# Radar

> Documentation for Radar - the open-source Kubernetes visibility tool, and Radar Cloud, the hosted multi-cluster control plane. By Skyhook.

## Docs

- [Alerts](https://radarhq.io/docs/cloud/alerts.md): Rule-driven, durable alerting on top of the live Issues stream - get notified when something breaks, and keep a history of what fired after it clears.
- [Applications across clusters (fleet view)](https://radarhq.io/docs/cloud/applications.md): Fleet Applications groups workloads by the app they belong to and folds each app across the environments and clusters it runs in - one row per app, with version skew and promotion lag at a glance.
- [Audit log](https://radarhq.io/docs/cloud/audit-log.md): Org-scoped activity log. Every mutation - cluster CRUD, member ops, billing, auth, PAT lifecycle - is recorded with actor, IP, and metadata. JSON or CSV export.
- [Billing & plans](https://radarhq.io/docs/cloud/billing.md): Three plans - Free, Team, Enterprise. Per-cluster pricing on Team, customer Stripe portal, prorated subscriptions.
- [Cluster token rotation](https://radarhq.io/docs/cloud/cluster-token.md): Cluster install tokens are bearer credentials. Rotate them when an operator leaves, when a value file leaks, or as part of routine hygiene.
- [Connecting a cluster](https://radarhq.io/docs/cloud/connect-cluster.md): Install Radar in your Kubernetes cluster, what each Helm value does, RBAC scope, and how to verify the connection.
- [Connected apps & MCP access](https://radarhq.io/docs/cloud/connected-apps.md): Connect external AI agents to your org over OAuth, manage their grants, and clamp the whole MCP surface to read-only with an org-wide access mode.
- [Fleet views](https://radarhq.io/docs/cloud/fleet-views.md): Cross-cluster aggregates - issues, applications, search, audit checks, and package drift across every cluster connected to your org.
- [Members & invitations](https://radarhq.io/docs/cloud/members.md): Invite members by email, set their role, and use domain auto-join so the right people land in your org without explicit invites.
- [Notifications](https://radarhq.io/docs/cloud/notifications.md): Personal email preferences, the in-app inbox, and org-level Slack / generic webhook destinations for cluster, member, and billing events.
- [Organizations & roles](https://radarhq.io/docs/cloud/organizations.md): Organizations are the tenant boundary in Cloud - they own clusters, members, billing, and audit. Three roles: owner, member, viewer.
- [Radar Cloud overview](https://radarhq.io/docs/cloud/overview.md): How Radar Cloud is built - the hosted control plane, the in-cluster Radar pod, the tunnel, and what stays in your cluster vs. what goes to the cloud.
- [Personal access tokens](https://radarhq.io/docs/cloud/personal-access-tokens.md): Mint per-user PATs for AI clients (Claude, Cursor, Claude Code) and CI scripts. Org-pinned at mint time, SHA-256 hashed at rest, revocable any time.
- [RBAC under Cloud mode](https://radarhq.io/docs/cloud/rbac.md): How a Cloud user's role becomes a Kubernetes identity. The cloud:owner / cloud:member / cloud:viewer groups, the X-Forwarded-* headers, and how to override the default ClusterRoleBindings.
- [Architecture](https://radarhq.io/docs/cloud/self-hosted/architecture.md): Component diagram, data flow, trust boundaries.
- [Authentication](https://radarhq.io/docs/cloud/self-hosted/auth.md): OIDC + the always-available break-glass admin. WorkOS is not used in self-hosted - your IdP is the source of truth.
- [Backups](https://radarhq.io/docs/cloud/self-hosted/backups.md): What's recoverable from K8s state alone, and what needs Postgres backups.
- [Configuration reference](https://radarhq.io/docs/cloud/self-hosted/configuration.md): Every value the chart exposes and the env var it maps to in the running control plane.
- [Self-hosted Radar Cloud](https://radarhq.io/docs/cloud/self-hosted/index.md): Run the Radar Cloud control plane inside your own VPC. The same Go API + web app we operate at app.radarhq.io, deployed via Helm in a customer-controlled cluster.
- [Install](https://radarhq.io/docs/cloud/self-hosted/install.md): Helm walkthrough for self-hosted Radar Cloud. ~10 minutes from chart-add to first sign-in.
- [Licensing](https://radarhq.io/docs/cloud/self-hosted/licensing.md): What gets sent home, the warn-only banner ladder, key rotation.
- [Requirements](https://radarhq.io/docs/cloud/self-hosted/requirements.md): What you need before installing self-hosted Radar Cloud.
- [Troubleshooting](https://radarhq.io/docs/cloud/self-hosted/troubleshooting.md): What to check when things go wrong. Failure modes from real installs, with the fix at the top.
- [Upgrade](https://radarhq.io/docs/cloud/self-hosted/upgrade.md): Helm upgrade flow, migration safety, version-skew policy.
- [SSO (SAML / OIDC)](https://radarhq.io/docs/cloud/sso.md): Self-serve SAML and OIDC setup via the WorkOS Admin Portal. Owner-only. Once configured, users in your IdP authenticate without going through email magic-link.
- [Authentication](https://radarhq.io/docs/configuration/authentication.md): Radar's two auth modes - proxy headers and OIDC. Writes run as the user via Kubernetes impersonation; reads are authorized by your namespace access.
- [CLI flags](https://radarhq.io/docs/configuration/cli.md): Every flag accepted by the radar / kubectl-radar binary, including auth, MCP, timeline storage, and Radar Cloud integration flags.
- [Configuration files](https://radarhq.io/docs/configuration/files.md): Where Radar stores defaults and preferences, kubeconfig precedence, and how to switch between clusters and contexts.
- [In-cluster deployment](https://radarhq.io/docs/configuration/in-cluster.md): Run Radar as a pod in your cluster for shared team access. Helm chart, ingress, RBAC opt-ins, and graceful permission degradation.
- [Access control (RBAC visibility)](https://radarhq.io/docs/features/access-control.md): Inspect what any ServiceAccount, User, or Group can actually do - without three kubectl describe calls. Pod and Workload detail pages surface blast radius so you can answer 'what happens if this is compromised?' in one click.
- [Applications view - browse a cluster by app](https://radarhq.io/docs/features/applications.md): Group a cluster's workloads into the application they belong to - resolved from ownership, GitOps, Helm, and labels - with a workload rail, topology, and search. Open source and Cloud.
- [Cluster audit](https://radarhq.io/docs/features/cluster-audit.md): Built-in best-practices scan covering security, reliability, and efficiency. Inspired by Polaris and the NSA / CISA Kubernetes hardening guide. Configurable ignore patterns. No extra installs.
- [Compare resources](https://radarhq.io/docs/features/compare.md): Diff two Kubernetes resources of the same kind side-by-side - YAML diff with field-level highlighting, swap, spec-only, hide-unchanged.
- [Cost insights](https://radarhq.io/docs/features/cost.md): OpenCost-powered cost breakdown by namespace, workload, and node. Auto-detected when OpenCost is installed in the cluster.
- [Exec & port-forward](https://radarhq.io/docs/features/exec-and-portforward.md): Pod terminal, debug containers, port forwarding, and a local terminal pane - all gated by RBAC and disable-able per install.
- [GitOps (Argo CD & Flux)](https://radarhq.io/docs/features/gitops.md): Dedicated workspace for Argo CD Applications and Flux Kustomizations / HelmReleases - fleet view, per-app diagnosis, and one-click controls. Goes beyond status display: explains why something is OutOfSync, what's blocking deletion, and which controller is unhealthy.
- [Helm management](https://radarhq.io/docs/features/helm.md): View installed Helm releases, inspect values and rendered manifests, track available upgrades, choose a version, rollback, and uninstall - all without leaving Radar.
- [Image filesystem](https://radarhq.io/docs/features/image-filesystem.md): Inspect a container image's filesystem without pulling it locally. Browse layers, search, and download files - over the OCI distribution spec, with the cluster's own pull credentials.
- [Integrations](https://radarhq.io/docs/features/integrations.md): Argo, Flux, Cilium, Istio, Karpenter, KEDA, cert-manager, OpenCost, Prometheus, Trivy, Velero, Knative, and more - all detected at runtime, zero plugins required.
- [Argo Rollouts progressive delivery visibility](https://radarhq.io/docs/features/integrations/argo-rollouts.md): Visualize Argo Rollouts in Radar: live Rollout status in topology, typed detail views, and AI summaries for canary and blue-green progressive delivery.
- [Argo Workflows visibility in Kubernetes](https://radarhq.io/docs/features/integrations/argo-workflows.md): See Argo Workflows in Radar: Workflow and WorkflowTemplate detail views with live status, plus CronWorkflow support - no separate UI needed.
- [cert-manager TLS certificate visibility](https://radarhq.io/docs/features/integrations/cert-manager.md): Trace cert-manager in Radar: Certificate-to-Issuer topology and the full provisioning chain - CertificateRequest, Order, Challenge - with renewal status at a glance.
- [CloudNativePG PostgreSQL cluster visibility](https://radarhq.io/docs/features/integrations/cloudnative-pg.md): Monitor CloudNativePG in Radar: PostgreSQL cluster phase, primary and replica node distribution, backup status, storage config, and failover health in one detail view.
- [Cluster API (CAPI) cluster lifecycle visibility](https://radarhq.io/docs/features/integrations/cluster-api.md): Visualize Cluster API in Radar: the full CAPI ownership chain from ClusterClass through Cluster and Machine to Node, with MachineHealthChecks and lifecycle status.
- [Contour ingress routing visibility](https://radarhq.io/docs/features/integrations/contour.md): See Contour routing in Radar: HTTPProxy delegation chains, TLS configuration edges, and the full path from root proxy to Service in the topology view.
- [Crossplane managed resource visibility](https://radarhq.io/docs/features/integrations/crossplane.md): Debug Crossplane in Radar: managed resource status for every provider, Composite and Claim views with per-resource live badges, and upstream cloud errors surfaced verbatim.
- [Dynamic Resource Allocation (DRA) GPU visibility](https://radarhq.io/docs/features/integrations/dra.md): Inspect Kubernetes DRA in Radar: ResourceClaim allocation lifecycle, DeviceClasses, ResourceSlices, and which Pods hold each device reservation.
- [External Secrets Operator sync visibility](https://radarhq.io/docs/features/integrations/external-secrets.md): Watch External Secrets Operator in Radar: sync status, store references, secret mappings, and failure alerts for ExternalSecrets and ClusterExternalSecrets.
- [Gateway API routing visibility in Kubernetes](https://radarhq.io/docs/features/integrations/gateway-api.md): Visualize Gateway API in Radar: the full network path from GatewayClass through Gateway and HTTPRoute to Service and Pod, with typed route detail views.
- [Argo CD & Flux integration coverage](https://radarhq.io/docs/features/integrations/gitops-flux-argo.md): Radar's Argo CD and Flux integration coverage: supported CRDs, topology and detail views, reconcile and suspend operations, and per-resource diagnosis.
- [GPU & AI/ML workload visibility - Kueue, KubeRay, KServe & more](https://radarhq.io/docs/features/integrations/gpu-ml-ecosystem.md): Radar's GPU and AI/ML coverage: Kueue, Volcano, KubeRay, KServe, KAI Scheduler, NVIDIA NIM, and Kubeflow training - 37 kinds with status badges, smart columns, and filters.
- [Istio service mesh visibility in Kubernetes](https://radarhq.io/docs/features/integrations/istio.md): See Istio in Radar: gateway-to-service traffic topology, VirtualService routing rules with weight bars, DestinationRule config edges, and fault-injection warnings.
- [Karpenter node autoscaling visibility](https://radarhq.io/docs/features/integrations/karpenter.md): Watch Karpenter in Radar: the NodePool to NodeClaim to Node to Pod provisioning chain in topology, with NodePool status and NodeClass configuration views.
- [KEDA event-driven autoscaling visibility](https://radarhq.io/docs/features/integrations/keda.md): See KEDA in Radar: ScaledObject-to-workload topology edges showing which Deployments, StatefulSets, and Rollouts KEDA scales, with live status.
- [Knative serving & eventing visibility](https://radarhq.io/docs/features/integrations/knative.md): Trace Knative in Radar: the full Serving chain from Route through Revision to Pod, plus Eventing flows from sources through Brokers and Triggers.
- [Kyverno policy visibility in Kubernetes](https://radarhq.io/docs/features/integrations/kyverno.md): Audit Kyverno in Radar: Policy detail views with Enforce/Audit badges and rule breakdowns, plus PolicyReport charts of pass/fail results across the cluster.
- [Kubernetes & Cilium network policy visibility](https://radarhq.io/docs/features/integrations/network-policies.md): See network policies in Radar: NetworkPolicy and Cilium policy nodes in topology with edges to the workloads they protect - spot which workloads have coverage at a glance.
- [NVIDIA GPU Operator stack visibility](https://radarhq.io/docs/features/integrations/nvidia-gpu-operator.md): Monitor the NVIDIA GPU Operator in Radar: ClusterPolicy state, per-component rollout badges, driver lifecycle, and MIG strategy - with alerts when rollouts stall.
- [OpenCost Kubernetes cost visibility](https://radarhq.io/docs/features/integrations/opencost.md): Radar reads OpenCost metrics from your existing Prometheus automatically: cluster cost dashboards, namespace and workload breakdowns, efficiency scores, and node pricing.
- [Prometheus Operator monitoring visibility](https://radarhq.io/docs/features/integrations/prometheus.md): Inspect Prometheus Operator resources in Radar: ServiceMonitor scrape configs, PrometheusRule groups with alert and recording rule counts, and PodMonitor detail views.
- [Bitnami Sealed Secrets visibility](https://radarhq.io/docs/features/integrations/sealed-secrets.md): See Bitnami Sealed Secrets in Radar: SealedSecret detail views with encrypted data keys, template metadata, and the target Secret's scope and namespace.
- [Traefik ingress routing visibility](https://radarhq.io/docs/features/integrations/traefik.md): Trace Traefik in Radar: IngressRoute to Middleware to Service routing paths in topology, plus IngressRoute and Middleware detail views with secrets redacted.
- [Trivy Operator vulnerability scan visibility](https://radarhq.io/docs/features/integrations/trivy.md): Review Trivy Operator scans in Radar: VulnerabilityReports with severity breakdowns, config audit pass/fail checks, and CVE counts as smart table columns.
- [Velero backup & restore visibility](https://radarhq.io/docs/features/integrations/velero.md): Track Velero in Radar: Backup and Restore phases with live progress bars, scope filters, storage locations, and alerts for failed or partial backups.
- [Vertical Pod Autoscaler (VPA) visibility](https://radarhq.io/docs/features/integrations/vpa.md): See VPA in Radar: Vertical Pod Autoscaler nodes with edges to their target workloads, grouped alongside HPA and KEDA in the Scalers section.
- [Issues](https://radarhq.io/docs/features/issues.md): One ranked stream of what's broken right now - failing workloads, dangling references, pods that can't start, and False conditions on Argo / Flux / Knative / Crossplane / cert-manager / KEDA resources. Live operational state, not config posture.
- [AI via MCP](https://radarhq.io/docs/features/mcp.md): Built-in Model Context Protocol server. Token-optimized cluster context for Claude, Cursor, Claude Code, Windsurf, VS Code Copilot, and any other MCP-aware AI tool.
- [Navigation & search](https://radarhq.io/docs/features/navigation.md): The left nav rail and the omnibar - how you move between views and find any resource across the cluster. Identical between OSS and Cloud.
- [Resource browser](https://radarhq.io/docs/features/resources.md): Table view of every Kubernetes resource - smart columns per kind, search, filter, drill-down, and direct YAML edit.
- [Event timeline](https://radarhq.io/docs/features/timeline.md): Unified, queryable timeline of cluster events and resource changes. Memory or SQLite storage, scoped per resource or cluster-wide.
- [Topology view](https://radarhq.io/docs/features/topology.md): Interactive graph of every resource in your cluster and how they're connected - workloads, services, ingresses, traffic flows, and integration-aware edges from Argo, Flux, Karpenter, and more.
- [Traffic visualization](https://radarhq.io/docs/features/traffic.md): Live request flows on the topology graph from Hubble (Cilium), Caretta, or Istio - auto-detected, no extra config.
- [Radar documentation](https://radarhq.io/docs/index.md): Install and operate Radar - the open-source Kubernetes visibility tool, and Radar Cloud, the hosted multi-cluster control plane.
- [Install Radar (local)](https://radarhq.io/docs/install.md): Install the Radar CLI or desktop app to run Radar against any cluster reachable from your kubeconfig. No account, no in-cluster install, no cloud.
- [OSS vs Cloud](https://radarhq.io/docs/oss-vs-cloud.md): How Radar OSS and Radar Cloud differ - features, deployment model, and when to pick which.
- [Quickstart with Radar Cloud](https://radarhq.io/docs/quickstart-cloud.md): Sign up, create an organization, install Radar in your cluster with one Helm command, and start using fleet views.
- [HTTP API](https://radarhq.io/docs/reference/api.md): Radar's HTTP API - the same surface the UI uses. Listed by area, with notes on Cloud-tunnel access.
- [Keyboard shortcuts](https://radarhq.io/docs/reference/keyboard-shortcuts.md): Every keybinding in the Radar UI - view switching, navigation, search, topology, and more. Identical between OSS and Cloud.

## OpenAPI Specs

- [openapi](https://radarhq.io/docs/api-reference/openapi.json)

## Optional

- [radarhq.io](https://radarhq.io)
- [GitHub](https://github.com/skyhook-io/radar)
- [Open app](https://app.radarhq.io)
- [Discord](https://radarhq.io/community/chat)
- [Community](https://radarhq.io/community)