Skip to content
Runtimez Docs

Runtimez Docs

read-only by construction

Everything it reads.
Nothing it can change.

Runtimez connects to a live cluster with one Helm command, then scores upgrade risk and security risk on the same workload so you fix the thing that blocks both. It asks for three verbs. It never reads a Secret value.

Connect a cluster →Read the RBAC scope
the agent's entire ClusterRole
rules:
  - apiGroups: ["*"]
    resources: ["*"]
    verbs: ["get", "list", "watch"]
  • never requested
  • create
  • update
  • patch
  • delete
start

What Runtimez is

The two-axis risk model in one page, then one Helm command to connect a cluster.

security

Before you install

The exact verbs, what the agent never reads, and how to verify both against your own API server.

product

The cluster view

Twelve tabs, twelve questions — risk, upgrade readiness, security, right-sizing and the rest.

debug

When something is wrong

Dependency graph, slowest operations, slowest traces, and root-cause analysis on any of them.

cli

From your terminal

rtz reads what the agent last synced. No kubeconfig, no cluster network access.

cost

Control the bill

Sampling and cardinality rules decide what you keep, and what it costs to keep it.