Overview

Records actions within connection sessions such as Pod Exec among API server calls to Kubernetes clusters managed by the organization. Administrators can monitor users’ execution history in operating container shells through video playback.

Viewing Pod Session Recordings

1. Navigate to the Administrator > Audit > Kubernetes > Pod Session Recordings menu.
2. Pod exec session details are displayed in the table list in descending order.
3. You can search with the following conditions through the search field in the top left of the table:
   1. Name : User name
   2. Email : User email
   3. Cluster Name : Cluster name registered in QueryPie
   4. Client IP : User client IP address
   5. Client Name : User client name/version (e.g. kubectl/v1.27.3)
4. Click the filter button on the right side of the search field to filter by re-specifying the date and time range for Action At.
5. You can refresh the log list through the refresh button in the top right of the table.
6. The table provides the following column information:
   1. No : Event identification number
   2. Action At : Session recording start date and time
   3. Name : Target user name
   4. Email : Target user email
   5. Cluster Name : Target Kubernetes cluster name
   6. Role : Role name that could perform the action
   7. Client IP : User client IP address
   8. Client Name : User client name/version
   9. Connected From : Subject of connection method
      1. Currently only Proxy is entered.

Playing Pod Session Recordings

1. Click the Action At link in each row to play the session recording history.
2. Clicking the Action At link executes a modal and displays a modal showing the initial download process for playback.
3. Depending on whether the recorded file size exceeds 700MB, it displays the playback screen or download button.
   1. Less than 700MB
      1. Basic information is displayed at the top and the Replay playback screen is displayed at the bottom.
         1. Name : Executor name
         2. Action At : Occurrence date and time (start)
         3. Session Recording Name : Recording name
      2. Click the play button to start.
         1. Conversely, click the pause button to stop playback.
         2. You can also drag the line to the right of the button or click on the desired point to play from that part.
      3. Click the Close button to close the window.
   2. 700MB or more
      1. Provides a download button along with a message that playback is not possible within the playback screen.
         1. The file size exceeds 700MB and the session cannot be played back.
         2. To view this session recording, you need to download the file content and play it.
      2. Click the Download button to proceed with the download and create a file locally.
         1. When the common option Export a file with Encryption in Administrator > General > Company Management > Security > Others is set to Required, an encryption modal appears additionally during the download and the download is executed after the modal.