CPU & memory. Active alert surface inline. No Grafana required.
Multi-Cluster Management
Switch contexts seamlessly. Terminal sessions survive context switches and are color-coded per cluster. Open shells on prod and staging side-by-side without fear.
Helm Releases
View, manage, and inspect Helm releases directly. See release history, values, and manifests without touching the CLI.
Command Palette
Keyboard-first with ⌘K. Quick commands, colon navigation, Vim-style pane switching. Feels like your IDE.
Live Log Streaming
WebSocket-powered log tailing with regex filtering. Follow container logs across restarts. Search scrollback with match highlighting.
Keyboard-First. Always.
Every action is reachable without a mouse. Your colon commands work here.
Drift Detection
Automatically detect when live resources diverge from their desired state. Scheduled comparison engine with policy rules — catch misconfigurations before they become outages. Visual diffs show exactly what changed.
Health Scan
Automated cluster health checks across dozens of best-practice rules. Get a health score with actionable remediation steps — not just red/green lights.
Fleet Management
Manage dozens of clusters from one view. Fleet-wide search (⌘⇧K), cross-cluster events, aggregated metrics, and instant context switching.
Network Topology
Interactive force-directed graph showing service-to-service connections, ingress routes, and network policies. See traffic flow at a glance.
Xray Resource Tree
Visualize resource ownership and dependencies. Deployment → ReplicaSet → Pod → Container hierarchy, rendered as an interactive tree.
GitOps & GitHub Integration
Connect repositories, view sync status, and compare live resources against Git manifests. Inline diff viewer shows exactly what drifted from source of truth. Native GitHub integration for PR-driven workflows.
Smart Alerts
Configurable alert channels with intelligent deduplication. Get notified about the issues that matter — not noise.
Port Forwarding
One-click port forward to any pod or service. Manage active forwards visually — no more kubectl port-forward terminals running in the background.
Guided Troubleshoot
Step-by-step guided debugging for pods, deployments, and services. Root cause analysis with suggested fixes — like having an SRE looking over your shoulder.
FinOps: Cost & Right-sizing
Per-namespace cost estimation, CPU/memory efficiency scoring, and actionable right-sizing recommendations. Detect over-provisioned containers wasting money and under-provisioned ones risking stability. No external tools required.
Cross-Cluster Diff
Side-by-side resource comparison across clusters. Compare staging vs production, detect drift, diff RBAC permissions, and correlate events fleet-wide.
Snapshot & Restore
Point-in-time resource snapshots with dry-run restore preview. Capture, name, and restore resources with confidence — see what changes before anything happens.
Audit Logging
Structured audit trail for every mutating action. SHA-256 hashing for tamper detection. SIEM-compatible JSON output. Compliance-ready for regulated environments.
Config Sync
Synchronize ConfigMaps & Secrets across clusters. Deep key-level diff, one-click push via Server-Side Apply, and bulk operations. Never manually copy configs again.
Image Inventory
Cluster-wide container image enumeration with :latest detection, missing digest alerts, and per-image usage tracking across all pods and namespaces.
Argo Rollouts
Canary and blue-green deployment management with visual step progression. Promote, abort, retry, and restart rollouts from the UI — no kubectl argo rollouts needed.
Certificate Dashboard
TLS certificate monitoring with expiration tracking. See every cert in your cluster, its issuer, and when it expires. Native cert-manager integration.
Vulnerability Dashboard
Aggregate CVE reports from Trivy, Grype, and other scanners. Severity breakdown with affected workload mapping across your entire cluster.
OpenShift & Red Hat Native
Auto-detects OpenShift, ARO, ROSA, and OKD clusters. Surfaces Routes, DeploymentConfigs, BuildConfigs, ImageStreams, and Projects alongside standard Kubernetes resources.
Policy Violations
Unified OPA Gatekeeper and Kyverno policy violation dashboard. See which resources are non-compliant with remediation context.
AI-Powered Debugging (MCP)
Built-in Model Context Protocol server. Chat with your cluster in VS Code Copilot, Claude Desktop, or any MCP client. 95 tools — diagnostics, RBAC, cost, drift, Helm, GitOps. Natural language, zero config.
Platform Capabilities
Beyond a dashboard. KubeGlass is a full Kubernetes operations platform — every feature built-in, no plugins required.
Cost Analysis
Per-namespace resource cost estimation without external FinOps tools. CPU/memory efficiency scoring, proportional cost breakdown, and cluster-wide summaries.
Right-sizing Recommendations
Compare actual CPU/memory usage against requests and limits. Detect over-provisioned and under-provisioned containers with actionable resize suggestions and savings estimates.
Git-to-Cluster Diff
Compare live cluster resources against Git repo manifests. Inline diff viewer shows exactly what drifted from your source of truth. Supports single and multi-file diffs.
Argo CD & Flux CD
Auto-detect Argo CD and Flux CD on your cluster. Unified application model, sync status dashboard, application resource trees, and managed cluster discovery.
GitHub Integration
Connect your GitHub repos directly. Browse repositories, branches, pull requests, workflow runs, and deployments — all from within KubeGlass. PAT or GitHub App auth.
Cross-Cluster Operations
Side-by-side resource diff between clusters. N-cluster comparison, fleet drift detection, cross-cluster RBAC diff, aggregated event timelines, and log aggregation.
Config Sync
Synchronize ConfigMaps and Secrets across clusters. Scan for presence/absence, deep key-level diff, and one-click push via Server-Side Apply. Bulk sync multiple resources at once.
Fleet Health & Diagnostics
Aggregated health across all kubeconfig contexts. Per-cluster diagnostics checks DNS, TLS, auth, and RBAC. Real-time status streaming via SSE. Resource dependency graphs.
Cross-Cluster Search
Fan-out search across all connected clusters simultaneously. Per-cluster relevance ranking, heatmap comparison, and unified result view. Find anything, anywhere.
Audit Logging
Structured audit trail for every mutating operation. SHA-256 request hashing for tamper detection. SIEM-compatible JSON output for Loki, ELK, or Datadog integration.
Image Inventory
Cluster-wide container image enumeration. Detect :latest tags, missing digests, and unique registries. Per-image usage tracking across pods and namespaces.
Enterprise Auth
OIDC with RS256/ES256 JWT validation, JWKS caching, and sliding-window sessions. Token paste, kubeconfig import, ServiceAccount, and SSO connection methods.
Pulse View
"What happened in the last N minutes?" without requiring Prometheus. Pod lifecycle counts, deployment changes, warning rates, namespace activity, and hotspot detection.
Multi-Channel Alerts
Prometheus Alertmanager integration with persistent history. Multi-channel dispatch to Slack, webhooks, and logs. Alert acknowledgement and SSE real-time streaming.
Resource History
Time-travel through resource versions. Automatic YAML snapshots captured on view. Side-by-side diff between any two points in time. Up to 50 snapshots per resource.
Snapshot & Restore
Point-in-time resource snapshots with restore preview. Dry-run shows what would be created, updated, or skipped. Named snapshots stored locally for quick recovery.
Pod File Browser
Upload and download files between your browser and running containers. Stream files via the Kubernetes exec API with path traversal protection built-in.
Ephemeral Debug Containers
kubectl debug in one click. Attach ephemeral containers to running pods with configurable images, process namespace sharing, and automatic WebSocket exec.
Env Variable Viewer
Resolve all container environment variables from every source. See configMapKeyRef, secretKeyRef, fieldRef sources with attribution. Secret values masked automatically.
IaC Topology
Visualize infrastructure managed by Crossplane, Terraform, Pulumi, AWS ACK, Azure ASO, and Google KCC. Impact analysis shows blast radius before changes.
Software Inventory
Fleet-wide discovery of installed OLM operators, Helm releases, ArgoCD/Flux apps, CRDs, and ecosystem add-ons. Historical comparison via persisted snapshots.
Session Recording
Record terminal sessions with timestamps. Export as asciicast v2 for asciinema replay or plain text transcript. Perfect for auditing, compliance, and sharing debug sessions.
Universal Cluster Connect
Multiple connection methods: token paste, kubeconfig import, ServiceAccount, SSO/OIDC, directory scan for kubeconfigs, and bulk connect. Validation before acceptance.
Top Pods & Nodes
kubectl top reimagined. Sortable pod and node resource rankings with visual bars. Spot resource hogs instantly across your entire cluster.
Argo Rollouts
Canary and blue-green deployment management. Promote, abort, retry, and restart rollouts directly from the UI. Visual step progression and analysis status.
Certificate Dashboard
Monitor TLS certificates across your cluster. Expiration tracking, issuer details, and cert-manager integration. Never get caught by an expired cert again.
Vulnerability Dashboard
Aggregate vulnerability reports from Trivy, Grype, and other scanners deployed in your cluster. CVE severity breakdown with affected workload mapping.
Policy Violations
Unified dashboard for OPA Gatekeeper and Kyverno policy violations. See which resources are non-compliant, with violation details and remediation context.
Service Mesh (Istio)
Visualize Istio service mesh traffic, virtual services, destination rules, and gateways. Traffic management and routing visualization without istioctl.
Operator Marketplace
Browse OLM operator catalogs, view available operators, manage subscriptions, and install plans. One-click operator deployment for your cluster.
Helm Chart Catalog
Add Helm repositories, search charts, compare versions, and install directly from the UI. Full chart lifecycle management without touching the CLI.
Upgrade Readiness
Pre-upgrade compatibility checks for Kubernetes version bumps. Detect deprecated APIs, incompatible resources, and addon readiness before you upgrade.
Admission Webhooks
Inspect validating and mutating admission webhooks. See which webhooks intercept which resources, their failure policies, and connection status.
Metrics Explorer
Ad-hoc PromQL queries with auto-complete and instant visualization. Explore any Prometheus metric without switching to Grafana. Chart rendering built-in.
Custom Dashboards
Build your own metric panels and layouts. Drag-and-drop dashboard builder with PromQL data sources. Save and share custom views across your team.
API Explorer
Browse your cluster’s full API surface. OpenAPI schema viewer with group/version/resource hierarchy, field docs, and try-it-now request builder.
RBAC Impersonation
Test RBAC policies by impersonating any user, group, or service account. See exactly what they can and can’t do — without switching credentials.
Workspaces
Organize clusters into logical workspaces for multi-team and multi-org isolation. Assign contexts, switch between workspaces, and keep environments separated.
OpenShift & Red Hat Ecosystem
Native support for the entire Red Hat ecosystem — OpenShift, Azure Red Hat OpenShift (ARO), Red Hat OpenShift on AWS (ROSA), OKD, and CodeReady Containers. Routes, DeploymentConfigs, BuildConfigs, ImageStreams, and Projects auto-detected.
Works with every distribution
29 Kubernetes distributions auto-detected at connect time. No plugins, no configuration. Just point KubeGlass at your kubeconfig.
Managed Cloud
Major cloud provider managed Kubernetes services with auto-detection via API server version strings and node labels.
OpenShift & Red Hat
Full support for OpenShift-specific resources — Routes, BuildConfigs, ImageStreams, Projects — across every variant.
Lightweight & Edge
Minimal-footprint distributions for edge computing, IoT, CI/CD, and resource-constrained environments.
Local Development
Desktop and local Kubernetes environments for development, testing, and learning on macOS, Linux, and Windows.
How KubeGlass compares
Feature-by-feature comparison with the tools you know.
Built for every Kubernetes role
Whether you're debugging a pod at 3am or auditing RBAC before a compliance review, KubeGlass fits your workflow.
Your control plane, visualized
Fleet management across dozens of clusters. Cross-cluster diff catches config divergence before it pages you. Health scans, config sync, and snapshot restore replace your Friday audit scripts.
Incident response, accelerated
Split-pane terminals with session recording. Debug containers in-browser. Guided troubleshoot, resource time-travel, and file transfer from pods—without leaving the browser.
RBAC clarity in seconds
Visual access matrix shows who can do what across every namespace and cluster. Image inventory flags unscanned containers. Structured audit logging with tamper-proof trail of every action.
Ship faster, debug less
See your deployments in real time. Tail logs with regex filtering. Upload & download files from pods. One-click port forward. Cost visibility per namespace. No kubectl required.
Onboard in minutes, not days
New team members go from zero to productive with the guided onboarding flow. No CLI expertise needed. Visual cluster exploration replaces tribal knowledge.
Git ↔ Cluster, in sync
See exactly where your live state diverges from Git. Inline diff viewer, GitHub integration, and Argo CD compatibility. Close the loop between intent and reality.
How it works
One Go binary serves the React frontend and proxies the Kubernetes API. No database, no external services, no complexity.
Up and running in
seconds
One command. That's all it takes. No account, no config, no infrastructure.