Skip to content
Helmsman
Menu

Feature

Application lifecycle

Create, configure and delete Applications with Quotas per Cluster, Namespaces, Ownership links and Extended resources.

An Application is one deployable service, matching a single pipeline and image. It is the primary resource of the delivery side, and like every governed resource it has an Owner user, an Owner group and a Mode.

Each Application carries a Quota per Cluster (CPU, memory and jobs), the Kubernetes Namespaces it owns, parent and subsidiary Ownership links to other Applications, Extended resources identified by group, kind and name, and a Permission list that maps LDAP groups to cluster_admin, platform, elevated or standard access. The Permission list is always replaced whole.

Compliance controls sit on the record: any writer may Jail an Application, only an org admin may release it, Delete protection refuses deletion until an admin clears it, and deletion is a soft Deleting state that records when it began.