dasomel
한국어
All systems
WORK / ACTIVE SYSTEM

ClusterDeck

A macOS desktop tool that discovers frequently recreated VM/Kubernetes environments and automates SSH and kubeconfig access around stable Profiles

macOS · Tauri · Rust · React · TypeScript · SSH · Kubernetes · kubeconfig · ProxyJump
Source
01 / Problem02 / Architecture03 / Development04 / Proof05 / Knowledge06 / Record
01 / PROBLEM

Frequently recreated VM and Kubernetes labs change IP addresses, forcing users to rebuild SSH aliases, bastion/ProxyJump paths, remote kubeconfigs, and local contexts by hand

RESPONSE

Keep a stable Profile identity while automating host discovery → SSH bootstrap → alias/ProxyJump → kubeconfig fetch/normalization → Kubernetes connectivity verification in one macOS desktop workflow

02 / ARCHITECTURE

Read the boundaries before the features.

Identity, delivery, network, storage and workload integration are shown as operational seams rather than a feature inventory.

03 / DEVELOPMENT OVER TIME

Evolution is part of the evidence.

First commit, cumulative commits, releases and recent activity show whether the system is still being engineered.

DEVELOPMENT OBSERVATORY
dasomel/clusterdeck

Observe a system evolving over time, not a repository frozen at one release.

Contributors: 1
First commit
Aug 24, 2026
Commits
96
Releases
0
Latest release
—
Last push
Sep 18, 2026
Active for
1 months
Recent development activity
93 commits / 20 weeks
PAST → NOW
Language: RustLicense: Apache-2.0Stars: 0Forks: 0Open issues: 10
04 / PROOF, NOT BADGES
9
technology / domain signals

Declared scope and technical context

3
connected docs

Operational or implementation documentation

4
engineering notes

Knowledge produced by the project

0
digest links

External signals explicitly connected

05 / CONNECTED KNOWLEDGE

What this system produced beyond code

06 / ENGINEERING RECORD

Implementation details, operating notes and project-specific context.

Overview

ClusterDeck is a macOS-first desktop tool for keeping local access to frequently recreated VM and Kubernetes environments stable.

It is not a general Kubernetes management console. Its boundary is the workstation access layer: discover a remote environment, make SSH access usable, fetch and normalize kubeconfig, then verify Kubernetes connectivity.

IP / Host Discovery
      ↓
SSH Connectivity
      ↓
SSH Bootstrap (optional)
      ↓
SSH Alias / ProxyJump
      ↓
Remote kubeconfig Fetch
      ↓
kubeconfig Normalization
      ↓
Local Profile
      ↓
Kubernetes Connectivity Check

Design

  • Tauri 2 + Rust for filesystem, process execution, SSH orchestration, and kubeconfig handling.
  • React + TypeScript for a compact Profile/Host/Connect/Status UX.
  • Native OpenSSH first instead of reimplementing SSH behavior.
  • Profile-oriented identity so users think in environments rather than changing IP addresses.
  • ClusterDeck-owned configuration under ~/.clusterdeck/ without rewriting unrelated user SSH/Kubernetes configuration.

Security boundary

Bootstrap passwords are one-time inputs and should not be stored or logged. Generated kubeconfigs use restrictive permissions, destructive merges should be reversible, and persistent credentials should use a secure local store such as macOS Keychain.

MVP

  1. Profile CRUD
  2. Multi-host discovery and SSH bootstrap
  3. SSH alias generation
  4. Bastion / ProxyJump
  5. Remote kubeconfig fetch and normalization
  6. Per-Profile kubeconfig storage
  7. Kubernetes connectivity verification
  8. Minimal-click macOS UI

Cross-platform and provider-specific discovery remain later phases.

Development

pnpm install
pnpm tauri dev
pnpm build
cargo check --manifest-path src-tauri/Cargo.toml

Documentation

TopicPage
OverviewOverview
ArchitectureArchitecture
Getting StartedGetting Started