Let us take a dig into Kubevious

Let us take a dig into Kubevious

In this post, we will discuss a tool name "Kubevious"

Visualizing Kubernetes is something that everyone wants, the more good the visualization, the more it gets adopted by the community. Tools that help to view/debug the issues/configurations right in front of the screen make the life of dev/ops people easy.

There are Different Tools as of today that do the visualization, but I found Kubevious to be different. Along with the visualizations, it also shows the misconfigured labels for the pods-services, instantly shows the RBAC roles/permissions for the service accounts. Sounds Exciting? Let us dive in and see it in action.

For this tutorial, we will install Kubevious to a managed k3s cluster (powered by civo cloud)

After creating a k3s cluster, save the kubeconfig locally, to check if the cluster is ready and running.

kubectl get nodes
NAME               STATUS   ROLES    AGE   VERSION
kube-node-ee97     Ready    <none>   61m   v1.18.6+k3s1
kube-master-650d   Ready    master   62m   v1.18.6+k3s1
kube-node-b70a     Ready    <none>   61m   v1.18.6+k3s1

Now you can deploy Kubevious to the Kubernetes cluster via helm charts easily (make sure to have helm installed locally )

kubectl create namespace kubevious
namespace/kubevious created

helm repo add kubevious https://helm.kubevious.io
"kubevious" has been added to your repositories

helm upgrade --atomic -i -n kubevious  --kubeconfig=config   --version 0.6.36     --set ingress.enabled=true     kubevious kubevious/kubevious 
Release "kubevious" does not exist. Installing it now.
NAME: kubevious
LAST DEPLOYED: Tue Aug 25 19:32:38 2020
NAMESPACE: kubevious
STATUS: deployed

Hooray!! Kubevious installed in seconds within the cluster. Let us see how we can access the dashboard

kubectl get pods -n kubevious
NAME                                    READY   STATUS    RESTARTS   AGE
pod/kubevious-ui-68668b4489-bjsqs       1/1     Running   0          4m37s
pod/kubevious-parser-84cfb9b8d9-slw6z   1/1     Running   0          4m37s
pod/kubevious-6b4786796b-s77hw          1/1     Running   0          4m37s
pod/kubevious-mysql-0                   1/1     Running   0          4m37s

kubectl get ingress -n kubevious
kubevious   <none>   *   80      2m57s

kubectl get svc -n kube-system | grep traefik
traefik-prometheus   ClusterIP    <none>          9100/TCP                     76m
traefik              LoadBalancer   80:30078/TCP,443:32162/TCP   76m

You can directly access the Kubevious UI by hitting the External IP of Traefik and the port that points to port 80. in this case, it would be

Below is the First UI that you get to see :


As you can see, it lists all the namespaces with its configurations (Roles, RoleBindings, ClusterRole, ClusterRoleBindings, Applications deployed in that namespace)


So if you see any warning signs or any red signs you can see that the alerts section will be populated with a reason for it.


You will also be able to view the complete visualization of RBAC - roles and role bindings of in a single view that gives the information on what is the access control level.



You can also see the list of deployed resources, their deployment information, and labels/selector for the service/pod. This is important for rectifying issues on the fly by viewing in the UI. Consider the below scenario:

Say you deploy an nginx app and expose it as a service and while creating the service you didn't specify the labels properly.

kubectl run nginx --image=nginx --replicas=2
kubectl run --generator=deployment/apps.v1 is DEPRECATED and will be removed in a future version. Use kubectl run --generator=run-pod/v1 or kubectl create instead.
deployment.apps/nginx created

#Create a Nodeport service and change the app label (in order to create the above scenario )
kubectl expose deployment/nginx --port=80 --type=NodePort
service/nginx exposed
kubectl get svc
NAME         TYPE        CLUSTER-IP        EXTERNAL-IP   PORT(S)        AGE
kubernetes   ClusterIP     <none>        443/TCP        155m
nginx        NodePort   <none>        80:32485/TCP   2s

kubectl edit svc nginx 
#change the selector as below image


Let us check the Kubevious UI now for the default namespace and you can see that service selector is not able to find any apps.


Now, this becomes very helpful if you find any mismatch in the labels/selectors which is a common mistake.

Also, there is a very interesting feature called Time Machine Say that you have fixed the error now but in the Time Machine, you can view what the error was in past simply by dragging to a specific time window. Below I am showing 2 views -> wrong selector and correct selector



So, In my opinion, Kubevious really helps you to dig into your cluster especially the RBAC portions and also helps you debug the label/selector problem easily. For more information and features like Blast radius, universal search you can visit the official GitHub Repository: github.com/kubevious/kubevious.

Saiyam Pathak
[CKA | CKAD | CNCF Ambassador]