Each tool gets one job, matched to who uses it and what they are allowed to change:
kubectl 5,150 , Helm 29,435 and Git 1,932 stay the only path that changes BookNest: Jenkins 8,793 deploys with its least-privilege Role (Jenkins Deploy Access), and Argo CD 126 syncs from Git (GitOps with Argo CD). A change made by hand in a UI drifts from Git, and Argo CD's self-heal undoes it.
k9s 592,566 is the developer's triage tool in WSL 6 : one screen for Pods, logs, events and port-forwards, launched with --readonly against anything shared.
Headlamp, installed in the cluster, serves teammates who never open a terminal: view-only tokens or OIDC logins, published through the Gateway with TLS; its Map view draws BookNest's Deployments and StatefulSet with their related objects.
Freelens 5,623 is optional, for anyone who prefers a desktop app on Windows. Lens 32,572 earns its fee only where a company wants its support or does not qualify for the free plan.
The Kubernetes Dashboard 15,415 earns no place: remove it wherever an older guide installed it.