Skip to main content
Version: (1.0)

Deploy your Okteto instance

Create the Okteto Namespace

Run the command below to create a namespace for okteto:

$ kubectl create namespace okteto

Configuration file

Before running helm install, we recommend that you create a yaml configuration file with your choices about how to install Okteto. This guide will walk you through the most common options. A complete list of configuration options is available here.

You can use this sample configuration file as a starting point. The different configuration settings are explained below.


You'll need to provide the email of the application owner.

email: ""

Cluster Endpoint

This is the public endpoint of your Kubernetes cluster. It will be used by Okteto when generating Kubeconfig credentials for your users.

endpoint: ""


The domain (or subdomain) managed by your Okteto installation.

Your users will be able to access your Okteto instance at okteto.$SUBDOMAIN. All ingresses created by okteto will be use it as well (e.g. https://app-$NAMESPACE.$SUBDOMAIN)

subdomain: ""


Okteto is free for small teams. You get all the features of Okteto for up to 3 users with 3 namespaces each.```

license: XXXXX

Want to use Okteto with a bigger team? Let's talk

You can also use a secret to store the license.


Okteto supports using Bitbucket, GitHub, Google, or OpenID Connect as authentication providers.

Use the clientId and clientSecret that you created in the previous step.

enabled: true
clientId: clientID
clientSecret: clientSecret
organization: my-org

An empty organization field allows any GitHub user to authenticate.

You can also use a secret to store the sensitive part of these credentials.

Cloud Provider

Specify the cloud provider you'll use, as well as identity details.

enabled: true
bucket: "Bucket Name"
region: "AWS region"
accessKeyID: "IAM Access Key"

Cloud Provider Secret

Create a secret named okteto-cloud-secret to store the Cloud Provider credentials created in the preparation step.

$ kubectl create secret generic okteto-cloud-secret --namespace=okteto --from-literal=key=IAM_ACCESS_SECRET
  • IAM_ACCESS_SECRET: The access secret of an IAM with read/write permissions to the bucket and Route53 zone specified in the configuration.

Store Additional Values

You can also use the okteto-cloud-secret secret to store the following values instead of setting them in your helm configuration file:

  • OKTETO_LICENSE: use this instead of .Values.license in your helm configuration file.
  • GOOGLE_CLIENTSECRET: use this instead of in your helm configuration file.
  • GITHUB_CLIENTSECRET: use this instead of .Values.auth.github.clientSecret in your helm configuration file.
  • BITBUCKET_CLIENTSECRET: use this instead of .Values.auth.bitbucket.clientSecret in your helm configuration file.
  • OPENID_CLIENTSECRET: use this instead of .Values.auth.openid.clientSecret in your helm configuration file.

Deploy the Okteto Chart

Run helm install to deploy your Okteto instance. In this example, we have named our Helm release okteto.

$ helm repo add okteto
$ helm repo update
$ helm install okteto okteto/okteto -f config.yaml --namespace=okteto

You can also use --version version if you would like to install a specific version of Okteto.

Check the status of the deployment by running helm status okteto.

Post Install Configuration

Once the chart is installed, follow the onscreen instructions to finalize the configuration.

Initial login

You can access your Okteto instance by going to https://okteto.$SUBDOMAIN. An account will be automatically created for you as part of the login process.