kubecast | Monitor exec sessions in your cluster

kubecast is a Elm library. kubecast has no bugs, it has no vulnerabilities and it has low support. You can download it from GitHub.

The Kubernetes apiserver supports auditing. Operators can use this feature to see whenever a client uses kubectl exec to gain access to a container. One issue with this is that operators cannot see what a client actually types during the session which reduces their ability to audit effectively. kubecast fills in this missing information and allows operators to see exactly what was typed during any shell session. kubecast does this by injecting a small eBPF program on every node which is triggered whenever a TTY is written to. These writes are then submitted to userspace, grouped into sessions and streamed to a central server in the asciicast format so that they can be played back in real time.