Welcome
A protection gate for your Kubernetes workloads. Discover your applications, then decide what can change them — and when.
Kubernetes gives everyone with cluster access the power to change anything, at any time. During a maintenance window, a risky deploy, or a test run, that is exactly what you do not want.
telark puts a time-scoped protection gate around the workloads that
matter. A stray kubectl delete, an accidental scale-down, or an
unreviewed image swap does not go through until you say so — decided
at admission, and verified against the live cluster rather than
assumed from "the write succeeded".
How it works
- Discover — workloads are grouped into applications in real time.
- Plan — bind policy templates to a scope and a window; run now or schedule.
- Enforce — while a plan is active, admission decisions protect its scope.
- Verify — health is computed from live cluster state, not from the API's word for it.
Snapshots, change classification, and rollback ride along underneath: every change telark sees is captured before it lands, so you have a way back when something does get through.
Where to start
- Getting started — install telark and open your first protection plan.
- Concepts — applications, protection plans, change classes, snapshots, RBAC.
- Features — every shipped capability in the Community Edition.
- Guides — task-shaped walkthroughs for the most common operations.
- Reference — Helm values, API surface, CRDs, environment variables.
- Operations — health checks, metrics, backups, upgrades, and troubleshooting.
License
telark is source-available under the Elastic License 2.0 — self-hosted, no hosting-as-a-service competition.