[opensourcedex]

kubewall is a free, open source cloud infrastructure management project written in TypeScript and released under Apache-2.0. It has 1,938 GitHub stars, 102 forks and 26 open issues, and was last pushed 5 days ago. On this registry it ranks #39 of 43 tracked projects in Cloud Infrastructure Management, with 5 head-to-head comparisons available.

What is kubewall?

What it is

kubewall is an open-source Kubernetes dashboard for managing, monitoring, and debugging Kubernetes clusters from a browser. It lives in the cloud-native and DevOps ecosystem, where operators need one interface for cluster state, workloads, logs, metrics, and configuration. It is licensed under Apache-2.0 and written in TypeScript, with topics associating it with Go, kubectl, and Kubernetes debugging.

The problem it solves is the friction of switching between command-line tools, separate cluster UIs, and manual queries when several Kubernetes clusters are in use. kubewall targets that workflow with multi-cluster management, real-time resource views, and browser-based access without a cloud service or cluster agents. It suits users who want to inspect and operate clusters locally or over a private network while keeping cluster data local.

Key capabilities

  • It provides multi-cluster management from one interface, so operators can connect and control multiple Kubernetes clusters without switching tools.
  • It offers real-time monitoring for clusters, pods, services, and metrics, so users can observe live state without repeated queries.
  • It includes in-depth views of manifests, logs, and configurations, and supports search and filtering across namespaces, labels, images, nodes, and workloads.
  • It provides port forwarding and aggregated pod logs, letting users reach in-cluster services locally and stream logs across pods and containers with search and tail options.
  • It supports scaling deployments, restarting pods, performing rollout restarts, and applying manifests, and it can integrate AI providers such as OpenAI, Claude 4, Gemini, DeepSeek, OpenRouter, Ollama, Qwen, and LMStudio.

Who uses it and how

  • DevOps teams that manage several Kubernetes clusters can use kubewall as a browser dashboard for routine inspection and operations.
  • Local developers can install the single binary on macOS, Windows, or Linux and access clusters through their existing kubeconfig setup.
  • Platform teams can deploy kubewall with Docker or Helm, using host networking and mounted kubeconfig files, or run it on port 8443.

Getting started

The README lists Docker, Helm, Homebrew, Snap, Arch Linux, Winget, Scoop, and binaries, with the Docker image available as ghcr.io/kubewall/kubewall:latest and the Helm chart as oci://ghcr.io/kubewall/charts/kubewall. Typical use starts by running the binary or container with access to a kubeconfig file and opening the dashboard in a browser.

When to use it — and when not to

kubewall fits teams that want a self-hosted, agentless Kubernetes dashboard deployable as a binary, container, or Helm release. Self-hosters must manage browser access, kubeconfig permissions, optional HTTPS, and certificate handling, especially with Helm on port 8443 using self-signed certificates. Because AI features depend on configured model providers, users who must keep all cluster context local should avoid external AI integrations, and the two-year project history means teams needing longer operational maturity should evaluate it carefully.

project readme (upstream, from github) — read inline

kubewall

Install | Guide | Releases | Source Code

kubewall is a Open-Source, Single-Binary Kubernetes Dashboard with Multi-Cluster Management & AI Integration.

It provides a simple and rich realtime interface to manage and investigate your clusters.

Feature                    Benefit
🔗 Multi-Cluster Management Control unlimited Kubernetes clusters from one intuitive interface, saving time on tool-switching and boosting productivity for DevOps teams.
🤖 AI-Powered Leverage AI (OpenAI / Claude 4 / Gemini / DeepSeek / OpenRouter / Ollama / Qwen / LMStudio) for automated troubleshooting, config optimization, and smart recommendations - a game-changer for complex environments.
📊 Real-Time Monitoring Get live views of cluster, pods, services, and metrics, enabling quick issue detection without manual queries.
🚀 Single-Binary Deployment Install effortlessly as a lightweight binary on Mac, Windows, or Linux - no dependencies, zero config.
🔍 In-Depth Resource Views Dive into detailed manifests, logs, and configurations through an intuitive dashboard, making debugging a breeze for novices and pros alike.
🌐 Browser-Based Access Access securely via any browser with optional HTTPS setup, perfect for remote teams managing on-premises or cloud clusters.
🧭 Search & Filter Instantly locate namespaces, labels, images, nodes, and workloads with powerful search and filtering—streamlining navigation across large clusters.
🛡 Privacy by Default Maintain full control with zero cloud dependency, ensuring your cluster data stays local and secure by design.
🔌 Port Forwarding Instantly access in-cluster services on your local machine with secure, one-click port forwarding. No complex CLI commands or YAML edits required, enabling faster debugging and testing.
🔄 Live Refresh Experience seamless auto-updates for resources, eliminating manual refresh cycles and keeping your dashboard perpetually current.
📜 Aggregated Pod Logs Stream logs across pods and containers with advanced search and tail options—perfect for monitoring multi-replica applications with ease.
🖥️ Clean Resource Management Enjoy streamlined views for Deployments, Pods, Services, ConfigMaps, and more scale deployments, restart pods, perform rollout restarts, and apply manifests with a single click for unmatched efficiency.

:battery: Install

🐳 Docker
docker run --network host -v kubewall:/.kubewall -v ~/.kube:/.kube ghcr.io/kubewall/kubewall:latest
⛵ Helm
helm install kubewall oci://ghcr.io/kubewall/charts/kubewall -n kubewall-system --create-namespace

🛡️ With helm kubewall runs on port 8443 with self-signed certificates. View chart →

🍺 Homebrew
brew install --cask kubewall/tap/kubewall
🧃 Snap
sudo snap install kubewall
🐧 Arch Linux
yay -S kubewall-bin
🪟 Winget
winget install --id=kubewall.kubewall -e
📦 Scoop
scoop bucket add kubewall https://github.com/kubewall/scoop-bucket.git
scoop install kubewall
📁 Binary

MacOS Binary ( Multi-Architecture )

Linux (Binaries) amd64 | arm64 | i386

Windows (exe) amd64 | arm64 | i386

Manually 📂 Download the pre-compiled binaries from the Release! page and copy them to the desired location or system path.

[!TIP] After installation, you can access kubewall at http://localhost:7080

If you're running it in a Kubernetes cluster or on an on-premises server, we recommend using HTTPS. When not used over HTTP/2 SSE suffers from a limitation to the maximum number of open connections. Mozilla⤴

You can start kubewall with HTTPS using the following command:

$ kubewall --certFile=/path/to/cert.pem --keyFile=/path/to/key.pem

:movie_camera: Intro

kubewall

:books: Guide

Flags

Since kubewall runs as binary there are few of flag you can use.

> kubewall --help

Usage:
  kubewall [flags]
  kubewall [command]

Available Commands:
  completion  Generate the autocompletion script for the specified shell
  help        Help about any command
  version     Print the version of kubewall

Flags:
      --certFile string        absolute path to certificate file
  -h, --help                   help for kubewall
      --k8s-client-burst int   Maximum burst for throttle (default 200)
      --k8s-client-qps int     maximum QPS to the master from client (default 100)
      --keyFile string         absolute path to key file
  -l, --listen string          IP and port to listen on (e.g., 127.0.0.1:7080 or :7080) (default "127.0.0.1:7080")
      --no-open-browser        Do not open the default browser

🔐 Setting up HTTPS locally

You can use your own certificates or create new local trusted certificates using mkcert⤴.

[!Important] You'll need to install mkcert⤴ separately.

  1. Install mkcert on your computer.
  2. Run the following command in your terminal or command prompt:

mkcert kubewall.test localhost 127.0.0.1 ::1

  1. This command will generate two files: a certificate file and a key file (the key file will have -key.pem at the end of its name).
  2. To use these files with kubewall, use --certFile= and --keyFile= flags.
kubewall --certFile=kubewall.test+3.pem --keyFile=kubewall.test+3-key.pem

When using Docker

When using Docker, you can attach volumes and provide certificates by using specific flags.

In the following example, we mount the current directory from your host to the /.certs directory inside the Docker container:

docker run -p 7080:7080 \
    -v kubewall:/.kubewall \
    -v $(pwd):/.certs \
    ghcr.io/kubewall/kubewall:latest \
    --certFile=/.certs/kubewall.test+3.pem \
    --keyFile=/.certs/kubewall.test+3-key.pem

🛰️ Custom Address/Port Configuration

You can run kubewall on any IP and port combination using the --listen flag. This flag controls which interface and port the application binds to.

🔓 Bind to all interfaces

kubewall --listen :7080

🌐 Bind to a specific network interface

kubewall --listen 192.168.1.10:8080

Useful when exposing kubewall to a known private subnet or container network.

:man_technologist: Developers

<img src="./media/Github-Lig

readme truncated — read the full docs on github

Frequently asked questions

Is kubewall free to use?

kubewall is open source under the Apache-2.0 licence. There is no licence fee and no seat count — you can self-host it or, where the project offers one, pay a vendor for a managed version instead.

What does kubewall do?

kubewall - Kubernetes Dashboard for Multi-Cluster Management Real-Time, Self-Hosted, Single Binary, AI-powered. Manage, monitor & debug K8s clusters in your bro

What is kubewall written in?

kubewall is primarily written in TypeScript. Its source is publicly available at https://github.com/kubewall/kubewall, and it has 1,938 GitHub stars.