# CivoCloudManager

> Native macOS app that runs **Civo Cloud** and **Civo Kubernetes** from your Mac menu bar. Live Kubernetes dashboard with pod logs, S3-compatible Object Storage browser, Civo-charges-API cost dashboard, Touch-ID-protected credentials. Distributed via the Mac App Store, free download with a 7-day full-access trial and a one-time Full Access purchase. The price is set per App Store storefront and is shown only in the Mac App Store.

## About
- Product: CivoCloudManager, independent third-party native macOS client for the Civo Cloud platform (https://www.civo.com)
- App Store ID: 6760776010, bundle id `de.berger-rosenstock.CivoCloudManager`
- Author: Marcel R. G. Berger, https://marcelrgberger.com
- Operator brand: DigitalFreedom (DigitalFreedom Global LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, United States)
- App Store: https://apps.apple.com/us/app/civocloudmanager/id6760776010?mt=12
- App source: https://github.com/marcelrgberger/civo-cloud-manager
- Website: https://civo-cloud-manager.app

## What it does, by Civo product
- **Civo Kubernetes (managed K3s):** create, scale, delete clusters; auto-connect to the cluster's Kubernetes API over client-certificate mTLS, the kubeconfig is parsed in Swift and the PEM certificate and key are imported through Apple's Security framework (SecItemImport, SecIdentityCreate), no kubectl and no openssl; live CPU/memory gauges with sparkline history; real-time pod logs with auto-scroll; one-off commands run as a short-lived Job; deployment scaling and restart; namespace filter; ConfigMap/Secret viewer with base64 decoding; Helm release detection; editable node-pool labels; kubeconfig export.
- **Civo Firewalls:** one-click open/close per firewall scoped to the user's current public IPv4; bulk Open All / Close All; IP presets (Home, Office); auto-close timers (15 minutes to 2 hours); Touch-ID-gated destructive actions; activity log; menu-bar status indicator.
- **Civo Object Storage (S3-compatible):** native ListObjects v2 and Get via AWS Signature V4 (CryptoKit HMAC-SHA256); breadcrumb folder browser; single/multi/recursive download; Touch-ID-protected access keys; Object-Store-Pause/Resume, archive to a central vault and restore on demand.
- **Civo Databases:** create MySQL / PostgreSQL with size-picker grid; Touch-ID-gated credential reveal.
- **Civo Networks, Load Balancers, DNS:** create networks/firewalls/domains; inline DNS-record editing (A, AAAA, CNAME, MX, TXT, SRV, NS); load-balancer detail view.
- **Civo Compute (Instances):** create with visual size-picker grid (CPU, RAM, NVMe, hourly price); Stop / Start / Reboot / Resize; Ed25519 SSH key generation in-process with CryptoKit, written in OpenSSH format to a location you choose, chmod 0600, with an AES-GCM-encrypted backup in Application Support; reverse DNS; activity log.
- **Civo charges API:** real cost dashboard with periodic picker (This Month + projected, Last Month, Last Quarter, This Year); breakdown by resource type; Rate Editor for custom hourly rates; past months cached locally.
- **Civo Quota:** visual gauges for instances, CPU, RAM, SSD, database RAM, database count; warnings at 70 % and 90 % utilisation; in-app quota change request via PUT /quota.
- **Civo API Health:** tests all 16 Civo REST endpoints with response time; green < 200 ms, orange < 500 ms, red beyond.

## Differentiation vs Civo CLI / Civo dashboard
- Native macOS app built with SwiftUI on Apple frameworks. Not a browser wrapper, not an Electron shell.
- Kubernetes API over client-certificate mTLS, established entirely through Apple's Security framework. No kubectl, no openssl, no shell-out.
- Touch-ID-gated credential reveal, API key in the macOS Keychain (hardware-backed encryption).
- Zero third-party SDKs, Apple frameworks only (SwiftUI, CryptoKit, Security, LocalAuthentication, Foundation, os).
- No telemetry, no analytics SDK, no crash reporter, no advertising identifier.
- App Sandbox with four entitlements and no more: app-sandbox, network-client, user-selected read-write files, app-scoped bookmarks. No location, camera, microphone, contacts, photos or tracking identifier.

## Stack
Swift 6 (strict concurrency), SwiftUI, macOS 15+ (Sequoia / Tahoe ready), native Civo REST API v2, direct Kubernetes API over client-certificate mTLS via SecItemImport, SecIdentityCreate and URLSession, S3-compatible client with AWS Signature V4 (CryptoKit), StoreKit 2 for the lifetime full-access purchase.

## Pricing
7 days of full access, free from first launch, no card and no subscription. After that menu-bar firewall management stays free forever, and Full Access is a one-time in-app purchase with lifetime updates, Family Sharing enabled and Apple offer codes supported. The download itself is free.

## Deep dive pages (EN + DE)
- Civo CLI alternative for Mac: https://civo-cloud-manager.app/civo-cli-alternative/
- Civo Kubernetes GUI for Mac: https://civo-cloud-manager.app/civo-kubernetes-gui/
- Civo Object Storage browser for Mac: https://civo-cloud-manager.app/civo-object-storage-browser/
- Civo firewall from the Mac menu bar: https://civo-cloud-manager.app/civo-firewall-mac/
- Civo cost dashboard for Mac: https://civo-cloud-manager.app/civo-cost-dashboard/

## Guides (all 16 locales)
- Connect your Civo API key on a Mac: https://civo-cloud-manager.app/connect-civo-api-key-mac/
- Open a Civo firewall for your current IP: https://civo-cloud-manager.app/open-civo-firewall-for-your-ip/
- Compared with Lens, OpenLens and k9s: https://civo-cloud-manager.app/civo-kubernetes-gui-vs-lens-k9s/
- Civo Object Storage over S3 on macOS (s3cmd, rclone, AWS CLI): https://civo-cloud-manager.app/civo-object-storage-s3-macos/
- Civo DNS records and domains from a Mac: https://civo-cloud-manager.app/civo-dns-manager-mac/
- Changelog: https://civo-cloud-manager.app/changelog/

## Languages
The app interface is localized in 8 languages: English, German, Spanish, French, Italian, Dutch, Polish, Portuguese. The Mac App Store listing is localized in 16 locales, which adds regional variants such as en-GB, en-AU, en-CA, es-MX, fr-CA, pt-BR plus ja and ko. The website ships 16 locales: EN (default), DE, ES, FR, IT, NL, PL, PT, ZH-Hans, JA, KO, AR, HI, ID, TR, RU. The homepage and all five deep-dive pages exist in every one of them. The legal pages (privacy, imprint, terms) are EN and DE only, because the binding templates are maintained in English and German and are never machine-translated.

## Frequently asked questions
- **Is there a free trial?** Yes, 7 days of full access from first launch, no card and no subscription. After that the menu-bar firewall stays free forever.
- **What does it cost?** The download is free. Full Access is a one-time, non-consumable in-app purchase with Family Sharing and Apple offer codes, and there is no subscription. The amount depends on the App Store storefront, so the Mac App Store listing is the only place it is stated.
- **Do I need kubectl?** No. The app opens its own client-certificate mTLS connection to the Kubernetes API through Apple's Security framework.
- **Do I need the Civo CLI?** Only for automation. The CLI stays the right tool for CI/CD and scripted changes, the app is the right tool for interactive work. Both use the same Civo API key.
- **Is it made by Civo?** No. CivoCloudManager is an independent third-party client built by Marcel R. G. Berger and published by DigitalFreedom Global LLC. "Civo" is a trademark of Civo Ltd.
- **Where does my API key go?** Into the macOS Keychain on your Mac. It is sent only to api.civo.com over HTTPS. There is no publisher server in the loop and no telemetry in the app.
- **Is there a Linux or Windows build?** No, and none is planned. The app is built on CryptoKit, Security and LocalAuthentication.
- **Can I read the source?** Yes, at https://github.com/marcelrgberger/civo-cloud-manager. Source-available, not an open-source licence, distribution stays exclusive to the Mac App Store.

## Contact
hello@digitalfreedom.co.za · https://civo-cloud-manager.app