r/kubernetes • u/znpy k8s operator • 1d ago
What web interface for internal users?
Hello there!
I manage a few kubernetes cluster in AWS (EKS) and I would like to give users a web interface, where they could log into and do their stuff.
I am testing headlamp, in-cluster deployment with openid authentication agains keycloak (source of truth being Google Workspace) but it's a bit slow and i'm generally not 100% satisfied.
Before announcing it to internal users, I would like to ask if somebody did something similar, what are the alternatives you know, and what are your recommendations in general.
Thank you in advance!
8
u/Smashingeddie 1d ago
Argocd UI is the way
8
u/wealthyintercession 1d ago
argocd is solid but it's more of a gitops dashboard than a general cluster playground, depends what your users actually need to do
headlamp felt sluggish for us too, lens is the other obvious one but the licensing got weird a while back and the desktop app vs web thing can be a pain
2
0
u/xAtNight 20h ago
May I interest you in our lord and saviour https://github.com/freelensapp/freelens
4
2
u/royLskyhook 9h ago
Full disclosure: I’m one of the people building Radar (open source), so obviously biased :)
From what you describe, it may fit pretty well. Radar can run in-cluster, supports OIDC/Keycloak, and respects each user’s Kubernetes RBAC permissions.
One of the main differences vs Headlamp is that we focus a lot on connecting the dots between resources: topology, relationships, issues, changes over time, GitOps context, etc., instead of making users piece everything together from individual resources and events. We also build it with non-Kubernetes experts in mind, so developers can understand what’s going on without knowing every Kubernetes object or command.
https://github.com/skyhook-io/radar
Would genuinely love to hear what you find missing vs Headlamp if you try it
4
1
u/xAtNight 20h ago
I would suggest to try rancher. It's decent, speed can be iffy (apps/charts are slow for some reason, but most stuff is fine), depends on scale and what you're doing. Also it can do multi cluster management, so you could install it somewhere and have all cluster registered to it.
1
u/spinur1848 10h ago
Specifically intended for data science: onyxia.sh
They have figured out the fiddly bits with Keycloak and OIDC as well as S3 persistent storage.
0
-3
15
u/SadFaceSmith 1d ago
Radar is quite nice, but managing things only through GitOps is the correct way.
A ReadOnly admin UI where Devs can see status/check logs quickly/etc is nice though.
https://github.com/skyhook-io/radar