A digital twin, not another list.
Navigate ownership, networking, storage, and runtime dependencies as one explorable 3D topology.
Open source · Apache 2.0
See your cluster as a living system.
Constack turns Kubernetes resources into a live 3D digital twin—so you can trace relationships, investigate incidents, and operate with full context.
Self-hosted in your cluster. No account required.
Live topology
Read-only
Apache 2.0
Self-hosted
Read-only by default
Kubernetes-native
One connected view
Your infrastructure already has a shape. Now you can see it.
Stop reconstructing incidents across tabs and dashboards. Constack brings live resource state, relationships, telemetry, events, and diagnostics into the same spatial model.
State that moves when your cluster does.
Kubernetes watches and incremental WebSocket patches keep the scene current without repeatedly loading the entire graph.
event stream live
12:04:31deploymentcheckout-apimodified
12:04:32podworker-7b9fadded
12:04:34servicepaymentshealthy
Investigate in context
Everything you need to follow the signal.
Select any resource and move naturally from its place in the topology to the evidence behind its current state.
One investigation surface
Move between resource details, metrics, logs, events, relationships, and history without losing what you selected.
OverviewMetricsEventsLogs
HEALTHHealthy
CPU318m
MEMORY624 MiB
RESTARTS0
Relationships with meaning
Configured routes and observed traffic remain visually distinct, so the map never invents certainty.
Configured route Observed traffic
Deterministic diagnostics
Surface local findings from resource status and events before sending any context to an external system.
Readiness probe failing
Views that match the question
Filter by namespace, kind, health, or search, then switch between cluster and resource-focused layers.
ClusterNamespaceApplicationServiceIncident
Provider-neutral by design
A normalized observability adapter supports capability discovery across metrics, logs, traces, health, and traffic.
KubernetesAdapterConstack
Safety by architecture
Powerful where it should be. Powerless where it must be.
Constack separates observation, analysis, and action into explicit boundaries. Safety is not a setting layered on later—it is part of how the system is assembled.
Architecture tests enforce the boundary
Read-only first
Discovery runs with read-only Kubernetes access. Write permissions live in a separate, optional worker.
Sensitive data stays out
Secrets, ConfigMap contents, service-account tokens, raw manifests, and literal environment values are removed at the boundary.
Humans confirm actions
Every optional mutation requires a short-lived preview, explicit confirmation, fresh resource checks, and an audit trail.
Analysis cannot act
External analysis is recommendation-only, tokenless, and structurally isolated from Kubernetes actions.
Under the hood
From cluster event to spatial context.
A simple data path keeps Kubernetes authoritative while the interface stays fast, current, and understandable.
01
Watch
A read-only discovery worker follows Kubernetes API changes as they happen.
02
Connect
The topology engine resolves ownership, routing, storage, and runtime relationships.
03
Stream
Sequence-checked patches move through Redis and WebSockets instead of full reloads.
04
Explore
The web console renders the cluster as a responsive, deterministic 3D scene.
Kubernetes APIDiscovery workerRedis graphAPI + WebSocket3D scene
Run it yourself
Your cluster. Your data. Your control.
Install the evaluation stack with Helm, forward the service, and open the console. Production deployments can use external MySQL and Redis services.
$
helm upgrade --install constack oci://ghcr.io/constack-co/charts/constack --version 0.1.0 --namespace constack --create-namespace --waitchart installed
workloads ready
read-only discovery connected
kubectl port-forward service/constack 3000:80 -n constackUnderstand the whole stack. At a glance.
Explore the source, inspect the architecture, and bring your Kubernetes cluster into view.
Explore Constack on GitHub