Self Service Kubernetes Namespaces | Loft Labs
Self-Service For Kubernetes Namespaces

Shift left and
put engineers in charge

Define security templates and resource limits, so your
engineering teams can create Kubernetes namespaces
whenever they need them.

Platform Engineers

Connect Kubernetes clusters
Configure user authentication (SSO, LDAP, SAML, GitHub, ...)
Set user permissions and limits


Create and manage their own namespaces autonomously within the limits defined by platform engineers.

Powerful Management UI For Namespaces

Sleep Mode & Auto-Delete

Loft's advanced inactivity detection monitors when engineers are not working with their namespaces and virtual clusters, so you can define rules for automatically putting pre-production environments to sleep or even configure Loft to automatically delete them after a certain period of inactivity.

Learn more

Create Namespaces On-Demand

Enable your engineering teams to create Kubernetes namespaces whenever they need them without having to loop in someone from IT with admin privileges.

Self-service namespaces help your engineers move faster and autonomously validate and test their code early on in the software development process.

Don’t like UIs?
Work directly from your terminal

loft create space dev-api-server
Creating namespace...
Applying security templates to namespace...
Space 'dev-api-server' successfully created.
Loft has created a kube-context on your local machine to access this namespace. It is the current kube-context now.
kubectl get pods       # no need for --namespace
No pods in namespace dev-api-server
kubectl create deployment nginx-deployment --image=nginx
deployment.apps/nginx-deployment created
kubectl get pods
NAME                                READY   STATUS    RESTARTS   AGE
nginx-deployment-84cd76b964-mnvzz   1/1     Running   0          10m
loft list spaces
Name             Cluster             Sleeping   Status   Age   
dev-api-server   dev-eks-us-west-1   false      Active    14d
team-space-1     dev-eks-us-west-2   2h36m      Active    11d
ml-gpu-exp-4     aks-us-east-1       1h40m      Active    30d
loft delete space dev-api-server
Deleting namespace
Space 'dev-api-server' successfully deleted.
Successfully deleted kube context for space 'dev-api-server' from your local .kube/config file.

Let engineers collaborate in spaces whenever needed

Manage everything with kubectl

Loft's "Spaces" act as a virtual abstraction of Kubernetes namespaces ensure consistency and security.

Loft introcuces the Space as a custom resource. Spaces are virtual, so they don't actually get persisted in etcd but only exist as a virtual abstraction on top of regular namespaces. This has the benefit that there is no duplication but at the same time, you can manage spaces with kubectl just like regular Kubernetes namespaces but without the need to give users access to real namespaces or other cluster-wide resources.

Get Started

Ephemeral Kubernetes Environments For Any Use Case

Preview Environments For Pull Requests
Dev Environments
Ephemeral Environments