Flatsonar

Freelens

by Freelens Authors

Free IDE for Kubernetes

Dangerous permissions Verified creator MIT v1.10.3
Install Source code
Screenshot 1 of Freelens Screenshot 2 of Freelens Screenshot 3 of Freelens

About

Freelens is a Kubernetes IDE that provides a graphical interface for managing and monitoring Kubernetes clusters.

It simplifies cluster operations by offering:

  • A dashboard with real-time cluster insights
  • Support for multiple clusters
  • Built-in terminal access to nodes and pods
  • Visualization of workloads, networking, storage, and configurations
  • Extension support to add custom functionality

Freelens is maintained by the community.

Note specific to Flatpak:

The application is sandboxed. It includes bundled kubectl and helm commands and uses ~/.kube/config file by default.

Flatpak adds wrapper for the aws, doctl, gke-gcloud-auth-plugin, glab and kubelogin tools and runs them as a commands from the host system.

The terminal uses /bin/sh by default, but it can be switched to, for example, /bin/bash for sandboxed environment or /app/bin/host-spawn for a host environment.

You can use flatpak-override to give access to the filesystem f.e. if you're missing .minikube certificates. flatpak override --user --filesystem=~/.minikube app.freelens.Freelens.

Permissions

3 permissions weaken the sandbox. Flatsonar asks before installing.

  • access to a sensitive location (~/.kube): credentials or autostart
    --filesystem=~/.kube
  • sandbox escape: can run commands on the host via flatpak-spawn
    --talk-name=org.freedesktop.Flatpak
  • your keyring / saved passwords
    --talk-name=org.freedesktop.secrets
  • inter-process communication (needed for X11)
    --share=ipc
  • network
    --share=network
  • X11 display, only when Wayland is unavailable
    --socket=fallback-x11
  • Wayland display
    --socket=wayland
  • GPU acceleration
    --device=dri
  • session inhibit
    --talk-name=org.gnome.SessionManager
  • system tray
    --talk-name=org.kde.StatusNotifierWatcher
  • screensaver inhibit
    --talk-name=org.freedesktop.ScreenSaver
  • talks to org.freedesktop.PowerManagement
    --talk-name=org.freedesktop.PowerManagement

Who publishes this

The creator demonstrably controls this app id: Flathub verification, the hosting account owns the namespace, or a well-known file on their domain.

  • installs a prebuilt binary instead of building from source (x2)
    source:prebuilt
  • verified on Flathub: the developer proved they control this app id
    publisher:flathub

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.