Expose Kubernetes ServicesThrough Any Tunnel
Unified interface for Cloudflare Tunnel, ngrok, and Microsoft Dev Tunnels. One operator, multiple providers, zero configuration headaches.
$curl -sSL https://ktube.dev/install.sh | bashEverything you need to expose services
KTube simplifies tunnel management with a Kubernetes-native approach
Unified Interface
One CRD to rule them all. Switch between Cloudflare, ngrok, or Dev Tunnels without changing your deployment.
Secure by Default
Outbound-only connections. No inbound firewall rules needed. Your cluster stays protected.
Instant Setup
Deploy KTube with Helm or CLI, configure a provider, and expose services in under 5 minutes.
Auto-Reconnect
Built-in health checks and automatic tunnel reconnection. Your services stay online 24/7.
Beautiful Dashboard
Modern web UI to visualize tunnels, manage providers, and monitor connections in real-time.
GitOps Ready
Declarative CRDs that work with ArgoCD, Flux, and any GitOps workflow out of the box.
Enable/Disable Bindings
Pause and resume service exposure with a single toggle. No need to delete and recreate resources.
CLI Tool Included
Single binary CLI with embedded Kind support. Create clusters and install KTube with one command.
Three steps to expose your service
From zero to publicly accessible in minutes
Configure Provider
Connect your tunnel provider credentials (Cloudflare, ngrok, or Dev Tunnels)
+ Extend with custom provider plugins
Create Tunnel
Define a tunnel resource that references your provider
my-app-tunnel
Provider: Cloudflare • Namespace: default
Bind to K8s Service
Connect your tunnel to any Kubernetes service
my-app-svc
namespace: default • port: 8080
https://my-app.example.comChoose your tunnel provider
All major tunnel providers supported out of the box. Switch providers without changing your configuration.
Cloudflare Tunnel
Secure, outbound-only connections through Cloudflare's global network with built-in DDoS protection.
ngrok
Instant secure tunnels with free tier for development and paid plans for production.
Microsoft Dev Tunnels
Developer-focused tunnels with Azure AD integration and VS Code support.
Need a different provider? KTube supports custom provider plugins.
Learn about custom providersBeautiful dashboard included
Monitor and manage all your tunnels from a modern web interface
Overview
Kubernetes-native configuration
Define your tunnels as native Kubernetes resources. Works seamlessly with kubectl, Helm, ArgoCD, Flux, and any GitOps workflow.
- Declarative YAML configuration
- Full CRD support with validation
- Helm chart included
- GitOps friendly with ArgoCD/Flux
- Enable/disable bindings without deletion
apiVersion: ktube.dev/v1alpha1kind: TunnelProvidermetadata: name: my-cloudflarespec: type: cloudflare cloudflare: accountId: "your-account-id" apiTokenSecretRef: name: cloudflare-token key: token---apiVersion: ktube.dev/v1alpha1kind: Tunnelmetadata: name: my-tunnel namespace: defaultspec: providerRef: name: my-cloudflare---apiVersion: ktube.dev/v1alpha1kind: TunnelBindingmetadata: name: my-app-binding namespace: defaultspec: tunnelRef: name: my-tunnel hostname: my-app.example.com protocol: https enabled: true service: name: my-app-svc port: 8080Ready to simplify your tunnel management?
Get started with KTube in minutes. Free, open source, and production-ready.
$helm install ktube ktube/ktube -n ktube-systemTrusted by teams using