Skip to content

User Guide

How SkyPortal works once your hosts and clusters are connected: what SARA may run, how you stay in control, and what you can see and export.

  • Approvals and policies

    How SkyPortal decides whether a command runs, waits for you or is blocked: approval cards, permit lists, environment policies, Read-Only Mode, Auto-approve and team roles.

  • One command across many hosts

    Run the same command on several SSH hosts with a single approval, and read the results per host.

  • Kubernetes

    Connect a cluster with a kubeconfig, see which kubeconfigs are refused, and choose the namespaces SARA may use.

  • In-cluster agent

    Connect a private cluster without sharing a kubeconfig. The agent only makes outbound calls and only runs read-only kubectl.

  • Monitoring

    Host, GPU and cluster metrics in the Monitor Dashboard, and pod right-sizing through SARA.

  • Security

    Secret redaction, reply screening, sensitive commands, API credentials and two-factor authentication.

  • Audit and events

    Export each chat's event log and the audit trail of approvals and tool calls.