ServerMind for Kubernetes
One console for every Kubernetes cluster, wherever it runs — a self-hosted multi-cluster control plane with outbound-only agents. Free for 1 cluster and up to 3 worker nodes.
Running Linux servers? See ServerMind for Linux →
Architecture
Outbound-Only Agent
The agent inside each cluster dials out to the hub — QUIC first, WebSocket over 443 when UDP is blocked, straight through HTTP proxies. No inbound rules, VPN or public IP on the cluster.
Highly Available Hub
The manager runs as multiple replicas with mTLS peer forwarding and proactive draining, backed by a CloudNativePG database — installed with one Helm chart.
No Credentials on the Hub
Clusters join with a single-use token or a secretless ServiceAccount/OIDC identity and keep their private key. An imported kubeconfig is discarded after install.
Operate the Fleet
Register, work with and deliver to every cluster from one console.
Secure & Govern
See risk continuously, prove compliance and control who can do what.
Run Reliably
Observe, get alerted, and run the hub itself like production software.
GitOps Built In
The agent clones, renders, applies and prunes itself — no Argo CD, Flux or Fleet on managed clusters.
Compliance Evidence
Sealed NIS2/CRA evidence packs graded Covered, Attested, Partial or Gap — ready for an auditor.
No Feature Gating
Every plan includes every feature. You pay only for worker nodes beyond the free tier.
Ready to see it in action?
Start with 1 cluster and up to 3 worker nodes, free forever. All features included. No credit card required.