Skip to content
KubeGlass

Installation

KubeGlass is a single binary with zero external dependencies. Pick the method that fits your workflow.

Package managers

Section titled “Package managers”
Terminal window
brew install kubeglass/tap/kubeglass
kubeglass
# Open http://localhost:8090

Containers

Section titled “Containers”
Terminal window
docker run --rm -p 8090:8090 \
  -v ~/.kube/config:/home/nonroot/.kube/config:ro \
  -v kubeglass-data:/home/nonroot/.kubeglass/data \
  ghcr.io/kubeglass/kubeglass:latest

Build from source

Section titled “Build from source”
Terminal window
git clone https://github.com/kubeglass/kubeglass.git
cd kubeglass
make all          # Builds frontend + backend
./bin/kubeglass

Requires Go 1.25+ and Node.js 22+. The frontend is embedded at build time - the resulting binary is fully self-contained.

Production deployment

Section titled “Production deployment”

The Helm chart includes everything for production: HPA, PDB, NetworkPolicy, health probes, and RBAC.

Terminal window
helm install kubeglass deploy/helm/kubeglass \
  --namespace kubeglass \
  --create-namespace \
  --set replicaCount=2 \
  --set ingress.enabled=true \
  --set ingress.hosts[0].host=kubeglass.example.com \
  --set ingress.tls[0].secretName=kubeglass-tls \
  --set ingress.tls[0].hosts[0]=kubeglass.example.com

Production checklist

Section titled “Production checklist”
ItemSetting
AuthSet KUBEGLASS_AUTH_MODE=oidc or impersonation. Enable RBAC enforcement via impersonation
TLSSet KUBEGLASS_TLS_ENABLED=true or terminate TLS at an ingress controller
Session secretSet KUBEGLASS_SESSION_SECRET to ≥ 64 random bytes
Rate limitingDefaults to 100 req/s per IP. Tune via KUBEGLASS_RATE_LIMIT
Data directorySet KUBEGLASS_DATA_DIR to a persistent volume for BoltDB

Verify installation

Section titled “Verify installation”
Terminal window
curl -s http://localhost:8090/healthz
# {"status":"ok"}

Next steps

Section titled “Next steps”