helm plugin install

install a Helm plugin

Synopsis

This command allows you to install a plugin from a url to a VCS repo or a local path.

By default, plugin signatures are verified before installation when installing from tarballs (.tgz or .tar.gz). A corresponding .prov file must be available alongside the tarball; installation will fail if it is missing or invalid. For local development, plugins installed from local directories are automatically treated as “local dev” and do not require signatures. Use —verify=false to explicitly skip signature verification (NOT recommended).

helm plugin install [options] <path|url> [flags]

Options

      --ca-file string             verify certificates of HTTPS-enabled servers using this CA bundle
      --cert-file string           identify registry client using this SSL certificate file
  -h, --help                       help for install
      --insecure-skip-tls-verify   skip tls certificate checks for the plugin download
      --key-file string            identify registry client using this SSL key file
      --keyring string             location of public keys used for verification (default "~/.gnupg/pubring.gpg")
      --password string            registry password
      --plain-http                 use insecure HTTP connections for the plugin download
      --username string            registry username
      --verify                     verify the plugin signature before installing (default true)
      --version string             specify a version constraint. If this is not specified, the latest version is installed

Options inherited from parent commands

      --burst-limit int                 client-side default throttling limit (default 100)
      --color string                    use colored output (never, auto, always) (default "auto")
      --colour string                   use colored output (never, auto, always) (default "auto")
      --content-cache string            path to the directory containing cached content (e.g. charts) (default "~/.cache/helm/content")
      --debug                           enable verbose output
      --kube-apiserver string           the address and the port for the Kubernetes API server
      --kube-as-group stringArray       group to impersonate for the operation, this flag can be repeated to specify multiple groups.
      --kube-as-user string             username to impersonate for the operation
      --kube-ca-file string             the certificate authority file for the Kubernetes API server connection
      --kube-context string             name of the kubeconfig context to use
      --kube-insecure-skip-tls-verify   if true, the Kubernetes API server's certificate will not be checked for validity. This will make your HTTPS connections insecure
      --kube-tls-server-name string     server name to use for Kubernetes API server certificate validation. If it is not provided, the hostname used to contact the server is used
      --kube-token string               bearer token used for authentication
      --kubeconfig string               path to the kubeconfig file
  -n, --namespace string                namespace scope for this request
      --qps float32                     queries per second used when communicating with the Kubernetes API, not including bursting
      --registry-config string          path to the registry config file (default "~/.config/helm/registry/config.json")
      --repository-cache string         path to the directory containing cached repository indexes (default "~/.cache/helm/repository")
      --repository-config string        path to the file containing repository names and URLs (default "~/.config/helm/repositories.yaml")

SEE ALSO

• helm plugin - install, list, or uninstall Helm plugins

Auto generated by spf13/cobra on 12-Jun-2026