querypie/novac repository overview

⁠QueryPie NOVAC

querypie/novac provides the Reverse Tunnel Agent runtime used by QueryPie ACP⁠.

When deployed in a protected network zone, it establishes an outbound connection to QueryPie so authorized users can reach tagged infrastructure resources without exposing a new inbound access path.

QueryPie ACP Community Edition provides the ACP platform's productivity and access control capabilities for up to 5 active users.

⁠Productivity tools

• Web SQL Editor — Execute queries, inspect database objects, and view data directly in the browser through authorized connections.
• Web Terminal — Connect to authorized servers, run commands, and work across multiple servers or sessions in the browser.
• KAC Web Client (Beta) — Access authorized Kubernetes clusters, browse and manage resources, inspect or edit YAML, review events and relationships, stream Pod logs, and open interactive Pod shells.

⁠Access control tools

• Database Access Control (DAC) — Govern database connections and SQL activity with role- and attribute-based policies.
• System Access Control (SAC) — Control server access with roles, direct permissions, time-based policies, and prohibited-command rules.
• Kubernetes Access Control (KAC) — Apply least-privilege access to Kubernetes clusters, APIs, and resources through roles and policies.
• MCP Access Control — Control which users and groups can access registered MCP Servers and Tools through roles, policies, and permission expiration.

NOVAC provides the secure connectivity layer that helps these productivity and access control capabilities reach resources in protected network zones.

⁠Documentation

• QueryPie ACP Community Edition⁠
• Using the Web SQL Editor⁠
• Using the Web Terminal⁠
• Using the KAC Web Client⁠
• Reverse Tunnels⁠
• QueryPie ACP documentation⁠