Whether you want to create namespaces, manage access for team members, connect new clusters or inspect what is running inside a virtual cluster, Loft UI is a feature-rich interface for Kubernetes that runs kubectl under the hood and adds easy to use controls.
Loft's advanced inactivity detection monitors when engineers are not working with their namespaces and virtual clusters, so you can define rules for automatically putting pre-production environments to sleep or even configure Loft to automatically delete them after a certain period of inactivity.
Enable your engineering teams to create Kubernetes namespaces whenever they need them without having to loop in someone from IT with admin privileges.
Self-service namespaces help your engineers move faster and autonomously validate and test their code early on in the software development process.
Enable namespace and virtual cluster sharing and Loft will configure the underlying Kubernetes RBAC rules accordingly.
Colleagues can access the shared environment to collaboratively debug issues or get access on shared, work-in-progress APIs.
Loft UI runs kubectl under the hood
Loft's "Spaces" act as a virtual abstraction of Kubernetes namespaces ensure consistency and security.
Loft introcuces the Space as a custom resource. Spaces are virtual, so they don't actually get persisted in etcd but only exist as a virtual abstraction on top of regular namespaces. This has the benefit that there is no duplication but at the same time, you can manage spaces with kubectl just like regular Kubernetes namespaces but without the need to give users access to real namespaces or other cluster-wide resources.
Manually configuring RBAC is very risky because it is error-prone. Loft automated RBAC and reduces human errors while ensuring consistent security standards.
Loft allows platform admins to configure security templates for namespaces to enforce network isolation for namespaces using Kubernetes network policies.
Kubernetes ResourceQuotas are great but they work on a per-namespace basis. Loft allows you to define aggregated cross-namespace resource limits for indivual users, teams or AD/SSO groups.
Loft provides a secrets manager that allows you to define and sync secrets that should be available in all (or certain) namespaces.
