kubewall

Install | Guide | Releases | Source Code

kubewall is a Open-Source, Single-Binary Kubernetes Dashboard with Multi-Cluster Management & AI Integration.

It provides a simple and rich realtime interface to manage and investigate your clusters.

| Feature                    | Benefit | |---|---| | 🔗 Multi-Cluster Management | Control unlimited Kubernetes clusters from one intuitive interface, saving time on tool-switching and boosting productivity for DevOps teams. | | 🤖 AI-Powered | Leverage AI (OpenAI / Claude 4 / Gemini / DeepSeek / OpenRouter / Ollama / Qwen / LMStudio) for automated troubleshooting, config optimization, and smart recommendations - a game-changer for complex environments. | | 📊 Real-Time Monitoring | Get live views of cluster, pods, services, and metrics, enabling quick issue detection without manual queries. | | 🚀 Single-Binary Deployment | Install effortlessly as a lightweight binary on Mac, Windows, or Linux - no dependencies, zero config. | | 🔍 In-Depth Resource Views | Dive into detailed manifests, logs, and configurations through an intuitive dashboard, making debugging a breeze for novices and pros alike. | | 🌐 Browser-Based Access | Access securely via any browser with optional HTTPS setup, perfect for remote teams managing on-premises or cloud clusters. | | 🧭 Search & Filter | Instantly locate namespaces, labels, images, nodes, and workloads with powerful search and filtering—streamlining navigation across large clusters. | | 🛡 Privacy by Default | Maintain full control with zero cloud dependency, ensuring your cluster data stays local and secure by design. | | 🔌 Port Forwarding | Instantly access in-cluster services on your local machine with secure, one-click port forwarding. No complex CLI commands or YAML edits required, enabling faster debugging and testing. | | 🔄 Live Refresh | Experience seamless auto-updates for resources, eliminating manual refresh cycles and keeping your dashboard perpetually current. | | 📜 Aggregated Pod Logs | Stream logs across pods and containers with advanced search and tail options—perfect for monitoring multi-replica applications with ease. | | 🖥️ Clean Resource Management | Enjoy streamlined views for Deployments, Pods, Services, ConfigMaps, and more scale deployments, restart pods, perform rollout restarts, and apply manifests with a single click for unmatched efficiency. |

:movie_camera: Intro

[!Important] Please keep in mind that kubewall is still under active development.

:battery: Install

🐳 Docker

docker run -p 7080:7080 -v kubewall:/.kubewall ghcr.io/kubewall/kubewall:latest

💡 To access local kind cluster you can use "--network host" docker flag.

⛵ Helm

helm install kubewall oci://ghcr.io/kubewall/charts/kubewall -n kubewall-system --create-namespace

🛡️ With helm kubewall runs on port 8443 with self-signed certificates. View chart →

🍺 Homebrew

brew install --cask kubewall/tap/kubewall

🧃 Snap

sudo snap install kubewall

🐧 Arch Linux

yay -S kubewall-bin

🪟 Winget

winget install --id=kubewall.kubewall -e

📦 Scoop

scoop bucket add kubewall https://github.com/kubewall/scoop-bucket.git
scoop install kubewall

📁 Binary

MacOS Binary ( Multi-Architecture )

Linux (Binaries) amd64 | arm64 | i386

Windows (exe) amd64 | arm64 | i386

Manually 📂 Download the pre-compiled binaries from the Release! page and copy them to the desired location or system path.

[!TIP] After installation, you can access kubewall at http://localhost:7080

If you're running it in a Kubernetes cluster or on an on-premises server, we recommend using HTTPS. When not used over HTTP/2 SSE suffers from a limitation to the maximum number of open connections. Mozilla⤴

You can start kubewall with HTTPS using the following command:

$ kubewall --certFile=/path/to/cert.pem --keyFile=/path/to/key.pem

:books: Guide

Flags

Since kubewall runs as binary there are few of flag you can use.

> kubewall --help

Usage:
  kubewall [flags]
  kubewall [command]

Available Commands:
  completion  Generate the autocompletion script for the specified shell
  help        Help about any command
  version     Print the version of kubewall

Flags:
      --certFile string        absolute path to certificate file
  -h, --help                   help for kubewall
      --k8s-client-burst int   Maximum burst for throttle (default 200)
      --k8s-client-qps int     maximum QPS to the master from client (default 100)
      --keyFile string         absolute path to key file
  -l, --listen string          IP and port to listen on (e.g., 127.0.0.1:7080 or :7080) (default "127.0.0.1:7080")
      --no-open-browser        Do not open the default browser

🔐 Setting up HTTPS locally

You can use your own certificates or create new local trusted certificates using mkcert⤴.

[!Important] You'll need to install mkcert⤴ separately.

1. Install mkcert on your computer.
2. Run the following command in your terminal or command prompt:

mkcert kubewall.test localhost 127.0.0.1 ::1

3. This command will generate two files: a certificate file and a key file (the key file will have -key.pem at the end of its name).
4. To use these files with kubewall, use --certFile= and --keyFile= flags.

kubewall --certFile=kubewall.test+3.pem --keyFile=kubewall.test+3-key.pem

When using Docker

When using Docker, you can attach volumes and provide certificates by using specific flags.

In the following example, we mount the current directory from your host to the /.certs directory inside the Docker container:

docker run -p 7080:7080 \
    -v kubewall:/.kubewall \
    -v $(pwd):/.certs \
    ghcr.io/kubewall/kubewall:latest \
    --certFile=/.certs/kubewall.test+3.pem \
    --keyFile=/.certs/kubewall.test+3-key.pem

🛰️ Custom Address/Port Configuration

You can run kubewall on any IP and port combination using the --listen flag. This flag controls which interface and port the application binds to.

🔓 Bind to all interfaces

kubewall --listen :7080

🌐 Bind to a specific network interface

kubewall --listen 192.168.1.10:8080

Useful when exposing kubewall to a known private subnet or container network.

:man_technologist: Developers

<p float="left"> <picture width="49%"> <source media="(prefers-color-scheme: dark)" srcset="./media/Abhimanyu-Dark.png" width="49%"> <source media="(prefers-color-scheme: light)" srcset="./media/Abhimanyu-Light.png" width="49%"> <img src="./media/Abhimanyu-Light.png" width="49%"> </picture> <picture width="49%"> <source media="(prefers-color-scheme: dark)" srcset="./media/Kshitij-Dark.png" width="49%"> <source media="(prefers-color-scheme: light)" srcset="./media/Kshitij-Light.png" width="49%"> <img src="./media/Kshitij-Light.png" width="49%"> </picture> <a target="_blank" href="https://github.com/abhimanyu003"> <picture width="49%"> <source media="(prefers-color-scheme: dark)" srcset="./media/Github-Dark.png" width="49%"> <source media="(prefers-color-scheme: light)" srcset="./media/Github-Light.png" width="49%"> <img src="./media/Github-Light.png" width="49%"> </picture> </a> <a target="_blank" href="https://github.com/kshitijmehta"> <picture width="49%"> <source media="(prefers-color-scheme: dark)" srcset="./media/Github-Dark.png" width="49%"> <source media="(prefers-color-scheme: light)" srcset="./media/Github-Light.png" width="49%"> <img src="./media/Github-Light.png" width="49%"> </picture> </a> <a target="_blank" href="https://x.com/abhimanyu003"> <picture width="49%"> <source media="(prefers-color-scheme: dark)" srcset="./media/Twitter-Dark.png" width="49%"> <source media="(prefers-color-scheme: light)" srcset="./media/Twitter-Light.png" width="49%"> <img src="./media/Twitter-Light.png" width="49%"> </picture> </a> <a target="_blank" href="https://x.com/kshitijjazz"> <picture width="49%"> <source media="(prefers-color-scheme: dark)" srcset="./media/Twitter-Dark.png" width="49%"> <source media="(prefers-color-scheme: light)" srcset="./media/Twitter-Light.png" width="49%"> <img src="./media/Twitter-Light.png" width="49%"> </picture> </a> <a target="_blank" href="https://www.linkedin.com/in/abhimanyu00