Environment Variables
Kite supports several environment variables by default to change the default values of some configuration items.
PLUGIN_DIR: Directory for installed plugin files. Defaults to
data/plugins, relative to Kite's working directory (/app/data/pluginsin the official container image). The Helm Chart sets it to/data/pluginsto share SQLite's volume. See Plugin Storage for directory and persistence configuration.KITE_CONFIG_FILE: Path to the configuration file. Available in Kite
v0.10.0and later. When set, Kite loads cluster, OAuth, LDAP, RBAC, and super user settings from this file. See Configuration File for details.PLUGIN_DEV_URL: Development plugin manifest URL, for example
http://localhost:5174/plugin.json. The browser loads it directly; it overrides an installed plugin with the same ID without changing installation records. Leave unset to use installed plugins only. Helm deployments can set it throughextraEnvs. See Plugin Debugging for details.KITE_USERNAME: Legacy environment variable for the initial administrator username. It is only used for env-to-DB migration when
KITE_CONFIG_FILEis not set.KITE_PASSWORD: Legacy environment variable for the initial administrator password. It is only used for env-to-DB migration when
KITE_CONFIG_FILEis not set.KUBECONFIG: Legacy kubeconfig environment variable used to import clusters when
KITE_CONFIG_FILEis not set.ANONYMOUS_USER_ENABLED: Enable anonymous user access, default value is
false. When enabled, all access will no longer require authentication and will have the highest permissions by default.JWT_SECRET: Secret key used for signing and verifying JWT
KITE_ENCRYPT_KEY: Secret key used for encrypting sensitive data, such as user passwords, OAuth clientSecret, kubeconfig, etc.
HOST: Used for generating OAuth 2.0 authorization callback addresses, default will be obtained from request headers. If you find the result not as expected, you can manually configure this environment variable.
TRUSTED_PROXIES: Comma-separated list of reverse proxy, ingress, or load balancer IPs/CIDRs that Kite should trust when reading
X-Forwarded-For/X-Real-IPto determine the client IP. By default, Kite trusts local/private network ranges (127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,::1,fc00::/7) so common ingress deployments can report real client IPs. Set a narrower value such asTRUSTED_PROXIES=10.42.0.0/16,192.168.1.10for production, orTRUSTED_PROXIES=noneto ignore all client-supplied forwarding headers.KUBECTL_TERMINAL_IMAGE: Docker image used for the kubectl terminal.
NODE_TERMINAL_IMAGE: Docker image used for generating Node Terminal Agent.
CLUSTER_AGENT_IMAGE: Docker image used when generating the Cluster Agent manifest for Cluster Agent clusters.
ENABLE_ANALYTICS: Enable data analytics functionality, default value is
false. When enabled, Kite will collect limited data to help improve the product.PORT: Port on which Kite runs, default value is
8080.