Overview of the namespace list and dashboard

Namespace list, resource monitoring, pods, events, and alerts.

To open the namespace dashboard:

1. Select a cluster in the left menu.
2. Open the Namespaces section.
3. Select the namespace you need from the list.
4. The namespace dashboard opens with summary information.

The Namespaces section lists all namespaces in the selected cluster. You can show user and system namespaces in one list or on separate tabs (use the switch above the list). System namespaces contain Shturval platform components. Use filters to find a namespace quickly.

You can delete one namespace or several at once from the list. How to select objects and confirm deletion: Bulk deletion.

Dashboard structure #

The namespace dashboard consists of tabs (the availability of tabs and blocks depends on the user’s access rights):

• Namespace — workloads, metrics, quotas;
• Network Policies — configured network policies (CiliumNetworkPolicies);
• Labels and annotations — namespace metadata;
• Events — events for all namespace objects;
• Security — image scan results and security policy analysis.

At the top of the page, a header with the name of the namespace, the date and time of creation, and the status of the namespace are displayed.

Screenshot: namespace dashboard header, see the illustration below.

“Namespace” tab #

Loads #

The central element of the Namespace tab displays information about applications (available only if you have rights to view workloads in the namespace):

• Which workloads are deployed — ratio of healthy pods to the requested count;
• Vulnerabilities — if image scanning (shturval-scanner) is running in the cluster, the workload block shows a lightning icon. Hover over it: the tooltip starts with “Vulnerabilities detected:” and shows how many findings there are at each level — Critical, High, Medium, and Low. The icon itself opens the Security tab of that workload, where the scan results are;
• Workload-to-service connections — connection diagram;
• Route, service, and workload connections — columns Routes → Services → Workloads.

The Routes column lists incoming routes in the namespace: Ingress, HTTPRoute, and GRPCRoute. Each card shows the route type.

An Ingress card still shows the name and host names. The name opens the Ingress page.

An HTTPRoute or GRPCRoute card shows:

• hostnames, each on its own line, when they are set;
• if there are no hostnames, one line per Gateway binding: Gateway: namespace/name/listener.

If an HTTPRoute or GRPCRoute is not accepted by a Gateway, or its backend is not resolved, the type label and the card border use the error color. The HTTPRoute name opens the HTTPRoute page. The GRPCRoute name opens the GRPCRoute page.

Next to Routes, Create opens a list. The list contains only the objects you are allowed to create: Ingress, HTTPRoute, GRPCRoute. If you have no such permission, the button is hidden.

Next to Services, Create creates a Service. Next to Workloads, Create opens a workload list:

• Deployment;
• StatefulSet;
• DaemonSet;
• Pod.

If there are no routes but there are services, the diagram starts at Services. If a route has no services, its card stays in Routes with no arrow onward. If there are no routes, services, or workloads, the diagram is replaced by the text “There don’t seem to be any workloads in this namespace yet.”

Screenshot: Loads block on the namespace dashboard, see the illustration below.

Screenshot: object creation buttons, see the illustration below.

Creating workloads is also available from the Loads section in the left menu.

Metrics #

The Metrics block with built-in resource utilization graphs is displayed on the right side of the screen (available only if you have rights to view metrics and if monitoring is enabled in the cluster):

• CPU Usage — graph of CPU usage of the entire namespace and individual workloads over the past hour;
• Memory Usage — graph of memory usage of the entire namespace and individual workloads over the past hour.

The graphs are built directly into the namespace dashboard and are updated automatically. To select a workload, use the drop-down lists (workload type and name).

Screenshot: metrics block (general view), see the illustration below.

Screenshot: metrics block (workload selection), see the illustration below.

Quotas #

In the lower right part of the screen there is a Quotas block containing aggregated information about the utilization of resource quotas set in the namespace (displayed only if quotas are configured in the namespace and the user has rights to view them). To configure quotas, contact the cluster administrator or go to the Quotas section (if you have the appropriate rights).

“Network Policies” tab #

The tab contains information about the network policies configured for the namespace (CiliumNetworkPolicies). Available only if you have rights to view network policies. Created policies in this interface are viewable only. Policies are created by the cluster administrator from the Network Policies interface of the cluster.

Screenshot: “Network Policies” tab (without policies), see the illustration below.

Screenshot: “Network Policies” tab (with policies), see the illustration below.

Labels and Annotations Tab #

The tab contains namespace labels and annotations. Available only if you have rights to view and edit namespace metadata. How to add and change them: Labels and annotations.

Events tab #

The tab lists Events for all namespace objects. Available only if you have rights to view events in the namespace. The tab title shows how many events are available.

Events include:

• creation/deletion of resources;
• pod scheduling errors;
• warnings about resources;
• changes in object statuses.

Security tab #

The tab contains (only available if you have rights to view security information):

• Image vulnerability scan results — for objects in this namespace (shown only if the shturval-scanner module is installed and you have rights to view scan results);
• Security policy compliance analysis results — for objects in this namespace (shown only if the shturval-policy-manager module is installed and you have rights to view analysis results).

Open Argo CD project #

If the continuous application delivery module (shturval-cd) is installed and running in the cluster, the platform or cluster administrator can create an Argo CD project for this namespace. After the project is created, the Go to Argo CD button appears on the namespace page. Click it to open the Argo CD interface with SSO. For details, see How Shturval and Argo CD are connected.

Transition to Kubeflow #

If a namespace is created to work with ML workloads, the Kubeflow button is displayed on the namespace page. When clicked, the Kubeflow interface for the selected namespace opens.

Screenshot: transition to Kubeflow, see the illustration below.

For more details, see the section How Shturval and Kubeflow are related.