Foredeck

Your Kubernetes clusters, on your phone.

Cluster overview: nodes ready, pods needing attention, recent warnings

Pod detail with containers, restarts and events

Streaming container logs with errors highlighted

What it does

🧭

Every resource the cluster serves

Workloads, network, configuration, storage and RBAC — plus your custom resources, which get the same lists, details and health as anything built in.

📡

Live, not refreshed

Foredeck watches the API server and applies changes as they happen, the way a dashboard on your desk does.

🔍

The status that explains itself

CrashLoopBackOff, ImagePullBackOff, Init:0/2, Not Ready — the container-level reason, not just “Running”.

📜

Logs that follow

Stream any container, switch between them, read the previous instance after a crash, and filter as it scrolls.

🔐

Credentials stay on the device

Tokens and client certificates live in the iOS Keychain. Foredeck talks only to the clusters you add.

🛡️

Actions you are allowed to take

Scale, restart, delete and cordon appear only after the cluster confirms your credential may do them. Any cluster can be marked read-only.

✨

A demo cluster, built in

No cluster to hand? One runs on your device, with a few things going wrong in it, so you can see everything before you connect anything.

Before you start

Your credentials need to be self-contained. A kubeconfig written by aws eks update-kubeconfig or by gcloud does not carry a token — it carries a command to run for one, and iOS has no way to run a command-line tool. Client certificates and bearer tokens work everywhere. Foredeck says so at import and shows you the commands for EKS, GKE, AKS, DigitalOcean, Yandex Cloud and hand-built clusters.

The cluster has to be reachable from your phone. Control planes are rarely on the public internet. Connect your VPN — Tailscale, WireGuard, whatever your company uses — and Foredeck will reach the address in your kubeconfig.

Foredeck runs entirely on your device and connects only to the clusters you add yourself. Your kubeconfigs, tokens and keys stay here.

Kubernetes is a registered trademark of The Linux Foundation. Foredeck is an independent client and is not affiliated with, endorsed by or sponsored by The Linux Foundation or the Kubernetes project.
© 2026 Andrew Kozlowskiy