lensapp/lens
Lens
Lens is a multi-cluster management platform and desktop application for administering Kubernetes environments. It provides a graphical interface for deploying Helm charts, editing YAML manifests, and managing the lifecycle of pods and deployments.
The project features an AI-powered cluster assistant that enables users to query cluster state, perform autonomous troubleshooting, and translate natural language requests into system commands. It also supports collaborative team access through shared spaces, utilizing encrypted cluster sharing and role-based access control to manage credentials and permissions across organizations.
Broad capabilities cover native integration with cloud providers such as AWS EKS, Azure AKS, and Google GKE, alongside real-time observability tools for streaming container logs and visualizing Prometheus metrics. The platform also includes enterprise identity management via SSO and SCIM, and security analysis tools for scanning clusters for vulnerabilities.
The application supports silent installation via command-line parameters for non-interactive setup.
Features
- Kubernetes Cluster Management - Provides a comprehensive graphical interface for administering the lifecycle of Kubernetes clusters, pods, and deployments.
- Natural Language Telemetry Querying - Answers natural language questions about cluster health, usage, and logs by fetching live data.
- Cluster Connection Profiles - Manages local configuration files that store cluster names, config paths, and proxy settings.
- Troubleshooting Workflows - Performs autonomous investigations using a structured workflow of discovery, planning, and summary for cluster issues.
- Agent-Based Access Control - Executes a space agent within a cluster to facilitate shared credentials and collaborative team access.
- Cluster Management Connectivity - Provides mechanisms for listing, connecting to, and disconnecting from clusters to set the active context.
- Collaborative Cluster Sharing - Allows users to add configured clusters to shared team spaces for collaborative environment management.
- Direct Cluster Deployment - Allows direct modification and immediate application of YAML manifests to update cluster deployments.
- Dynamic Resource Watching - Monitors cluster object updates in real time using the Kubernetes Watch API to refresh the interface without polling.
- Helm Chart Management - Manages the discovery, installation, and upgrading of cluster applications using Helm charts and OCI registries.
- Cloud Provider Integrations - Establishes cluster connections through direct API flows for AWS EKS, Azure AKS, and Google GKE.
- Cluster Access Control - Centralizes cluster access for multiple users by organizing them into spaces with defined RBAC roles.
- Cluster Observability - Offers real-time observability for Kubernetes clusters, including container log streaming and Prometheus metrics.
- Resource Search Interfaces - Enables users to quickly locate clusters, deployments, and other Kubernetes objects via a searchable interface.
- Cluster Resource Management - Generates new cluster objects using pre-configured templates and interactive dialogs.
- Desktop Management Interfaces - Ships as a desktop application for deploying Helm charts, editing manifests, and managing pod lifecycles.
- Multi-Cluster Dashboard Managers - Provides a multi-cluster dashboard for managing and monitoring Kubernetes environments across cloud providers.
- Kubernetes Application Deployments - Facilitates the installation and management of applications using Helm charts and OCI registries via a visual interface.
- Kubernetes Deployment Management - Maintains the desired state of containerized applications by searching, filtering, and editing deployments across namespaces.
- AKS Management Integrations - Integrates Azure Kubernetes Service clusters without requiring external command-line tools.
- Kubernetes Integrations - Integrates natively with managed Kubernetes services like AWS EKS, Azure AKS, and Google GKE.
- Managed Cloud Service Integrations - Integrates cloud-based environments through native account-connection flows for platforms like Azure and AWS.
- Multi-Cluster Management Systems - Acts as a centralized hub for connecting and managing multiple Kubernetes environments with shared team access.
- Natural Language Cluster Operators - Translates natural language queries into Kubernetes commands and provides real-time troubleshooting answers.
- Pod Shell Access - Opens an embedded terminal connection directly to a pod to execute command-line operations.
- Telemetry - Integrates with Prometheus instances and custom service addresses to retrieve and display cluster telemetry.
- Cluster Integration - Imports cluster access using local config files or native cloud integrations across various providers.
- EKS Management Integrations - Integrates Amazon Elastic Kubernetes Service clusters using SSO or IAM roles without local CLI.
- GKE Management Integrations - Establishes a connection to Google Kubernetes Engine clusters to enable remote management.
- Identity Management - Manages enterprise team access to clusters using SSO, SCIM, and role-based access control.
- Role-Based Access Control - Implements role-based access control to manage user permissions and resource access within teams.
- Metrics Collection - Provides tools and configurations for scraping and recording system performance data from Kubernetes clusters.
- Container Log Retrieval - Provides direct retrieval and display of stdout and stderr logs from containerized services for debugging.
- Container Log Streamers - Streams and searches real-time output from container logs for rapid debugging and observability.
- Organization Management - Manages business identities including SSO and SCIM configurations to control feature availability.
- Model Context Protocol Integrations - Implements the Model Context Protocol to allow external AI agents to interact with cluster data.
- AI Integration Protocols - Connects external language models via API keys and standard base URLs for natural language cluster queries.
- AI Provider Integrations - Connects external AI models via API keys to power the cluster assistant and automation.
- LLM Provider Integrations - Links to OpenAI-compatible providers using API keys and custom base URLs for AI operations.
- Vulnerability Scanning - Scans clusters for vulnerabilities and generates detailed reports to identify and mitigate security risks.
- Resource Contextualization - Initiates AI conversations pre-loaded with the context of selected resources to streamline investigation.
- Shell Command Execution - Runs local shell commands and tools via the AI assistant with manual user confirmation.
- Cluster Space Agent Installation - Links clusters to shared workspaces by executing installation commands for space agents.
- Cluster Discovery Interfaces - Locates available local and team clusters through a searchable dialog to switch environments.
- Chart Repositories - Manages external Helm repositories and OCI registries to define available application packages for deployment.
- Real-Time Kubeconfig Synchronization - Syncs clusters by watching local config files in real time or adding custom paths.
- Aggregated Cluster Overviews - Provides a comprehensive summary and detailed exploration of the connected cluster's state and configurations.
- Resource Navigation Panels - Provides a centralized panel to navigate between various functional segments and resources within a cluster.
- Cluster Space Agent Removal - Disconnects clusters from shared workspaces and provides commands to remove the space agent.
- OpenShift Management Integrations - Imports cluster configurations from the OpenShift CLI into the local config for management.
- Deployment Rolling Restarts - Triggers rolling restarts of cluster deployments to apply changes without manual command-line execution.
- Service Port Forwarding - Maps local machine ports to specific pods or containers to enable access to internal cluster services.
- Administrative Account Management - Administers account settings for an organization, including user onboarding and feature distribution.
- Encrypted Cluster Access Sharing - Provides end-to-end encrypted connections to clusters without requiring inbound firewall ports or VPNs.
- External Identity Provider Integration - Links third-party service accounts to streamline the login process through external identity providers.
- Identity Domain Management - Verifies apex domains to enable organization-wide controls and integrate external identity providers.
- Identity Provider Integrations - Connects the system with external IAM solutions using SSO and SCIM to synchronize users.
- Identity Provisioning - Sets up Single Sign-On and SCIM to automate user access and synchronize identity data.
- SCIM with SSO Integrations - Integrates external identity providers using a combined SSO and SCIM workflow to automate user access.
- Unified Identity Management - Establishes a single account using email or third-party providers to access multiple management tools.
- User Identity Management - Updates profile details, manages credentials, and configures two-factor authentication to secure user accounts.
- Namespace Access Controls - Implements granular permission management to restrict user visibility to specific Kubernetes namespaces.
- Kubernetes Monitoring Dashboards - Integrates with Prometheus to provide specialized monitoring dashboards for Kubernetes cluster resources.
- Cluster Monitoring Systems - Activates and manages the collection of performance metrics and logs to monitor cluster health.
- Observability Stack Deployments - Automates the installation and management of Prometheus and Node Exporter as a full observability stack.
- Real-Time Monitoring Systems - Tracks Kubernetes object updates in real-time using the Watch API to ensure the UI reflects current state.
- Monitoring and Visualization - Attractive desktop UI for working with cluster resources.
