KubeHero
Open-source Kubernetes observability and FinOps in one install — cost allocation, logs, continuous profiling, eBPF network cost, alerting, guarded rightsizing and read-only AI agents for AKS, GKE and EKS. Self-hosted; nothing leaves your cluster.
helm install kubehero oci://ghcr.io/kubehero-io/charts/kubehero \
-n kubehero-system --create-namespace
One DaemonSet and one control plane replace the stack most teams stitch together:
It keeps what you already run: Prometheus scrapes it, Grafana reads its logs as a Loki datasource, OpenCost consumers read its allocation API.
Quickstart
# 1. install (embedded Postgres + ClickHouse, auth on)
helm install kubehero oci://ghcr.io/kubehero-io/charts/kubehero -n kubehero-system --create-namespace
# 2. your admin token
kubectl -n kubehero-system get secret kubehero-control-plane \
-o jsonpath='{.data.admin-token}' | base64 -d; echo
# 3. the dashboard (sign in with the token)
kubectl -n kubehero-system port-forward svc/kubehero-dashboard 3001:3001
No cluster handy? docker compose up --build -d runs the whole stack locally with a synthetic three-cluster fleet streamed through the real ingest APIs, then open http://localhost:3001.
Layout
apps/ dashboard · docs
services/ control-plane · collector · operator · advisor · pricing-engine
cli/ kubehero (CLI + MCP server)
packages/ proto · cost-model · tsconfig
deploy/ helm · terraform
infra/ demo (compose, kind e2e, telemetry generator) · dagger
Architecture, guardrails and honest limits: ARCHITECTURE.md. Docs: https://kubehero.io/docs.
Development
task build # every Go module + TS workspace
task test # go test ./... everywhere
task proto # buf lint + generate (plugins pinned)
task helm:lint
docker compose up --build -d # full stack + demo fleet
./infra/demo/e2e-kind.sh # real chart on kind, every signal asserted
See LOCAL_DEV.md and CONTRIBUTING.md.
Licensing
Open source and free to self-host.
- Apache 2.0 — CLI, collector, cost-model, proto
- BSL 1.1 — control plane, operator, advisor, pricing engine, dashboard (source-available, free to run yourself)
- GPL-2.0-only OR Apache-2.0 — the eBPF programs in
services/collector/internal/ebpf/bpf/(the kernel only lets GPL-compatible programs call the helpers they use); the Go loader and the rest of the collector are Apache 2.0. Texts:LICENSE-APACHE-2.0,LICENSE-BSL-1.1,LICENSE-GPL-2.0.