k10y-agent

Appearance

New in 2.2: HAProxy management, one Home for every system

All your DevOps tools.
One calm place.

k10y-agent brings the tools you run your infrastructure with into one open-source control room. Kubernetes clusters and HAProxy load balancers today, more systems next. Monitor, troubleshoot and safely change all of them with one login, one set of roles, one audit log and one alert pipeline.

Get started, it's freeStar on GitHub

Self-hosted · Free and open source · Your cluster data stays on your servers

k10y / home
All systems: Every cluster and load balancer on one screen: health, problems, firing alerts.Kubernetes: Health, problems, CPU and memory for every cluster, updated live.HAProxy: Live traffic, server health and a frontend → backend → server topology for each load balancer.Live logs: Follow the logs of every pod of a workload in one stream, tagged by pod.Pod shell: Open a terminal in any container from the browser. Every session is audited.Safe changes: Review a diff and dry run before anything changes, in Kubernetes and HAProxy alike.Alerts: One alert pipeline for every system: broken pods, down servers, expiring certificates, to Telegram.

Every cluster and load balancer on one screen: health, problems, firing alerts.

Works with the Kubernetes you already run

  • Kubernetes
  • RKE2
  • k3s
  • Amazon EKS
  • Google GKE
  • Azure AKS
  • HAProxy 2.x / 3.x
  • Docker Compose
  • PostgreSQL
  • Telegram
  • Google Gemini
  • OpenAI-compatible APIs
  • amd64 + arm64
2systems in one place, more coming
38pages in the dashboard
24fine-grained permissions
Everychange audited, with who made it
0kubeconfigs handed out
One control room

Stop juggling tools. Run everything from one place.

Each system plugs into the same hub. You switch systems in the sidebar; login, roles, audit, alerts and the Home page are shared by all of them.

Kubernetes

Available
  • Every workload, pod, service and config page
  • Live charts, live logs, pod shell
  • Scale, restart, roll back, edit YAML, drain
  • AI diagnosis with human-approved fixes

HAProxy

Available
  • Frontends, backends, servers, topology
  • Drain, maintenance, rolling deploys, canaries
  • Validated config changes, history, rollback
  • Certificates, rate limits, logs, Kubernetes sync
+

Next systems

On the roadmap
NginxPostgreSQL & MySQLRedisDocker hostsGitLab & Jenkins pipelinesPrometheus & GrafanaCloud accounts (AWS, GCP, Azure)

Adding a system reuses the whole hub. See the roadmap or ask for the one you need.

One loginUsers, sessions and device sign-out, once for every system.
One set of roles24 permissions across Kubernetes and HAProxy, per cluster or global.
One audit logWho changed what, in which system, with the result, in one place.
One alert pipelineRules for pods, nodes, load balancers and certificates, sent to Telegram.
One Home pageThe health of every system on a single screen.
One AI assistantInvestigates problems with read-only tools; you approve every fix.
Get started

Two commands. Five minutes.

Run the hub anywhere Docker runs, then add a small agent to each cluster. No Ingress, no Helm charts, no agents phoning home.

1 · Start the hubDocker Compose: hub + PostgreSQL + automatic backups
curl -LO https://github.com/chhayserver/k10y-agent/releases/latest/download/docker-compose.yml
make hub-up   # or: create .env, then docker compose up -d
2 · Add each clusterOne manifest; the agent creates its own API token
kubectl apply -f https://github.com/chhayserver/k10y-agent/releases/latest/download/install.yaml

Read the quick start →

Use cases

Built for the people who keep production running

Platform teams

Run many clusters from one screen

Lab, staging and production side by side, with a health dot for each. When one cluster is down, the rest keep working.

Safe self-service

Give developers access without kubeconfigs

A role per cluster: view and logs on production, scale and restart on staging. Developers never hold credentials, and every click is audited.

On-call

Get alerted, then fix it from your phone

A crash loop fires a Telegram message, with an optional AI diagnosis. Open k10y, check the live logs, roll back. Done.

Releases

Ship without downtime

Drain one HAProxy server at a time, deploy, check it's healthy, move on. Or send 5% of traffic, or only requests with a canary header, to the new version.

Everyone

Stop switching between tools

kubectl, the HAProxy stats page, config files over SSH, a Telegram bot, a spreadsheet of who changed what: replaced by one dashboard with one login and one audit log.

Troubleshooting

Let AI explain a CrashLoopBackOff

The assistant reads events, specs and logs with read-only tools, finds the root cause and proposes a fix. A person reviews it before anything changes.

See

See + understand

Live charts
CPU and memory for the cluster, every node and every pod, with request and limit lines.
Problems first
Crash loops, failing image pulls, pending pods, NotReady nodes and failed jobs, before you go looking.
Every resource
Deployments to PVCs, CronJobs to autoscalers, each with a details panel, related objects, YAML and events.
k10y / lab / overview
See + understand
Control

Control + break nothing

Dry run everything
Scale, restart, roll back, drain, apply or edit YAML: see the result before it happens.
Guardrails
Protected namespaces, typed confirmation for destructive actions, and conflict checks when editing.
Least privilege
Read-only installs are one manifest. Write access is opt-in and can't create RBAC or CRDs.
k10y / lab / configmaps / app-config
Control + break nothing
Balance

Balance + ship safely

HAProxy, managed
Frontends, backends and servers with live health; drain, maintenance and weights for canaries.
Every change validated
Prepared in a transaction, shown as a diff, checked by HAProxy itself, reloaded gracefully, kept in history.
Linked to Kubernetes
A backend can follow a Kubernetes Service: nodes or pods come and go, HAProxy keeps up.
k10y / haproxy / lab-lb / frontends
Balance + ship safely
Respond

Respond + fix fast

Alerts that wait
A hold time keeps blips quiet. Reminders, resolved messages, and history in PostgreSQL.
Live logs and shell
Follow every pod of a workload at once, or open a shell in a container. Both in the browser.
AI assistant
Gemini or any OpenAI-compatible model (optional; cluster data goes to the provider you choose). Read-only tools; you approve every fix.
k10y / lab / deployments / web / logs
Respond + fix fast
Everything included

One tool instead of ten tabs

Multi-cluster

A cluster switcher with live health dots, and an all-clusters overview.

HAProxy

Load balancers next to your clusters: topology, live charts and logs, certificates, rate limits, history and rollback.

Relationship map

Ingress → Service → workload → Pod → ConfigMap, Secret or PVC. Broken links are flagged.

CronJobs

Run now, suspend and resume, with readable schedules like "every 5 minutes".

Per-user settings

Hide pages and set your theme and start page. Your settings follow you to every device.

CLI included

k10y status --all, logs, scale, roll back and apply, against any agent.

Security

Secure by default, not by checklist

k10y sits between people and your clusters, so it was designed to be the safest way in.

Identity

  • argon2id passwords, forced first change
  • Server-side sessions, sign out any device
  • Login rate limiting

Authorization

  • Fully custom roles
  • Per-cluster or global assignments
  • 24 fine-grained permissions

Data

  • HTTPS everywhere, no Ingress needed
  • Tokens and keys encrypted at rest
  • Secret values never leave the cluster

Accountability

  • Every action, login and shell audited
  • Automatic database backups
  • API-only agents, no side doors

How k10y keeps your clusters safe →

Roadmap

Built in the open, shipping fast

Ten releases so far: from the first Kubernetes agent to the hub, alerts, the AI assistant and HAProxy, a second system in the same control room.

Shipped

  • Kubernetes control room
  • HAProxy management
  • Roles, audit, alerts, AI
  • One Home for every system

Next

  • Two-factor login (TOTP)
  • Slack, email and webhook alerts
  • Next systems: Nginx, databases

Later

  • Single sign-on (OIDC)
  • Long-term metrics (Prometheus)
  • Helm chart

See the full roadmap →

Bring your DevOps tools together today

Free, self-hosted and running in five minutes.

Get startedRead the docs

Created and maintained by Kang Kimchhay.

Free and open source under the AGPL-3.0 license. Created and maintained by Kang Kimchhay. Kubernetes is a trademark of The Linux Foundation and HAProxy of HAProxy Technologies; k10y is not affiliated with either.

© 2026 Kang Kimchhay