Supported
Your machine
Run one binary in a browser tab or desktop window. It reads your kubeconfigs in place and can keep several clusters open at once.
Run modes
Your machine, or one shared cluster.
Local mode is the supported product. Cluster mode uses the same binary to serve one cluster to a team and is in preview.
Preview
One shared cluster
Run the same binary from its OCI Helm chart. A team signs in through OIDC or an authenticated proxy and works against that cluster.
| Area | Your machine | One shared cluster |
|---|---|---|
| StartInstall | Shell or PowerShell installer, archive, deb or rpm | OCI image and Helm chart |
| StartAddress | Loopback only | The public URL and listener you configure |
| AccessSign-in | A token minted for that run | OIDC or an authenticated proxy; anonymous admin needs an unsafe opt-in |
| AccessKubernetes identity | The selected kubeconfig context | The signed-in account, through impersonation |
| AccessRead scope | Whatever the kubeconfig may read | Namespaces the account may list; whole-cluster views need whole-cluster read |
| WorkspaceClusters | Several at once, each in its own tab | The cluster running Spinoza |
| WorkspaceInterface | Browser and desktop; move between them mid-session | Browser |
| WorkspaceLifetime | Stops when the last view closes | Runs with the pod |
| OperationsWrite access | The kubeconfig's RBAC, with protected-cluster confirmation | Viewer, editor or admin role, then Kubernetes RBAC |
| OperationsPort-forwarding | Pods and services forwarded to your machine | Unavailable |
| OperationsUpdates | Optional update check; never installs by itself | No update check or self-install path |