What web UI should I provide for internal Kubernetes users?
Asked by
MellowOrbit42
I manage several Kubernetes clusters on AWS EKS and want to provide internal users with a web interface for viewing and managing the resources they're allowed to access. I'm currently testing an in-cluster Headlamp deployment with OIDC authentication through Keycloak, backed by Google Workspace, but it feels somewhat slow and I'm not completely satisfied with it. Before making it available to users, I'd like to hear about comparable setups, alternative tools, and general recommendations. I'm especially interested in solutions that support Kubernetes RBAC and can work across multiple clusters.
Answers
For data-science-oriented users, Onyxia may be worth a look. It includes integrations around Keycloak/OIDC and persistent S3-backed storage, so it can be more suitable than a generic cluster browser when users need to launch and manage data tools.
Reply to this answer
Rancher is worth evaluating, especially if you want one interface for multiple clusters. It supports centralized cluster management and access control, although some areasโparticularly applications and chartsโcan feel slow depending on the scale and workload.
Reply to this answer
Argo CD is a solid choice if the main workflow is GitOps. It provides a useful deployment and application dashboard, but it isnโt really a general-purpose Kubernetes console for arbitrary cluster operations. Whether it fits depends on what users actually need to do.
Reply to this answer
Radar could be a good fit. It can run in the cluster, supports OIDC/Keycloak, and honors each userโs Kubernetes RBAC permissions. Its focus is less on exposing every object individually and more on showing relationships, topology, changes, issues, and GitOps context, which may be easier for developers who arenโt Kubernetes specialists.
Reply to this answer
Headlamp is not the only option. Lens is another familiar choice, though its licensing and the distinction between the desktop and web experience may be drawbacks. The older Kubernetes Dashboard is generally not a good direction because itโs deprecated and no longer actively maintained.
Reply to this answer
Add your answer
Answers are reviewed before publication.
Related Discussions