Desktop Kubernetes client
The bright-eyed watcher over your clusters.
Glauco is a hardened, no-backend Kubernetes client for your desktop. Browse, watch, and operate every cluster from one fast native app. It stays read-first, so every change waits behind a deliberate confirm.
Apple Silicon · macOS 12 and later

No server. No telemetry. Your kubeconfig and credentials never leave your machine.
Features
Dense with signal. Never noisy.
Everything a day of running clusters needs. See what's happening at a glance, then deal with the one thing that isn't.
Live, everywhere
One watch layer streams every resource kind cluster-wide into a warm cache. Tables update in place, with no refresh button and no polling lag.
Utilization at a glance
CPU and memory come straight from metrics.k8s.io as inline bars, tinted by load: green under 70%, amber up to 100%, red when overcommitted.
A browser for your resources
Workloads, Network, Config and Storage, each grouped, sortable, filterable and paginated. Column filters and quick presets, with a badge counting what's active.
Detail that goes deep
Every object opens to Overview, Logs, Terminal, YAML and Events. Tail all pods at once, exec into a container, or read the live manifest in Monaco.
Helm, first-class
Releases are read straight from their Secrets, so there's no helm binary to install. See the resources each release manages, walk its history, roll back or uninstall.
Command palette
⌘K jumps anywhere: switch context, scope to a namespace, or open any resource kind, built-in or custom, in one keystroke.
Nodes & capacity
Every node with its roles, versions, conditions and taints. Toggle CPU and memory between Usage, Requests and Limits as a share of allocatable.
Custom resources
CRDs are discovered per context and reachable from the command palette. Open any custom kind into a generic live table with best-effort status.
Safety by design
Built to never surprise you against a real cluster.
Glauco is read-first by default. It's the app you can hand a new engineer and point straight at production.
- No backend. No telemetry.
- Glauco talks straight to your clusters. There's no server in the middle and nothing phones home: no account, no analytics, and no data leaving your machine.
- Read-first, confirm-gated
- Every mutation goes through an explicit confirm: scale, restart, cordon, drain, edit, delete, Helm rollback. Cancel keeps the focus and destructive actions are red, so a stray Enter never touches prod.
- Sandboxed & hardened
- A locked-down Electron shell: context isolation on, node integration off, a strict CSP, and every IPC message validated at the boundary. The Kubernetes client only ever runs in the main process.
- Your kubeconfig, read-only
- Extra kubeconfigs are merged read-only through a native file picker. Glauco reads your contexts to connect and never writes to ~/.kube/config.

A closer look
Every screen, instrument-grade.
Packed with detail but easy on the eyes. Here's what a day in Glauco actually looks like.

Grouped, live resource tables
Applications, Network, Config and Storage. Sort, filter, and read inline CPU and memory bars while everything streams in place.
Take a closer look at your clusters.
Download Glauco for macOS and connect to any cluster your kubeconfig already knows: GKE, EKS, AKS, k3s, kind or on-prem.
- No account required
- Works with your existing kubeconfig
Windows and Linux builds are on the way.