ControlPlane Enterprise
Flux Addons
Extend Flux with a full-featured Web UI, AI-assisted troubleshooting, and single sign-on, all hardened and covered by the same SLAs.
addon: web-ui
Flux Web UI
Watch your clusters converge in real time, with sources, releases, and workloads on one screen, from any device. The UI ships inside the Flux Operator, so there is nothing extra to install or operate.
- Live status for everything Flux manages, from Git and OCI sources to running pods
- Follow a release through each stage of delivery and jump straight into events and logs
- Sign in with your corporate IdP over OIDC, with every action guarded by Kubernetes RBAC

inside the flux web ui
Every stage of delivery, one dashboard

GitOps Graph
Your delivery pipeline drawn as a live graph. Follow a change from its upstream repository down to the pods it created, and watch failures light up where they start.

Log Viewer
A viewer that understands your logs: severity levels are picked out, stack traces grouped, and noise filtered away. It parses structured and plain-text formats from any language runtime.

Favorites
Build your own watchlist. Star the releases that matter, from production apps to critical infrastructure, and check their health from a single screen.

Powerful Search
Type a few characters and jump to any Kustomization, HelmRelease or source repository across every namespace, narrowing by kind, status or name as you go.
addon: mcp-server
Flux MCP Server
A hardened, exclusively read-only MCP server that connects AI assistants to Flux-managed clusters for incident response and pipeline troubleshooting.
- Read-only by design: no operation can alter cluster state, regardless of kubeconfig permissions
- Runs locally on dev laptops and workstations over stdio
- Works with Claude, Copilot, Cursor, and any MCP-compatible assistant

addon: dex-idp
Dex IdP
A hardened Dex distribution providing OIDC-based single sign-on for the Flux Web UI and the Flux MCP Server.
- Connects to your existing identity provider: LDAP, SAML, GitHub, Google, Microsoft Entra ID, and more
- Hardened, FIPS-compliant container images and Helm charts
- Enforce identity policies across your GitOps tooling

Covered by your subscription
All addons are included in the subscription plans and covered by ControlPlane's SLA for CVE remediation, with hardened images published to private registries available to customers.