Skip to main content

KIOPS User Guide

Welcome to the KIOPS Guide. It walks operators and administrators through what they need — setting up infrastructure, building and operating services, and governing security, backups, and teams — in the order you actually do the work.

What is KIOPS?​

KIOPS (K8s Integrated Operations Platform Security) is an integrated DevSecOps platform that handles everything from server management to container build/deploy and security analysis in one place.

Who it's for

  • Operations teams that want to manage many servers and Kubernetes clusters in one place
  • Development teams that want CI/CD pipelines and security scans without separate tools
  • DevOps engineers who want build, deploy, and vulnerabilities at a glance
  • Anyone who wants to run servers intuitively without deep infrastructure experience

Quick Start​

If this is your first time with KIOPS, follow the Quick Start — it walks the full flow from login to your first service deployment: register a device → connect a runtime → register a service → build & deploy → check status.

Your Screen May Differ From This Guide​

KIOPS provides different feature sets depending on the deployment form (SaaS or on-premises) and the license plan. On-premises Basic in particular excludes a good deal, and excluded features do not appear locked — they look as though they were never there (gone from the menu, and a 404 if you type the address).

This guide describes the full feature set, but any page whose content varies by plan carries a notice at the top and is marked in the left sidebar. Pick your environment in the My environment selector inside that notice to read it on those terms. The full list is in Plans and Feature Scope.

Guide Structure​

This guide is organized in the order an operator/admin works. Open each section from the left sidebar.

Core Features​

  • Service build/deploy: build images from a GitLab repository with BuildKit and deploy to K8s/Docker, with per-branch/tag builds and rollback.
  • Security analysis (DevSecOps): Six kinds of scan plus a security gate catch vulnerabilities early. They are SAST (Semgrep/OpenGrep), SCA (Trivy/Dependency-Check), DAST (ZAP/Nuclei), SBOM (CycloneDX), IaC (Checkov), and Secrets (Gitleaks), together with the security gate (OPA).
  • Infrastructure management: unified management of Kubernetes·Docker·Podman with node/resource monitoring, metrics server, and placement control.
  • Backup/recovery: back up etcd/Docker data and store it in object storage (SeaweedFS, etc.).

Permission Model​

KIOPS manages access with role-based access control (RBAC). Each user holds both an organization role and a team role.

Organization roles:

  • PlatformAdmin: platform administrator — access to all organizations and system settings. On-premises, this is the support account of the vendor that performed the installation.
  • Manager: organization administrator — signup approval, team composition, permission management, and organization-wide features.
  • Member: regular user — only within the page access permissions granted to them.

Team roles:

  • TeamManager: has access to all eight pages within their own team, while the data they see stays limited to that team.
  • Member: page access follows the permissions they were granted.

For details, see User & Permission Management and Team Management. Features that your license plan does not provide at all are covered in Plans and Feature Scope.

Need Help?​

  • FAQ — frequently asked questions
  • Reference — per-screen summaries in the left sidebar and the Status Reference
  • Contact — reach out to your organization admin