dzero
Media Meter DevOps team only

Know which cluster everything is deployed in.

dzero is a DevOps team's registry and audit view of every project, workload, ConfigMap and Secret across different clusters. It records names and locations only, never the values.

dzero
DevOps
admin
Dashboard
Which cluster everything is deployed in, at a glance.
Clusters
3
Projects
64
Components
212
app × environment
Workloads
341
deployments, scaledjobs, …
Config location
38 / 174
Infisical / in-cluster
Projects
ProjectClusterAppsEnvWorkloadsConfigOwner
computer-vision
net4/computer-vision
net420
article-llm-microservice, cv-post-process, cv-pub, …
productionstaging
34Infisical 2in-cluster 18cv
facebook-consumer
net4/facebook-consumer
net42
facebook-consumer
productionstaging
6in-cluster 2ingest
twitter-consumer
net3/twitter-consumer
net32
twitter-x-consumer
productionstaging
4in-cluster 2ingest
news-crawler
kl-1/news-crawler
kl-14
crawler-api, crawler-worker
productionstaging
9Infisical 4crawl
argocd
net4/argocd
net41
argocd
other
7in-cluster 1devops
The dashboard, shown with sample data.
What it does

The answer to “where does this run?”

Most namespaces run more than one app. dzero breaks each one down to app × environment and keeps everything about it on one page.

Project registry

A project is one namespace in one cluster. Each app inside it gets a component per environment, with its ArgoCD application, Bitbucket repo, ConfigMap, Secret and workloads.

Cluster map

Different clusters, each keep their ArgoCD base URL. If ArgoCD moves, you change one field and every project link in that cluster follows.

Config audit

Shows which components keep config in Infisical and which keep it in the cluster, read from the kustomization itself. Projects that have no Secret of their own are flagged.

One search box

Press ⌘K from anywhere to search project, namespace, cluster, owner, team, tag, ArgoCD app, workload, ConfigMap and Secret names.

DevOps tools

ENV splitter, deduper and diff, a manifest reader and a secret codec. Each one only transforms what you paste. Nothing is saved.

Roles & accounts

There are three roles: superadmin, admin and viewer. Only the superadmin can create accounts, and each password is shown once, when it's issued.

How it works

A registry, not a live dashboard.

  1. 01

    Import from kubeconfig

    Run it on your own machine, where your kube-contexts already are. It groups namespaces into apps and environments by object name.

    pnpm import-cluster --all --dry-run
  2. 02

    Recorded in the registry

    Everything is stored in MongoDB. d0 never connects to a cluster at runtime, so a deployed instance shows exactly what a local one does.

    pnpm import-cluster net4
  3. 03

    Find, audit, hand off

    Look up where something runs, check where its config lives, then open its ArgoCD app or Bitbucket repo with one click.

    ⌘K cv-post-process

Built for Media Meter's DevOps team.

dzero is an internal tool. Accounts are issued by the superadmin. If you need access, ask the DevOps.