Turn on write access
Let KubeOn apply savings in a cluster, feature by feature, through a separate controller. Off by default, and the read-only agent is unchanged.
Optional
Without write access, every saving stays a proposal your pipeline ships. Pull requests need a connected repository, not write access.
What you can grant
| Feature | Key | In the cluster | In the cloud |
|---|---|---|---|
| Workload rightsizing | rightsizing | Patch Deployments, StatefulSets and DaemonSets | Nothing |
| Node pools and Spot fallback | node_pools | Patch Karpenter NodePools | Resize managed node pools |
| Node autoscaler | autoscaler | Read pods and nodes, cordon nodes, evict pods | Resize pools and remove instances |
| Container live migration | live_migration | Checkpoint containers, and create and remove pods in the namespaces you list | Nothing |
Requirements
The node autoscaler does not run alongside Karpenter or cluster-autoscaler. Live migration needs CRI-O or containerd 2, a registry for checkpoint images, and namespaces that allow it.
Turn it on
Create the cluster's controller token in Settings > Integrations > Kubernetes clusters. Then connect with the CLI, or set the chart values with Helm.
kubeon CLI
kubeon cluster connect --automation rightsizing,node_poolsFor managed node pools, kubeon cluster connect creates a separate cloud automation role. It is never the billing role.
Choose how changes run
In Automation settings, set each cluster to Team approval or Automatic. Every change passes the same safeguards as a pull request. Workloads deployed by Argo CD or Flux are changed through their repository, so connect it.
Stay in control
- The controller asks the API server what it may do on every poll, tells KubeOn, and refuses any change for a feature it does not hold.
- KubeOn cannot grant itself more. Features change only when the cluster's owner re-runs the CLI or Helm.
- Admins can pause a cluster's write access in KubeOn at any time, and nothing is applied while it is paused.
- To remove it, set
automation.enabled: falseand upgrade the release.
Need help with this guide?Contact support