day zero

New engineer at 9am. Shipping by 10.

Pick a template, get an owner-scoped dev workspace on your own cluster, and land in a browser IDE or an in-pod terminal — already wired to your remote execution, with the agent CLIs installed. No laptop setup, no per-repo devcontainer archaeology, and no cost while it sits idle.

Owner-scoped DevWorkspace CRs from reusable templatesBrowser IDE or in-pod terminal, one clickRBE-ready on boot — no manual toolchain setupOne wildcard absorbs the networking — no per-workspace IngressScale-to-zero after 30m idle; the volume is retained
the real cost

Onboarding time is a tax on every hire.

And it is paid again on every laptop refresh, every toolchain bump, and every engineer who switches teams.

The setup document is always out of date, because the only thing that keeps a setup document accurate is someone repeatedly suffering through it. Meanwhile the environment that matters — the one where the build actually reproduces — lives on a cluster, not a laptop.

Modelling a dev environment as a Kubernetes resource collapses the gap. A template is a WorkspaceConfig; an environment is an owner-scoped DevWorkspace reconciled into a StatefulSet with a persistent home. It's inspectable, forkable, and identical for the tenth hire and the first.

seconds
to a running workspace
pick a config → a DevWorkspace CR
RBE-ready
on first boot
config mounted read-only at /etc/fastverk/config
one wildcard
for the whole fleet
no per-workspace DNS, cert, or Ingress
scale-to-zero
after 30m idle
replicas to 0, the volume retained
the first hour

Pick → provision → route → land.

Nothing in this sequence requires a ticket, an admin, or a working laptop.

01

Pick

Choose a WorkspaceConfig in the console. The facade writes an owner-scoped DevWorkspace CR with a random adjective-animal name — spec.owner is your identity, and it's immutable.

02

Provision

The operator reconciles it into a StatefulSet, a persistent home volume, a headless Service, and a per-workspace Secret, mounting the template's rendered files read-only at /etc/fastverk/config.

03

Route

ws-proxy authenticates your session against spec.owner and routes the subdomain to the pod. Your credentials are stripped before they reach it.

04

Land

You're in a browser IDE or an in-pod terminal, already pointed at your remote execution, with the agent CLIs a click away.

the console

A card per workspace.

Its template, its phase, its URL — and a launch button per provisioned tool. Values illustrative.

Workspaces live
DevWorkspace CRs · fastverk.savvifi.com/v1
workspacetemplatephaseurl
spurious-racoon default Running spurious-racoon.ws.fastverk.com
brave-otter rust-bazel-rbe Provisioning
quiet-lynx default Suspended resumes on access
phases: Pending · Provisioning · Running · Suspended · Failedownership: spec.owner is immutable; ws-proxy enforces it per request
vs a laptop and a setup doc

The environment is the artifact.

Not a document describing how to recreate it.

fastverk
a laptop and a setup doc
Time to first build
Minutes, from a template
A day, if the doc is current
Consistency
Same CR, same layers, every hire
Drifts per machine
Toolchain bumps
Change the template once
Every engineer, individually
Build cache
Shared remote execution on boot
Cold, per laptop
Idle cost
Scale-to-zero, volume retained
Hardware you already bought
Offboarding
Delete a resource
Recover a machine

A dev environment is a Kubernetes resource — owner-scoped, template-driven, and scale-to-zero when idle.

plugin-workspaces · config-as-code
what this rests on

Backed by shipping plugins.

Each claim on this page is anchored to a plugin that provides it. The site build resolves these cross-references against the live feature catalog and fails if one of them doesn't exist — so this list can't quietly outlive what the platform ships.

related

Adjacent problems.

Prove it's safe to merge.

Hosted, or launched into your own AWS account. Start free — no card required.