07.12.2025

Headlamp for Kubernetes: installation, configuration, and use of the web UI

Headlamp is a simple and extensible web interface (UI) for Kubernetes designed for viewing, analyzing, and managing cluster resources. The project is developed within Kubernetes SIG UI and is fully compatible with any Kubernetes distribution.

The tool is suitable for DevOps engineers, cluster administrators, and developers who need a convenient visual interface for infrastructure management, access to logs, resources, events, and debugging tools.

What is Headlamp

Headlamp is a UI layer over the Kubernetes API that allows you to:

The interface is built with React and Material-UI, connects directly to the Kubernetes API, supports RBAC, and displays only actions available to the user.

How Headlamp is used in practice

Headlamp covers several common DevOps tasks:

  1. Visual cluster debugging. Convenient viewing of pod states, events, logs, and containers.
  2. Managing multiple clusters. Switching kubeconfig contexts directly through the interface.
  3. Working with CRDs. Support for custom resources and the ability to extend the UI for them.
  4. Audit and monitoring. Observing resource changes in real time.
  5. Simplifying work for beginner DevOps engineers and developers. The UI reduces the entry barrier and enables safe work within RBAC constraints.

How to get started with Headlamp

Headlamp can be launched in two ways:

  1. As a local desktop application
  2. As a web panel inside a Kubernetes cluster

Both options use kubeconfig.

Method 1: Installing Headlamp locally

Suitable for working with both remote and local clusters.

First, download Headlamp.
Current builds for Linux, Windows, and macOS:

https://headlamp.dev/download

Now launch it.
The application will automatically suggest choosing a kubeconfig or will load it from ~/.kube/config.
After selecting a context, the main UI window will appear.

Method 2: Installing Headlamp in Kubernetes (in-cluster)

Suitable for permanent team access via a web browser.

Option A: installation via Helm

helm repo add headlamp https://headlamp-k8s.github.io/headlamp-chart
helm repo update
helm install headlamp headlamp/headlamp
--namespace headlamp
--create-namespace

Now you need to forward the port:

kubectl port-forward svc/headlamp 4466:80 -n headlamp

Open in a browser:

http://localhost:4466

Option B: installation from YAML

kubectl apply -f https://raw.githubusercontent.com/kubernetes-sigs/headlamp/main/deployment/headlamp.yaml

After installation, run the same port-forward:

kubectl port-forward svc/headlamp 4466:80 -n headlamp

Why Headlamp is useful

Benefits for DevOps engineers:

Fast issue diagnostics
Logs, events, and resource states — all in one place.

RBAC compatibility
The user sees only the actions they are allowed to perform, reducing the risk of errors.

Multi-cluster support
Convenient for organizations with multiple environments: dev/stage/prod.

CRD support
Useful for operators and custom Kubernetes solutions.

Extensibility via plugins
You can add custom dashboards, metrics, integrations (for example, with Karpenter or monitoring systems).

Clean and fast interface
A lightweight alternative to heavier dashboards.

Limitations of Headlamp

Despite its convenience, the tool has some limitations:

Does not fully replace kubectl.
Bulk operations, automation, and CI/CD still belong to the CLI.

Plugins require development.
Specialized CRDs may require custom plugin support.

No built-in Prometheus/Grafana-level monitoring.
Only visualization of current Kubernetes resources.

RBAC may require fine-tuning.
A user without sufficient permissions will see an incomplete interface.

No native audit log for UI actions.
All actions pass through the Kubernetes API, but the UI itself does not log them.

Conclusion

Headlamp is a convenient, modern, and extensible interface for managing Kubernetes clusters. It simplifies infrastructure debugging, helps analyze resource states, and is suitable for both beginner and experienced DevOps specialists.

The tool is especially useful when working with multiple clusters, custom resources, or teams that need a secure UI with RBAC considerations.

FAQ