AI-powered Kubernetes management platform with real-time monitoring, security scanning, and intelligent insights.
Features • Screenshots • Quick Start • Documentation • Helm • Contributing
Real-time cluster health monitoring with AI-powered insights
Cluster overview with live metrics, health indicators, and actionable AI-powered insights
Complete resource management with health indicators
Workload management showing pods, deployments with health indicators and one-click operations
Trivy-powered vulnerability scanning with plain English explanations
Security posture showing Top 3 risks, vulnerability scans, and AI-powered remediation suggestions
Natural language queries with Groq/Gemini/Claude
AI assistant providing intelligent answers about cluster status with real-time data
Pod exec and debug containers with xterm.js
Interactive terminal for pod exec, debug containers, and kubectl command execution
WebSocket-based log streaming with search
Live log viewer with WebSocket streaming, search functionality, and download option
Deploy manifests with validation and summary
YAML deployment with syntax validation, dry-run mode, and deployment summary modal
Visual Helm chart deployment and management
Helm chart browser with installation wizard, release management, and rollback capabilities
Switch between clusters seamlessly
Cluster switcher showing multiple Kubernetes clusters with real-time status
AI-powered security fixes with kubectl commands
AI-powered security remediation with step-by-step kubectl commands and YAML examples
💡 Note: Screenshots show NextSight AI v1.4.0 with all features enabled. Some features require optional components (metrics-server, Prometheus) or AI API keys (Groq/Gemini/Claude).
NextSight AI is an AI-powered Kubernetes management platform that provides real-time visibility, intelligent security insights, and complete control over your clusters. Built with FastAPI and React, it combines traditional monitoring with AI-powered analysis for smarter DevOps operations.
- Real-time Cluster Health - Live overview of pods, nodes, and namespace statistics
- Resource Metrics - CPU and memory utilization across nodes and pods
- Event Timeline - Track cluster events and anomalies
- Dark Mode Support - Full dark/light theme with system preference detection
- Pods - View status, logs, and execute commands
- Deployments - Scale, restart, and rollback with one click
- StatefulSets & DaemonSets - Manage stateful and node-level workloads
- Jobs & CronJobs - Monitor batch processing
- ConfigMaps & Secrets - Secure configuration management
- Persistent Volumes - Storage provisioning and claims
- Services & Ingresses - Network routing and load balancing
- HPAs - Autoscaling policies
- kubectl Terminal - Execute kubectl commands directly in the browser
- Shell Terminal - Full bash access with kubectl and helm pre-installed
- Terminal State Persistence - Command history and output preserved across navigation
- Pod Exec - Interactive PTY-based terminal sessions inside containers
- Full xterm.js terminal with resize support
- WebSocket-based real-time communication
- Debug Containers - Debug distroless/minimal containers without a shell
- Ephemeral container support via kubectl debug
- Multiple debug images (busybox, alpine, netshoot)
- Log Viewer - Real-time streaming with WebSocket support, search filters, and download
- Pod Events - View Kubernetes events for pending/failed pods directly in log viewer
- YAML Deploy - Apply manifests with dry-run validation
- Helm Chart UI - Deploy, upgrade, and rollback Helm releases visually
- AI Analysis - Intelligent incident insights (Gemini/Claude)
- GitFlow Integration - Branch and release management
- Multi-Cluster Support - Manage multiple Kubernetes clusters from one dashboard
- Cluster switcher for quick context switching
- Cluster Management UI - Add, remove, and configure clusters
- View cluster status, metrics, and health
- Discover clusters from kubeconfig contexts
- RBAC Integration - Role-based access control for user permissions
- JWT-based authentication with 4 user roles (Admin, Developer, Operator, Viewer)
- Protected routes and API endpoints
- User management (admin only)
- Default test users: admin/admin123, developer/developer123, operator/operator123, viewer/viewer123
- Cost Analysis Dashboard - Monitor and optimize cluster costs
- Resource cost estimation per namespace and pod
- CPU and memory cost breakdown
- 30-day cost trend visualization
- Optimization recommendations
- Resource efficiency metrics
- Top cost consumers identification
- Security Score & Grade - Overall cluster security assessment (A-F grading)
- Security Findings - Real-time detection of misconfigurations
- Privileged containers detection
- Root user containers
- Host path mounts
- Missing security contexts
- RBAC Analysis - Role-based access control security assessment
- Service account risk analysis
- Cluster-admin binding detection
- Wildcard permission identification
- Network Policy Coverage - Network security posture
- Namespace protection status
- Pod coverage percentage
- Image Vulnerability Scanning - Container security with Trivy
- CVE detection with severity levels
- CVSS scores and fix versions
- AI-Powered Remediation - Google Gemini integration
- Detailed risk assessments
- Step-by-step remediation commands
- YAML configuration examples
- Best practices and prevention tips
# Clone the repository
git clone https://github.com/nextsight-ai/nextsightai.git
cd nextsight
# Start the application
make dev
# or
docker-compose up -d
# View logs
make logsAccess at http://localhost:3000
make help # Show all available commands
make dev # Start development environment
make build # Build Docker images
make logs # View container logs
make down # Stop containers| Requirement | Version | Notes |
|---|---|---|
| Docker | 20.10+ | For containerized deployment |
| Docker Compose | 2.0+ | For local development |
| kubectl | 1.25+ | Kubernetes CLI tool |
| Kubernetes Cluster | 1.24+ | Any CNCF-compliant distribution |
| Component | Purpose | Installation |
|---|---|---|
| metrics-server | Pod/Node CPU & memory metrics | Install Guide |
| Prometheus | Advanced monitoring & alerting | Helm Chart |
| Redis | Caching for better performance | Included in docker-compose.yml |
| PostgreSQL | User & pipeline data persistence | Included in docker-compose.yml |
| Tool | Purpose | Version |
|---|---|---|
| Trivy | Container vulnerability scanning | v0.58.0 (built into Docker image) |
| kubectl | Kubernetes operations | Latest (included in backend) |
| helm | Helm chart management | Latest (included in backend) |
metrics-server is required for pod and node resource metrics:
# For most clusters (Docker Desktop, EKS, GKE, AKS)
kubectl apply -f https://github.com/kubernetes-sigs/metrics-server/releases/latest/download/components.yaml
# For Minikube
minikube addons enable metrics-server
# For Kind or other clusters with self-signed certificates
kubectl apply -f https://github.com/kubernetes-sigs/metrics-server/releases/latest/download/components.yaml
kubectl patch deployment metrics-server -n kube-system --type='json' \
-p='[{"op": "add", "path": "/spec/template/spec/containers/0/args/-", "value": "--kubelet-insecure-tls"}]'
# Verify installation
kubectl get deployment metrics-server -n kube-system
kubectl top nodesFor advanced monitoring and alerting:
# Add Prometheus Helm repo
helm repo add prometheus-community https://prometheus-community.github.io/helm-charts
helm repo update
# Install Prometheus
helm install prometheus prometheus-community/kube-prometheus-stack \
--namespace monitoring --create-namespace
# Port forward to access Prometheus UI (optional)
kubectl port-forward -n monitoring svc/prometheus-kube-prometheus-prometheus 9090:9090NextSight AI will automatically detect and integrate with Prometheus if available.
Create a .env file in the backend directory:
# Application
APP_NAME=NextSight AI
DEBUG=false
# Kubernetes (for local development)
K8S_CONFIG_PATH=~/.kube/config
K8S_IN_CLUSTER=false
# AI Provider (optional)
AI_PROVIDER=gemini
GEMINI_API_KEY=your-api-keynextsight/
├── backend/ # FastAPI Backend
│ ├── app/
│ │ ├── api/routes/ # REST API endpoints
│ │ ├── core/ # Configuration & settings
│ │ ├── schemas/ # Pydantic models
│ │ └── services/ # Business logic
│ ├── Dockerfile
│ ├── entrypoint.sh
│ └── requirements.txt
├── frontend/ # React Frontend
│ ├── src/
│ │ ├── components/ # React components
│ │ ├── services/ # API client
│ │ └── types/ # TypeScript types
│ ├── Dockerfile
│ └── nginx.conf
├── k8s/ # Kubernetes Manifests
│ ├── namespace.yaml
│ ├── rbac.yaml
│ ├── deployment.yaml
│ ├── service.yaml
│ └── ingress.yaml
├── docker-compose.yml
├── Makefile
└── README.md
| Endpoint | Method | Description |
|---|---|---|
/api/v1/kubernetes/health |
GET | Cluster health status |
/api/v1/kubernetes/namespaces |
GET | List all namespaces |
/api/v1/kubernetes/pods |
GET | List all pods |
/api/v1/kubernetes/deployments |
GET | List deployments |
/api/v1/kubernetes/services |
GET | List services |
/api/v1/kubernetes/nodes |
GET | List nodes with details |
/api/v1/kubernetes/metrics |
GET | Cluster metrics |
| Endpoint | Method | Description |
|---|---|---|
/api/v1/kubernetes/scale |
POST | Scale deployment replicas |
/api/v1/kubernetes/restart |
POST | Rolling restart deployment |
/api/v1/kubernetes/apply |
POST | Apply YAML manifest |
/api/v1/kubernetes/kubectl |
POST | Execute kubectl command |
/api/v1/kubernetes/shell |
POST | Execute shell command |
| Endpoint | Method | Description |
|---|---|---|
/api/v1/kubernetes/pods/{ns}/{pod}/logs |
GET | Stream pod logs |
/api/v1/kubernetes/pods/{ns}/{pod}/events |
GET | Get pod events |
/api/v1/kubernetes/pods/{ns}/{pod}/exec |
POST | Execute in container |
| Endpoint | Protocol | Description |
|---|---|---|
/api/v1/ws/pods/{ns}/{pod}/logs |
WS | Real-time log streaming |
/api/v1/ws/pods/{ns}/{pod}/exec |
WS | Interactive terminal session |
/api/v1/ws/pods/{ns}/{pod}/debug |
WS | Debug container session |
# Build images
make build-prod
# Deploy to cluster
make k8s-deploy
# Check status
make k8s-status
# Port forward for access
kubectl port-forward -n nextsight svc/nextsight-frontend 3000:80Deploy NextSight AI to your Kubernetes cluster using Helm:
# Add the repository (when published)
# helm repo add nextsight https://gauravtayade11.github.io/nextsight/charts
# Install from local chart
helm install nextsight ./charts/nextsight -n nextsight --create-namespace
# Install with custom values
helm install nextsight ./charts/nextsight -n nextsight --create-namespace \
--set ingress.enabled=true \
--set ingress.hosts[0].host=nextsight.example.com
# Upgrade existing installation
helm upgrade nextsight ./charts/nextsight -n nextsight
# Uninstall
helm uninstall nextsight -n nextsightConfiguration options:
| Parameter | Description | Default |
|---|---|---|
backend.replicaCount |
Backend replicas | 1 |
frontend.replicaCount |
Frontend replicas | 1 |
ingress.enabled |
Enable ingress | false |
ingress.hosts[0].host |
Ingress hostname | nextsight.local |
backend.extraEnv |
Extra env vars (secrets) | [] |
See charts/nextsight/values.yaml for all options.
- Shell Protection - Dangerous commands are blocked (rm -rf /, sudo, etc.)
- kubectl Guard - Destructive operations require confirmation
- Secret Masking - Only key names displayed, not values
- RBAC Ready - Granular Kubernetes permissions
We chose GitHub CodeQL for static code analysis because it:
- Deep Semantic Analysis - Goes beyond pattern matching to understand code flow and data patterns
- Zero False Positives - Precisely identifies real security vulnerabilities (SQL injection, XSS, SSRF, etc.)
- Language Coverage - Native support for JavaScript/TypeScript and Python (our entire stack)
- GitHub Integration - Seamless integration with GitHub Security tab and Advanced Security features
- Community Queries - Leverages thousands of expert-written security queries
- Free for Public Repos - No cost for open-source projects
Our security pipeline includes:
- CodeQL Analysis - Static code analysis for JavaScript/TypeScript and Python
- Trivy Docker Scan - Container vulnerability scanning for CRITICAL/HIGH CVEs
- Dependency Review - License compliance and vulnerability checks on PRs
- Secret Detection - Gitleaks integration for credential leak prevention
| Layer | Technology |
|---|---|
| Backend | FastAPI, Python 3.11, kubernetes-client |
| Frontend | React 18, TypeScript, Vite, Tailwind CSS |
| Container | Docker, nginx |
| Orchestration | Kubernetes, Helm |
| CLI Tools | kubectl, helm |
We welcome contributions! Please see CONTRIBUTING.md for guidelines.
# Development setup
git clone https://github.com/nextsight-ai/nextsightai.git
cd nextsight
make devSee CHANGELOG.md for detailed version history and release notes.
This project is licensed under the MIT License - see the LICENSE file for details.
Built with passion for DevOps teams