Get Started with KubeOpt

The npm CLI wraps Docker and provides a convenient command-line interface. It automatically pulls the image, starts the container, and opens your browser. Requires Docker + Node.js 18+.

Enter your email to get the npm install commands.

Get Install Commands

Helm Chart (In-Cluster)

Deploy KubeOpt as a sidecar inside your Kubernetes cluster. It runs with read-only RBAC permissions and direct kubectl access — no external API calls needed.

Enter your email to get the Helm install commands.

Get Install Commands

The Helm chart creates a ClusterRole with read-only permissions (get, list, watch) for pods, nodes, deployments, HPAs, PVs, and metrics. KubeOpt never modifies your cluster.

Docker Compose (Self-Hosted)

For persistent, self-hosted deployments with automatic restarts and data persistence.

Enter your email to get the Docker Compose configuration.

Get Install Commands

Desktop App

Native desktop application for macOS, Windows, and Linux. No Docker or Node.js required — everything is bundled.

macOS

.dmg installer

Coming Soon

Windows

.exe / .msi installer

Coming Soon

Linux

.AppImage / .deb

Coming Soon

Desktop builds are in progress. In the meantime, use the Docker or npm CLI method.

SaaS (Hosted)

Use the hosted version — no installation, no infrastructure to manage. Sign up and connect your cluster.

                # No installation needed — just visit:
https://demo.kubeopt.com
            

Free

1 cluster, 5 analyses/day

Pro

10 clusters, AI plans

Enterprise

Unlimited, 365-day retention

Configuration

All deployment methods use the same environment variables for Azure credentials and application settings.

Variable	Required	Description
`AZURE_SUBSCRIPTION_ID`	Yes	Your Azure subscription ID
`AZURE_CLIENT_ID`	Yes	Service principal application (client) ID
`AZURE_CLIENT_SECRET`	Yes	Service principal secret
`AZURE_TENANT_ID`	Yes	Azure AD tenant ID
`KUBEOPT_LICENSE_KEY`	For Pro/Ent	License key for premium features
`FLASK_SECRET_KEY`	Production	Random secret for session encryption
`LOG_LEVEL`	No	Logging level (default: INFO)

Azure Service Principal Setup

# Create a read-only service principal for KubeOpt
az ad sp create-for-rbac \
  --name "kubeopt-reader" \
  --role "Reader" \
  --scopes /subscriptions/<subscription-id>

# Also grant Cost Management Reader for cost analysis
az role assignment create \
  --assignee <client-id> \
  --role "Cost Management Reader" \
  --scope /subscriptions/<subscription-id>

Need Help Getting Started?

Our team can help you deploy KubeOpt for your specific infrastructure