Skip to content
Docs · Documentation

Reference

Known limitations

What isn't finished or isn't there yet.

Kubyl is young. These are the current rough edges, so you don't have to discover them the hard way.

Platform

  • Windows builds are not code-signed. SmartScreen warns on first launch. There is no MSI or MSIX.
  • Web views on Linux need WebKitGTK. A Wayland client cannot embed WebKitGTK's surface, so Kubyl runs through XWayland when your session offers it (KUBYL_WAYLAND=1 opts out). On plain Wayland every page opens in a window of its own. Dragging files out of the file browser to the OS works on macOS and Wayland only.
  • Flatpak runs Kubyl in a sandbox, so exec-plugin kubeconfigs that call aws or gcloud cannot run there. Use another install method for those. See Installation.
  • Windows and Linux builds are built and unit-tested by CI. Parts of newer features, such as the Flux views, were only run on macOS by hand.

Interface

  • There is no settings window or in-app shortcut editor. Edit settings.json.
  • The light theme is unfinished. Dark is the default and the polished one.
  • No custom themes. Fonts are fixed to IBM Plex.
  • No command-line interface and no credential-plugin command.

Features

  • OLM v1 has no full UI. ClusterExtensions and ClusterCatalogs are read-only apart from YAML templates. See Operators and Helm.
  • Helm needs the helm CLI on your PATH. Kubyl has no Helm plugins, post-renderers, helm test or drift diff between a release and the live objects, and it does not install metrics-server or Prometheus for you. See Helm.
  • Flux has no flux diff equivalent, cannot bootstrap or install Flux, and shows image automation and notifications read-only. See Flux.
  • AI agents are read-only, and no agent is installed for you. Masking of free text, such as a value under an unusual key in a custom resource, is best-effort. @-mentions only offer objects Kubyl already watches. Agent settings such as the model come from the agent itself. See AI agents.
  • Device Resources and policy views (ResourceClaims, admission policies, Gateway API) have no CEL highlighting or policy playground.
  • EKS, GKE and AKS updates aren't in the official builds. See Cluster updates.
  • Interactive exec plugins get a line prompt, not a terminal, so plugins that check for a TTY behave as non-interactive.
  • Network flows have backend-specific gaps. See Network flows.
  • Argo CD SSO for OIDC installs needs cliClientID, and there is no rendered-manifest view.

Coming in the next release

  • Local terminal: a local shell is your own kubectl, so it bypasses read-only mode and PROD protection. Kubyl says so and asks for the cluster name on PROD. A context that signs in through Kubyl gets its token once, when the tab opens, so it expires like the sign-in does: open a new tab. If your shell's startup files export KUBECONFIG, theirs wins. The Windows (ConPTY and PowerShell) path was not run by hand, and leftover temporary kubeconfigs on Windows wait up to 7 days to be swept. See Terminal.
  • Applications only groups objects that carry app.kubernetes.io/instance. Logs open per workload, not for all pods of an application, and the table has no clickable column headers. See Applications.
  • Security Center reads Trivy Operator only. It cannot import a vulnerability database for air-gapped clusters or trigger scans, a report's panel lists at most 300 findings (the CSV export has all), and the sidebar badge can lag an open tab by up to a minute. See Security Center.
  • Cost reads OpenCost only (no Kubecost), needs Prometheus behind it and shows zero cost until OpenCost has pricing data. Kubyl makes no list-price estimates. See Cost.
  • Cloud cluster discovery runs your installed aws, az and gcloud CLIs, so it cannot sign you in. The AWS and Azure paths were tested against recorded output and fake CLIs, not the real programs. Two AWS profiles of one account list a cluster twice, and a profile that needs an MFA prompt may end with a timeout after 60 seconds. See Kubeconfig editor.
  • CSV export neutralises cells that start with =, +, - or @ by prefixing a quote, so negative numbers export as text. There is no byte-order mark.

Report a problem

Open an issue on GitHub with your Kubyl version, platform and the relevant lines from the log files. Remove cluster names or tokens you don't want to share first.

Something missing or wrong? Open an issue on GitHub.