KubernetesK8s
Shells into pods, without kubeconfigs on laptops.
Open a shell into any pod or container, or a kubectl console for a cluster, in the browser. Access is granted per cluster and namespace, and every command is recorded.
Browser
GSR Access Gateway
Cluster
Pod
Pod
What you get
No kubeconfig files to hand out: the gateway holds a vaulted service account per cluster.
Per cluster and namespace: standing or just-in-time access.
Command policy: block or flag
kubectl delete,execinto sensitive namespaces, or your own patterns.Recorded and searchable: replay any session and search every command.
- Pod shell
- kubectl console
- Access rules
- Replay
Set up
- 01
Register the cluster with a service account
- 02
Choose namespaces
- 03
Grant access
- 04
Users open a pod shell or console.
Prove it on your own systems.
A proof of concept runs inside your environment, on the systems you choose, with success criteria agreed up front.
- 01Scope call
- 02Deploy & connect your systems
- 03Review the evidence together