Porthole for Kubernetes

Browse every resource, follow logs, open a shell, forward ports and apply YAML on your Kubernetes clusters, from iPhone and iPad. No cluster? Try the built-in demo.

Porthole is a native app for browsing and managing your Kubernetes® clusters from iPhone and iPad. Check on a rollout from the sofa, follow a crash loop's logs on the train, or open a shell in a pod when you're away from your desk.

No cluster at hand? Tap Try the Demo Cluster. A simulated cluster with sample apps runs inside Porthole, so you can try every feature without an account, a network or a cluster of your own.

BROWSE ANYTHING • Every resource type your cluster serves, custom resources included, in the same columns as kubectl get • Live lists that follow the cluster as it changes, with namespaces, sorting, filters, label selectors and a Problems Only switch • An overview of cluster CPU and memory, workload health and warning events • CPU and memory for pods and nodes, against requests, limits and what each node can allocate • Detail screens with status, labels, annotations and events, and links from a workload to its pods and from a pod to its node • A tree of everything beneath a workload, service or node, and which pods use a ConfigMap, Secret or volume claim • Logs from a container, a pod, or everything behind a Deployment or Service, merged in time order: follow live, filter, save or share • Roles and bindings: who can do what, and what your own credentials allow • Helm releases with their values, manifests, notes and history

CHANGE THINGS, CAREFULLY • A real terminal in any running container, or attach to its main process • Browse a container's files, open or save one, and upload into it • Debug containers, and shells on nodes • Port forwarding, with a built-in browser for what you forwarded • View, edit and apply YAML; an edit to an object that changed in the meantime is refused rather than overwriting it • Scale, restart, change images and roll back Deployments; run or suspend CronJobs • Cordon, uncordon and drain nodes, respecting disruption budgets • Edit the values and keys of ConfigMaps and Secrets • Roll back or uninstall a Helm release • Delete one object or a selection, with the same options kubectl offers

Anything destructive asks first, and every other change goes through a sheet with an explicit button to commit it.

SAFE BY DESIGN • Mark a cluster read-only and Porthole changes nothing in it and opens no shells, whatever the credentials allow; port forwarding stays available • Credentials stay in the iOS keychain on this device, never in iCloud • An optional app lock with Face ID, Touch ID or your passcode • No account, no analytics, no tracking: Porthole collects no data and talks only to your clusters

CONNECT YOUR WAY • Import a kubeconfig, or enter a server address and a token • Client certificates, bearer tokens and basic auth • Servers with a private certificate authority are checked against the CA in your kubeconfig

MADE FOR iPAD Your clusters, a cluster's home screen and whatever you have open sit side by side, and you can open more than one window.

Kubernetes is a registered trademark of The Linux Foundation. Porthole is not affiliated with or endorsed by The Linux Foundation or the Kubernetes project.