Security

Learn about how Grogg works.

1. App & Extension Distribution

  • Grogg is available as a native app or as a vscode extension, both of which run on your computer. Both are available for MacOS, Windows and Linux.
  • Grogg does not require installing anything on your clusters and works similar to kubectl.
  • Grogg's native app is currently not digitally signed on Windows not by Apple, this is why on Apple you need to change app attributed in order to run it.
  • Native app updates are managed by Grogg itself and will be available for download from Github, and the extension updates are available through VSCode Marketplace or the OpenVSX Marketplace.

2. User Data

  • The application only makes HTTP requests for authentication, logout, and offline license downloads. No information about you or your clusters is transmitted outside your machine.
  • Grogg can not modify you kube configs in any way, only read them. You still can you them while using Grogg, for example with kubectl.
  • Any data you see in the app/extension lives in-memory, and is discarded when the app is closed.
  • Shell connections to containers in your cluster are offloaded to kubectl session a dedicated terminal window

3. Kubernetes API

  • Grogg operate like kubectl in terms of connections to the Kubernetes API, using the kubeconfig. You can select what kubeconfig files are available to Grogg, by defult it will use the default .kube/config file.
  • Grogg can operate in sealed off environment, no further setup is required.
  • Your cluters RBAC permissions will be the same if you would've used kubectl.

3. Paid License

  • Grogg is a paid product, and requires a license to use. The license is tied to your email address and can be used on up to 2 machines.
  • In order to work in a sealed off environment with a remote cluster, you need to add the license key.
  • The license key is not tied to your machine, and can be used on any machine.
  • If you reach maximum number of machines, you can remove the license from one of the machines and add it to another.
  • Working with local clusters does not require a license key.

Need something more?

If you have any questions about this, please contact us at hello@grogg.com.