The add-ons a managed cloud sells you as services, installed into your own cluster with one click. Each runs in your space, on its own secure address that only you can reach, and shows what it costs in CPU and memory before you connect it.
Last updated 2026-09-05
How tools work
In your cluster, not ours. Connecting a tool creates its workloads in your space. Disconnecting removes them.
Own secure address. Tools with a UI get a URL only your account can open; you sign in with your platform account.
Resource cost up front. Every tool lists the CPU and memory it will take from your allowance or your nodes.
Some tools are paid. A few carry a monthly subscription on top of your plan; the price is shown before you connect, billed through Stripe, cancellable any time. When a tool subscription lapses the tool is locked, not deleted — your data stays.
Feeds the dashboard. Several tools upgrade a dashboard number from "estimated" to "measured" — Prometheus for metrics, OpenCost for spend, Trivy for the security score.
Metrics Server is not offered as a tool because your cluster already ships one: kubectl top works out of the box.
Run & see
Tool
What it does in your cluster
Kubernetes Dashboard
The full Kubernetes Dashboard — workloads, YAML, logs, exec — in your own cluster. Choose Read-only or Full admin when you connect.
Cluster Space (3D)
A navigable 3D view of this cluster: nodes, your apps grouped by namespace, and every tool you run.
Ghost Browser
A real logged-in browser with an HTTP API and an on-board agent, driven from your own LLM. Persistent profiles, one owner.
Master · Boardroom
An autonomous business agent that researches demand, builds and verifies products, and works them toward a sale through your Ghost Browser.
Observability
Tool
What it does in your cluster
Prometheus
Time-series metrics scraped from your own cluster — turns dashboard estimates into measured graphs.
Grafana
Dashboards over your own Prometheus (and Loki), on its own secure address.
Loki + Promtail
Log aggregation and search across every pod in your cluster; view them in Grafana.
Kube State Metrics
Object-level metrics (deployments, pods, nodes, jobs) so dashboards and SLOs are complete.
Alertmanager
Routes alerts from your Prometheus to email, Slack or a webhook, with its own UI.
Jaeger
Distributed tracing (OTLP) with a trace explorer. In-memory all-in-one.
Security & policy
Tool
What it does in your cluster
Trivy Operator
Continuous CVE scanning of your images plus config audits — feeds the security score with real data.
Runtime threat detection (eBPF): a shell in a container, a crypto-miner, unexpected file access.
External Secrets
Sync secrets into your cluster from AWS, GCP, Vault or 1Password instead of keeping them in Git.
Networking
Tool
What it does in your cluster
cert-manager
Issues and renews TLS certificates inside your cluster, so a hostname you serve yourself does not depend on the platform.
Ingress (Traefik)
Your cluster’s own front door: terminates TLS and routes hostnames itself — the prerequisite for your own multi-tenancy.
Storage, backup & scaling
Tool
What it does in your cluster
MinIO
S3-compatible object storage in your cluster, with a console — buckets for backups, uploads, artifacts.
Velero
Scheduled backup and restore of manifests and volumes to your own MinIO.
KEDA
Event-driven autoscaling on queue depth, cron, HTTP and 60+ other triggers, down to zero.
Goldilocks
Right-sizing advice — how much CPU and memory each app really needs. Advice only; KEDA does the scaling.
OpenCost
Per-app cost allocation from your own cluster (needs Prometheus).
Dependencies
Some tools build on others: Grafana and OpenCost read from Prometheus; Velero writes to MinIO; the Master works through Ghost Browser. The dashboard tells you what to connect first.