Desktop Kubernetes client
The bright-eyed watcher over your clusters.
Glauco is a hardened, no-backend Kubernetes client for your desktop. Browse, watch, and operate every cluster from one fast, native app — read-first, with every change behind an explicit confirm.
Free · Apple Silicon · Updates itself automatically
No server. No telemetry. Your kubeconfig and credentials never leave your machine.
Features
Dense with signal. Never noisy.
A senior SRE's instrument for the whole day-to-day: see what's happening, find the one thing that isn't, and fix it — carefully.
Live, everywhere
One watch layer streams every resource kind cluster-wide into a warm cache. Tables update in place — no refresh button, no polling lag.
Utilization at a glance
CPU and memory come straight from metrics.k8s.io as inline bars tinted by load: green under 70%, amber to 100%, red when overcommitted.
A browser for your resources
Workloads, Network, Config and Storage — grouped, sortable, filterable, paginated. Column filters and quick presets, with a badge counting what's active.
Detail that goes deep
Every object opens to Overview, Logs, Terminal, YAML and Events. Tail all pods at once, exec into a container, or read the live manifest in Monaco.
Helm, first-class
Releases are read directly from their Secrets — no helm binary needed. See the resources each release manages, walk its history, roll back or uninstall.
Command palette
⌘K jumps anywhere — switch context, scope to a namespace, or open any resource kind, built-in or custom, in a single keystroke.
Nodes & capacity
Every node with roles, versions, conditions and taints. Toggle CPU and memory between Usage, Requests and Limits as a share of allocatable.
Custom resources
CRDs are discovered per context and grouped by API group. Open any custom kind into a generic, live table with best-effort status.
Safety by design
Built to never surprise you against a real cluster.
Glauco is read-first by default. It's the tool you can hand a new engineer and point at production without holding your breath.
- No backend. No telemetry.
- Glauco talks straight to your clusters — there's no server in the middle and nothing phones home. No account, no analytics, no data ever leaving your machine.
- Read-first, confirm-gated
- Every mutation — scale, restart, cordon, drain, edit, delete, Helm rollback — goes through an explicit confirm. Cancel holds focus and destructive actions are red, so a stray Enter can never touch prod.
- Sandboxed & hardened
- A locked-down Electron shell: context isolation on, node integration off, a strict CSP, and every IPC message validated at the boundary. The Kubernetes client only ever runs in the main process.
- Your kubeconfig, read-only
- Extra kubeconfigs are merged read-only through a native file picker. Glauco reads your contexts to connect — it never writes to ~/.kube/config.
A closer look
Every screen, instrument-grade.
Dark-first, dense, and calm. Here's what a day in Glauco actually looks like.
Grouped, live resource tables
Applications, Network, Config and Storage. Sort, filter, and read inline CPU/memory bars — everything streaming in place.
Built like the app it manages
Native-feeling, strongly typed, and tested against a hermetic mock cluster — never your real one.
- Electron
- React 19
- TypeScript
- Untitled UI
- Tailwind CSS
- React Aria
- @kubernetes/client-node
- Monaco
- xterm.js
Take a closer look at your clusters.
Download Glauco for macOS and connect to any cluster your kubeconfig already knows — GKE, EKS, AKS, k3s, kind or on-prem. Free, and yours in a minute.
- Signed & notarized
- Updates itself automatically
- No account required
Windows & Linux builds coming soon.