who_shelled_into_pod
Retrieve Kubernetes audit logs to identify users who accessed pods via shell sessions for security monitoring and compliance verification.
Instructions
Get k8s audit logs with information about users who shelled into a pod
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| name | No | Optional Pod name | |
| namespace | No | Optional Pod namespace | |
| cluster_id | No | Optional Cluster ID | |
| from_time | No | Start time of the time range to search for audit events. Example: 2024-01-01T00:00:00Z. Default: 7 days ago | |
| to_time | No | End time of the time range to search for audit events. Example: 2024-01-03T00:00:00Z | |
| limit | No | Maximum number of results to return | |
| page | No | Page number to return |