Services (Catalog Apps & Plugins)
The Services tab on the cluster details page lets you deploy apps from a curated catalog with one click, and manage the apps and plugins already deployed.
To deploy code from your own repository, use Deploy Applications (AI Agents → Deploy) instead. This page covers catalog-based apps.
Deploying an app
- Cluster details → Services tab → open Explore Services
- Pick an app from the catalog (filter with the category chips)
- Some apps ask for extra options (GPU selection, Ollama URL, app name, …)
- Hit Deploy. When it finishes, a card appears in the services list and a
public domain of the form
xxxx.apps.…is assigned automatically
When a card says "May not fit free resources"
The cluster's free CPU / memory currently doesn't cover the app's minimum requirements. You can still deploy, but the app may stay pending. Free up capacity by deleting unused apps, or add worker nodes.
Managing deployed apps
Click a card to open the app details panel.
- Basic info: status, image, public domain. The edit button next to the domain configures a custom domain
- Deployment info: target namespace (each app gets its own dedicated namespace), replica readiness, component list
- Pending diagnosis: when replicas aren't starting, the panel explains why and what to do (for resource shortages: delete unused apps / add nodes)
- Delete: "Delete application" removes the app, its public routing, and its dedicated namespace in one go
Apps that create their account on first access: some apps such as n8n ship without an initial account — the first person to open the app becomes its owner (admin). When the app details panel shows this notice, open the app right after deploying.
Apps vs. plugins
| Kind | Badge | Description |
|---|---|---|
| App | App | An application deployed from the catalog. Runs in its own namespace and gets a public domain |
| Plugin | Plugin | A cluster extension installed via Helm chart (storage, monitoring stack, …). Ones discovered by cluster sync show "Auto-detected (cluster sync)" as their registration source |
IP access restriction
You can restrict access to public domains to specific source IPs. Configure the target ingress and allowed IPs from IP Whitelist in the catalog.
Troubleshooting
- Deployed but never starts: see the FAQ "What if a deployed app never starts?"
- Public domain not reachable: right after deploying, image pulls can take a few minutes. Wait until the replicas in app details show ready, then retry