Architecture at a glance

kubegrade includes the following components kubegrade control plane the central service/ui where users view cluster posture run investigations review plans and recommendations approve remediations manage policies, roles, and workflows in cluster agent(s) lightweight agents/controllers deployed in target clusters that collect telemetry/metadata execute approved workflows respect cluster rbac and network boundaries support upgrade planning and operational actions iac / git / gitops integrations kubegrade connects to iac/config sources (terraform, helm, kustomize) git repositories gitops systems (argo cd / flux) to generate auditable prs and align runtime state with declared state observability / notification integrations kubegrade can connect to monitoring, alerting, and collaboration systems to enrich context and route actions