Axiom
Run Kubernetes like a private cloud. One binary. One console.
Private-cloud control plane for k3s and Kubernetes. Axiom shows applications first, and keeps Pods, logs, an interactive terminal, events, nodes, scaling, restart, stop/start, eviction and drain one click away.
Apps first · One Go binary, UI embedded · Real auth: local, OIDC, SAML, LDAP · Viewer role enforced server-side · 8 languages
Why Axiom
| When this happens… | Axiom gives you… |
|---|
| Your team thinks in apps, not Pods | An application-first Workloads view with start, stop, restart, scale, rollout history and undo |
| A pod will not start | A plain-English "why is this pod not running", built from scheduling conditions, Events and container waiting reasons |
| Something broke and nobody knows what changed | A Timeline of events, audit entries, alerts and rollouts, also a What changed tab on every workload |
| You run more than one cluster | Fleet: every cluster's health, latency, nodes, pods and CPU/memory, with one-click switching |
| You need a shell or logs now | Live log tail and a real PTY terminal over WebSocket, with no kubectl on the laptop |
| Helm and GitOps live in other tools | Chart install and rollback, plus Argo CD / Flux creation and sync, in the same console |
| Cloud bills are a surprise | Cost by namespace and workload, budgets, rightsizing, and (experimental) real invoice reconciliation |
| Not everyone should be able to change things | admin / operator / viewer roles, namespace-restricted viewers, two-factor sign-in, and an audit log |
Axiom is deliberately small to run: a single Go binary with the React UI embedded, installed by one Helm chart. No database is required.
See it live
What you get
| |
|---|
| Run | Deployments, StatefulSets, DaemonSets, CronJobs and Jobs. A Run workload wizard (form, natural-language intent, or YAML validate-and-apply), bulk restart/delete, a diff review before any Apply. |
| Operate | Pods with exec, logs, evict; Nodes with cordon, uncordon, drain and taints; Autoscaling (HPA, VPA, KEDA); Quotas, Limits and PDBs. |
| Network | Services, Ingresses and Gateway API (Envoy Gateway preferred), NetworkPolicy list/create/delete, and a live PacketWolf eBPF/Cilium flow panel when configured. |
| Storage | PVCs by StorageClass, PersistentVolumes, Backups (VolumeSnapshots and Velero), and the optional Atlas control plane. |
| Virtual machines | KubeVirt lifecycle (start, stop, migrate), snapshots, clones, exports, restores. |
| Understand | Health check, Timeline, Security reports, a resource graph per workload, an Access review ("who can delete Secrets here?"), and opt-in Explain with AI with redacted, previewed payloads. |
| Ops hub | Helm, GitOps, Agents, Identity, Audit with CSV export, RBAC, Webhooks, Cost. |
| Everywhere | ⌘K command palette, saved views, keyboard shortcuts, notification inbox, light and dark themes, English, Deutsch, Español, Français, Português, Italiano, 日本語 and 简体中文. |
The complete page-by-page list is in docs/customer/PAGE_INDEX.md.
How it fits together
Browser · scripts / CI
| HTTPS (Basic / OIDC / SAML / LDAP)
v
+------------------------------------------+
| zyvor-axiom (one Go binary) |
| React UI (embedded) + /api/v1 (100+) |
| auth · roles · audit · multi-cluster |
+--------+-----------------+----------------+
| |
client-go (in-cluster | optional integrations
ServiceAccount, or | Atlas · PacketWolf · Postgres
kubeconfig contexts) | OIDC · Slack/webhook · Argo/Flux
v v
k3s / Kubernetes your tools
The ServiceAccount gets a per-group RBAC allowlist, never a wildcard. Axiom's own RBAC UI can create namespaced Roles but deliberately cannot touch ClusterRoles. Details: Architecture · Security posture.
Quickstart
You need a cluster with kubectl, and Helm 3. No Go or Node toolchain.
helm install axiom deploy/helm/axiom \
--set auth.username=admin \
--set auth.password='replace-with-a-strong-password'
kubectl -n axiom-system get pods -w
Then open https://<any-node-ip>:30590 (accept the self-signed certificate once) and sign in. Ingress with a real certificate, OIDC/SAML, Atlas and other variations: Quickstart · Deployment guide.
여기까지가 README 앞부분입니다. 나머지는 원문에서 읽을 수 있습니다. README 전문 보기 ↗
