Supported
Your machine
Run one binary in a browser tab or desktop window. It reads your kubeconfigs in place and can keep several clusters open at once.
Run modes
Your machine, or one shared cluster.
Local mode is the supported product. Cluster mode uses the same binary to serve one cluster to a team and is in preview.
Preview
One shared cluster
Run the same binary from its OCI Helm chart. A team signs in through OIDC or an authenticated proxy and works against that cluster.
| Area | Your machine | One shared cluster |
|---|---|---|
| StartInstall | Shell or PowerShell installer, archive, deb or rpm | OCI image and Helm chart |
| StartAddress | Loopback only | The public URL and listener you configure |
| AccessSign-in | A token minted for that run | OIDC or an authenticated proxy; anonymous admin needs an unsafe opt-in |
| AccessKubernetes identity | The selected kubeconfig context | A read-only service account by default; the signed-in account once impersonation is on |
| AccessRead scope | Whatever the kubeconfig may read, including credentials limited to named namespaces | With impersonation, the namespaces the account may list; whole-cluster views need whole-cluster read |
| WorkspaceClusters | Several at once, each in its own tab | The cluster running Spinoza |
| WorkspaceInterface | Browser and desktop; move between them mid-session | Browser |
| WorkspaceLifetime | Stops when the last view closes | Runs with the pod; takes traffic once its caches are filled, and drains before it stops |
| WorkspaceSaved views | Yours, on this machine | Each person's own; an admin can publish one for everybody |
| OperationsWrite access | The kubeconfig's RBAC, with protected-cluster confirmation | Viewer, editor or admin role, then Kubernetes RBAC |
| OperationsPort-forwarding | Pods and services forwarded to your machine | Unavailable |
| OperationsAudit trail | Every change Spinoza made, per cluster | Changes and sign-ins, exported by admins as CSV or JSON and logged as structured lines |
| OperationsTerminal transcripts | Off unless started with --record-sessions | Off unless the deployment turns them on; admins read them |
| OperationsSelf-reporting | Text logs, and /metrics behind the run's token | JSON logs, /metrics for admins or a separate scrape port, and a readiness check |
| OperationsUpdates | Optional update check; never installs by itself | No update check or self-install path |