srelens

srelens is a free Kubernetes desktop workspace for engineers who need both broad cluster visibility and controlled operational actions. It suits SREs, platform and DevOps engineers, and AI-assisted workflows that rely on local kubeconfig access. Its strongest case is comprehensive local cluster work; teams planning shared web access must account for a more demanding security setup.

Overview

The desktop connects straight to Kubernetes API servers with credentials from local kubeconfig files, without an intermediary srelens cloud service. The selected context and its RBAC permissions govern every available operation, so the interface follows existing authorization rather than creating a separate access layer. Added kubeconfig files stay local, while pasted configurations are stored in the application directory.

More than 40 resource kinds are covered, spanning workloads, networking, storage, RBAC, admission, autoscaling and custom resources. That range makes it useful as a general cluster console instead of a workload-only viewer. Node and pod CPU and memory figures come through Kubernetes Metrics Server, so those metrics depend on that component being present and functioning.

Key features

Live watches, streamed logs, in-pod terminals, port forwarding and Helm release views put common investigation tasks together. A schema-aware YAML editor is aimed at safer, more informed manifest changes than an unstructured text editor. The workspace also supports scaling and restarting workloads, plus cordoning, draining and evicting nodes. Confirmation is required for destructive actions, an important guardrail when operating production resources.

The built-in MCP server connects to MCP clients including Claude Code, Claude Desktop, Cursor and Codex. Connections work over stdio or loopback HTTP. Mutating MCP tools require an explicit confirmation argument, and the desktop HTTP server binds to loopback rather than external interfaces; these controls reduce accidental or remote execution risk but do not replace sound RBAC and host security.

Kubernetes Secret values are masked by default and revealed per key. macOS packages are Developer ID signed and notarized, while Linux assets include Tauri updater signatures. Windows code signing is on the roadmap, so Windows users have a less mature package-signing position.

Pricing

The Free plan costs nothing and is free to download. There is no paid tier, account or license key, and the project is open source under the MIT license. That makes it suitable for individual practitioners and teams that can run their own desktop tooling without subscription procurement. There are no cheaper or higher tiers trading away features, seats or quotas; the trade-off is that support is directed to GitHub issues with safely shareable application logs for reproducible bugs.

Platforms

srelens supports macOS, Windows and Linux, with API, web and self-hosted deployment options also identified. It provides a graphical interface and supports multi-node clusters. The desktop model is the natural fit for local kubeconfig workflows. The optional web server changes the security profile: production deployments require authentication, TLS termination, a stable master key and RAM-backed storage for decrypted runtime material.

Who it's for

Choose srelens if you are an SRE, platform engineer or DevOps engineer who wants one graphical workspace for browsing, troubleshooting and making approved cluster changes. It is especially compelling when local credential handling, multi-node visibility and MCP-based AI workflows matter. It is less suitable as a casually exposed shared web console, because production web operation requires several deliberate security controls, or for organizations that require signed Windows builds today.

Pros and cons

Pros

• Broad resource coverage: More than 40 Kubernetes kinds cover infrastructure, policy and custom objects as well as workloads.
• Investigation in one workspace: Watches, logs, terminals, port forwarding, Helm views and YAML editing reduce context switching.
• Operational safeguards: Destructive desktop and MCP actions require confirmation, while RBAC remains the authority.
• Local-first access: Credentials and kubeconfig files remain on the machine rather than passing through a vendor cloud.
• No-cost open source: The MIT-licensed Free plan has no account, key, paid tier or stated usage cap.

Cons

• Metrics dependency: Node and pod CPU and memory data require Kubernetes Metrics Server.
• Web deployment burden: Production use needs authentication, TLS termination, a stable master key and RAM-backed storage.
• Windows signing gap: Code signing is still on the roadmap, unlike the signing and notarization noted for macOS.

Alternatives

For a broader directory of on-device Kubernetes options, see Local Kubernetes Tools.

• Kubeterm is a freemium desktop and mobile option; pick it when Android or iOS support matters alongside its free macOS, Windows and Linux desktop plan.
• kind is a free, open-source tool for running Kubernetes in Linux, macOS, Windows and self-hosted environments, better suited when cluster creation is the priority.
• Kubus is a free Kubernetes client built in the open for network-automation work.
• Kunobi offers a free tier for up to three simultaneous clusters, with community support, and a paid Pro option.
• Rancher Desktop is a free open-source desktop application from SUSE’s Rancher Engineering group.
• vCluster Platform suits teams needing virtual-cluster management, with a free tier covering unlimited virtual clusters within stated CPU/GPU limits.
• Colima is a free MIT-licensed container runtime for macOS and Linux rather than a full cluster operations workspace.
• ctlptl is a free Apache-2.0 tool for Linux, macOS and Windows with no paid plans or stated usage limits.

Verdict

srelens is a strong choice for engineers who want a free, open-source graphical console that combines deep Kubernetes inspection with carefully confirmed operations and local credentials. Choose it for rich desktop and MCP-assisted cluster work; look elsewhere if your priority is a turnkey multi-user web deployment or currently signed Windows installers.