Dashboard & account

The kubehz dashboard (app.kubehz.cloud) is where you see your clusters, prove ownership, and manage your team. Your login and personal security settings live in your kubehz account at auth.kubehz.cloud/account.

Signing in

Open app.kubehz.cloud and sign in with your kubehz account. Authentication runs through kubehz's own identity service at auth.kubehz.cloud.

Clusters

List

After you sign in, your clusters are listed on the main page — each showing its name, status, and last heartbeat so you can tell at a glance what is connected.

Detail

Open a cluster to see the health reported by the in-cluster heartbeat agent for a registered cluster:

• Kubernetes version — the version the cluster is running
• Nodes & status — each node's name, role, and readiness
• Control-plane component health — apiserver, etcd, scheduler, controller-manager
• Certificate expiry — when cluster certificates are due to renew

This is exactly the data the agent sends — nothing more. See How it works — your data.

The managed tier adds more

Management features — healing policies, capacity watches, and desired-state management (upgrade/scaling flows) — belong to the managed tier (access: managed), which is live and requires a Supporter subscription or higher. Individual acting features roll out deliberately behind per-feature switches. For a registered cluster the dashboard shows the read-only health above.

Claiming a cluster

A newly registered cluster appears as pending. The Claim page links it to your account and proves ownership; once claimed, the cluster is owned by you. The flow is conceptually register → claim → owned — see Registration.

Team

From Team you invite members, give each an access tier, define custom roles (a permissions matrix, optionally scoped to namespaces), choose which hosted clusters each member's access applies to, and optionally federate your own SSO. On a hosted cluster, all of this maps straight to Kubernetes access.

See Team & roles for the full model.

Settings

Per-cluster and organization settings let you rename a cluster's display name, review its connection status, and deregister it from the dashboard when you no longer want visibility.

Your account (security)

Manage your personal login at auth.kubehz.cloud/account — kubehz's own branded account UI:

• Change your password
• Two-factor authentication — enroll or remove a TOTP authenticator
• Sessions — view active sessions and revoke any you do not recognize

Troubleshooting

If a cluster does not appear, check the heartbeat agent is present and firing:

# Is the CronJob there and not suspended?
kubectl -n kubehz-system get cronjob kubehz-heartbeat

# Read the last run's logs
kubectl -n kubehz-system logs -l app=kubehz-heartbeat

A 4xx in those logs usually means the cluster is not registered (or was deregistered) — re-run lo kubehz register.

Next steps

• Registration — connect a self-hosted cluster
• How it works — the model and your data
• Hosted control plane — the delegated path (early access)

---

Doc status

Aspect	Detail
State	active
Last reviewed	2026-07-16