Introduction
Kubeapps is a web-based dashboard that lets teams browse, deploy, and manage applications packaged as Helm charts or Carvel packages on Kubernetes clusters. It provides a self-service catalog experience where developers can find and install applications without deep Kubernetes knowledge, while operators maintain control through RBAC integration.
What Kubeapps Does
- Provides a searchable catalog of Helm charts from multiple repositories
- Deploys, upgrades, and deletes Helm releases through a visual interface
- Supports Carvel packages and Flux Helm releases as alternative packaging formats
- Manages multi-cluster deployments from a single dashboard
- Respects Kubernetes RBAC so users only see and manage resources they have access to
Architecture Overview
Kubeapps runs as a set of microservices on Kubernetes. The frontend is a React SPA that communicates with backend APIs. The kubeapps-apis service handles interactions with Helm, Carvel, and Flux through pluggable packaging backends. An internal PostgreSQL or Redis instance caches chart metadata for fast catalog browsing. Authentication is delegated to the cluster OIDC provider or service account tokens.
Self-Hosting & Configuration
- Install via Helm chart from the Bitnami repository into any Kubernetes cluster
- Configure chart repositories through the UI or values.yaml
- Set up OIDC authentication for single sign-on with your identity provider
- Enable multi-cluster support by adding kubeconfig entries for remote clusters
- Customize the catalog with private Helm chart repositories and Carvel package repositories
Key Features
- Self-service application catalog with search, filtering, and version selection
- One-click deploy, upgrade, and rollback for Helm releases
- Multi-cluster management from a single Kubeapps instance
- RBAC-aware UI that enforces Kubernetes permissions at every level
- Plugin architecture supporting Helm, Carvel, and Flux packaging backends
Comparison with Similar Tools
- Helm CLI — command-line only; Kubeapps adds a visual catalog and self-service UI on top of Helm
- Rancher — full cluster management platform; Kubeapps focuses specifically on application deployment
- Lens — desktop Kubernetes IDE for operators; Kubeapps is a web-based catalog for end users
- Argo CD — GitOps continuous delivery; Kubeapps is an interactive deploy-on-demand catalog
FAQ
Q: Does it replace Helm? A: No. Kubeapps uses Helm under the hood. It provides a web UI on top of Helm for users who prefer a visual interface.
Q: Can I use it with private chart repositories? A: Yes. Add any OCI or HTTP Helm repository, including private ones with authentication credentials.
Q: How does authentication work? A: Kubeapps supports Kubernetes service account tokens and OIDC-based single sign-on with providers like Keycloak or Dex.
Q: Is it production-ready? A: Yes. Kubeapps is maintained by VMware (now Broadcom) and is used in production by organizations running multi-tenant Kubernetes environments.