1"use strict";(self.webpackChunktwingate_homepage=self.webpackChunktwingate_homepage||[]).push([[912],{10912:function(e,t,n){n.r(t),n.d(t,{Head:function(){return S},default:function(){return M}});var s=n(96540),a=n(28453);function i(e){const t=Object.assign({p:"p",h1:"h1",a:"a",span:"span",h2:"h2",ul:"ul",li:"li",strong:"strong",code:"code"},(0,a.RP)(),e.components),{Callout:n}=t;return n||function(e,t){throw new Error("Expected "+(t?"component":"object")+" `"+e+"` to be defined: you likely forgot to import, pass, or provide it.")}("Callout",!0),s.createElement(s.Fragment,null,s.createElement(n,{title:"Available Now",severity:"warn"},s.createElement(t.p,null,"Twingate Privileged Access for Kubernetes is currently available and free for up to five resources. For additional pricing information, please contact Twingate.")),"\n",s.createElement(t.h1,{id:"twingate-privileged-access-for-kubernetes",style:{position:"relative"}},s.createElement(t.a,{href:"#twingate-privileged-access-for-kubernetes","aria-label":"twingate privileged access for kubernetes permalink",className:"remark-autolink-anchor before"},s.createElement(t.span,{dangerouslySetInnerHTML:{__html:'<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M13.3771 7.86873C14.1377 7.10819 15.3708 7.10819 16.1313 7.86873C16.8918 8.62927 16.8918 9.86235 16.1313 10.6229L14.2952 12.459C14.0417 12.7125 14.0417 13.1235 14.2952 13.3771C14.5487 13.6306 14.9597 13.6306 15.2132 13.3771L17.0493 11.5409C18.3169 10.2734 18.3169 8.21824 17.0493 6.95068C15.7818 5.68311 13.7266 5.68311 12.4591 6.95068L10.623 8.78678C10.3695 9.0403 10.3695 9.45132 10.623 9.70484C10.8765 9.95835 11.2875 9.95835 11.541 9.70484L13.3771 7.86873Z" fill="#A1A1AA"/><path fill-rule="evenodd" clip-rule="evenodd" d="M10.1639 13.8361C9.9104 13.5826 9.9104 13.1716 10.1639 12.9181L12.9181 10.1639C13.1716 9.9104 13.5826 9.9104 13.8361 10.1639C14.0896 10.4174 14.0896 10.8285 13.8361 11.082L11.082 13.8361C10.8285 14.0896 10.4174 14.0896 10.1639 13.8361Z" fill="#A1A1AA"/><path fill-rule="evenodd" clip-rule="evenodd" d="M7.86873 13.3771C7.10819 14.1377 7.10819 15.3707 7.86873 16.1313C8.62927 16.8918 9.86235 16.8918 10.6229 16.1313L12.459 14.2952C12.7125 14.0417 13.1235 14.0417 13.3771 14.2952C13.6306 14.5487 13.6306 14.9597 13.3771 15.2132L11.5409 17.0493C10.2734 18.3169 8.21824 18.3169 6.95068 17.0493C5.68311 15.7818 5.68311 13.7266 6.95068 12.4591L8.78678 10.623C9.0403 10.3694 9.45132 10.3694 9.70484 10.623C9.95835 10.8765 9.95835 11.2875 9.70484 11.541L7.86873 13.3771Z" fill="#A1A1AA"/></svg>'}})),"Twingate Privileged Access for Kubernetes"),"\n",s.createElement(t.p,null,"Twingate Privileged Access for Kubernetes enables secure, auditable access to your most sensitive infrastru
1cture with greater ease, visibility, and control. By extending Zero Trust principles beyond the initial network connection to include specific Kubernetes operations, Twingate Privileged Access for Kubernetes allows organizations to enforce least-privilege access at the application layer."),"\n",s.createElement(t.p,null,"Built on Twingateâs core architecture, Privileged Access for Kubernetes leverages private networking to keep clusters hidden from the public internet. Access policies are defined using identity, device posture, and other contextual signals, providing a flexible and extensible foundation for access control across your Kubernetes environments."),"\n",s.createElement(t.h2,{id:"key-benefits",style:{position:"relative"}},s.createElement(t.a,{href:"#key-benefits","aria-label":"key benefits permalink",className:"remark-autolink-anchor before"},s.createElement(t.span,{dangerouslySetInnerHTML:{__html:'<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M13.3771 7.86873C14.1377 7.10819 15.3708 7.10819 16.1313 7.86873C16.8918 8.62927 16.8918 9.86235 16.1313 10.6229L14.2952 12.459C14.0417 12.7125 14.0417 13.1235 14.2952 13.3771C14.5487 13.6306 14.9597 13.6306 15.2132 13.3771L17.0493 11.5409C18.3169 10.2734 18.3169 8.21824 17.0493 6.95068C15.7818 5.68311 13.7266 5.68311 12.4591 6.95068L10.623 8.78678C10.3695 9.0403 10.3695 9.45132 10.623 9.70484C10.8765 9.95835 11.2875 9.95835 11.541 9.70484L13.3771 7.86873Z" fill="#A1A1AA"/><path fill-rule="evenodd" clip-rule="evenodd" d="M10.1639 13.8361C9.9104 13.5826 9.9104 13.1716 10.1639 12.9181L12.9181 10.1639C13.1716 9.9104 13.5826 9.9104 13.8361 10.1639C14.0896 10.4174 14.0896 10.8285 13.8361 11.082L11.082 13.8361C10.8285 14.0896 10.4174 14.0896 10.1639 13.8361Z" fill="#A1A1AA"/><path fill-rule="evenodd" clip-rule="evenodd" d="M7.86873 13.3771C7.10819 14.1377 7.10819 15.3707 7.86873 16.1313C8.62927 16.8918 9.86235 16.8918 10.6229 16.1313L12.459 14.2952C12.7125 14.0417 13.1235 14.0417 13.3771 14.2952C13.6306 14.5487 13.6306 14.9597 13.3771 15.2132L11.5409 17.0493C10.2734 18.3169 8.21824 18.3169 6.95068 17.0493C5.68311 15.7818 5.68311 13.7266 6.95068 12.4591L8.78678 10.623C9.0403 10.3694 9.45132 10.3694 9.70484 10.623C9.95835 10.8765 9.95835 11.2875 9.70484 11.541L7.86873 13.3771Z" fill="#A1A1AA"/></svg>'}})),"Key Benefits"),"\n",s.createElement(t.ul,null,"\n",s.createElement(t.li,null,s.createElement(t.strong,null,"Seamless Identity Propagation:")," Twingate passes user identity through to your Kubernetes clusters, eliminating the need for separate Kubernetes credentials."),"\n",s.createElement(t.li,null,s.createElement(t.strong,null,"Streamlined User Experience:")," End users benefit from fewer authentication steps and more efficient workflows."),"\n",s.createElement(t.li,null,s.createElement(t.strong,null,"Enhanced Security:")," DevOps and security teams gain complete end-to-end visibility from network-level access to in-cluster operations."),"\n",s.createElement(t.li,null,s.createElement(t.strong,null,"Comprehensive Auditing:")," All user activity is logged and attributed to specific identities. Privileged Access supports session replay for full visibility into actions taken within the cluster."),"\n",s.createElement(t.li,null,s.createElement(t.strong,null,"Simplified Policy Management:")," A unified policy engine governs both network and Kubernetes access, reducing management overhead and eliminating credential sprawl."),"\n"),"\n",s.createElement(t.h1,{id:"how-it-works",style:{position:"relative"}},s.createElement(t.a,{href:"#how-it-works","aria-label":"how it works permalink",className:"remark-autolink-anchor before"},s.createElement(t.span,{dangerouslySetInnerHTML:{__html:'<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M13.3771 7.86873C14.1377 7.10819 15.3708 7.10819 16.1313 7.86873C16.8918 8.62927 16.8918 9.86235 16.1313 10.6229L14.2952 12.459C14.0417 12.7125 14.0417 13.1235 14.2952 13.3771C14.5487 13.6306 14.9597 13.6306 15.2132 13.3771L17.0493 11.5409C18.3169 10.2734 18.3169 8.21824 17.0493 6.95068C15.7818 5.68311 13.7266 5.68311 12.4591 6.95068L10.623 8.78678C10.3695 9.0403 10.3695 9.45132 10.623 9.70484C10.8765 9.95835 11.2875 9.95835 11.541 9.70484L13.3771 7.86873Z" fill="#A1A1AA"/><path fill-rule="evenodd" clip-rule="evenodd" d="M10.1639 13.8361C9.9104 13.5826 9.9104 13.1716 10.1639 12.9181L12.9181 10.1639C13.1716 9.9104 13.5826 9.9104 13.8361 10.1639C14.0896 10.4174 14.0896 10.8285 13.8361 11.082L11.082 13.8361C10.8285 14.0896 10.4174 14.0896 10.
11639 13.8361Z" fill="#A1A1AA"/><path fill-rule="evenodd" clip-rule="evenodd" d="M7.86873 13.3771C7.10819 14.1377 7.10819 15.3707 7.86873 16.1313C8.62927 16.8918 9.86235 16.8918 10.6229 16.1313L12.459 14.2952C12.7125 14.0417 13.1235 14.0417 13.3771 14.2952C13.6306 14.5487 13.6306 14.9597 13.3771 15.2132L11.5409 17.0493C10.2734 18.3169 8.21824 18.3169 6.95068 17.0493C5.68311 15.7818 5.68311 13.7266 6.95068 12.4591L8.78678 10.623C9.0403 10.3694 9.45132 10.3694 9.70484 10.623C9.95835 10.8765 9.95835 11.2875 9.70484 11.541L7.86873 13.3771Z" fill="#A1A1AA"/></svg>'}})),"How It Works"),"\n",s.createElement(t.p,null,"Twingate Privileged Access for Kubernetes introduces a Twingate Gateway, an application-level (Layer 7) reverse proxy deployed within your environment. This Gateway enables identity propagation and session recording for Kubernetes interactions."),"\n",s.createElement(t.span,{dangerouslySetInnerHTML:{__html:'<span\n class="gatsby-resp-image-wrapper"\n style="position: relative; display: block; margin-left: auto; margin-right: auto; max-width: 840px; margin-top:1rem;margin-bottom:1rem"\n >
1\n <span\n class="gatsby-resp-image-background-image"\n style="padding-bottom: 55.23809523809524%; position: relative; bottom: 0; left: 0; background-image: url(\'data:image/png;base64,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\'); background-size: cover; display: block;"\n ></span>\n <picture>\n <source\n srcset="/docs-assets/5f397c1/docs/static/2e12f0f7855387cedf271853396313f9/c7028/k8s_architecture.webp 210w,\n/docs-assets/5f397c1/docs/static/2e12f0f7855387cedf271853396313f9/ce09e/k8s_architecture.webp 420w,\n/docs-assets/5f397c1/docs/static/2e12f0f7855387cedf271853396313f9/ed60d/k8s_architecture.webp 840w,\n/docs-assets/5f397c1/docs/static/2e12f0f7855387cedf271853396313f9/4ef06/k8s_architecture.webp 1260w,\n/docs-assets/5f397c1/docs/static/2e12f0f7855387cedf271853396313f9/21b4e/k8s_architecture.webp 1680w,\n/docs-assets/5f397c1/docs/static/2e12f0f7855387cedf271853396313f9/d21eb/k8s_architecture.webp 2108w"\n sizes="(max-width: 840px) 100vw, 840px"\n type="image/webp"\n />\n <source\n srcset="/docs-assets/5f397c1/docs/static/2e12f0f7855387cedf271853396313f9/65ed1/k8s_architecture.png 210w,\n/docs-assets/5f397c1/docs/static/2e12f0f7855387cedf271853396313f9/d10fb/k8s_architecture.png 420w,\n/docs-assets/5f397c1/docs/static/2e12f0f7855387cedf271853396313f9/1e088/k8s_architecture.png 840w,\n/docs-assets/5f397c1/docs/static/2e12f0f7855387cedf271853396313f9/78612/k8s_architecture.png 1260w,\n/docs-assets/5f397c1/docs/static/2e12f0f7855387cedf271853396313f9/21cdd/k8s_architecture.png 1680w,\n/docs-assets/5f397c1/docs/static/2e12f0f7855387cedf271853396313f9/1ffbd/k8s_architecture.png 2108w"\n sizes="(max-width: 840px) 100vw, 840px"\n type="image/png"\n />\n <img\n class="gatsby-resp-image-image"\n src="/docs-assets/5f397c1/docs/static/2e12f0f7855387cedf271853396313f9/1e088/k8s_architecture.png"\n alt=""\n title=""\n loading="lazy"\n decoding="async"\n style="width:100%;height:100%;margin:0;vertical-align:middle;position:absolute;top:0;left:0;"\n />\n </picture>\n </span>'}}),"\n",s.createElement(t.p,null,"When a user connects, Twingate forwards their authenticated identity to the Kubernetes cluster. You can then configure Kubernetes RBAC using ",s.createElement(t.a,{href:"https://kubernetes.io/docs/reference/access-authn-authz/rbac/"},s.createElement(t.code,null,"ClusterRoleBindings")," or ",s.createElement(t.code,null,"RoleBindings"))," to authorize user actions based on this identity."),"\n",s.createElement(t.p,null,"The Twingate Gateway audits all end user actions and commands run on the cluster, exporting them via ",s.createElement(t.code,null,"stdout")," and tying it to the user identity. Admins can then decide to export or store those logs for further processing and/or storage needs."),"\n",s.createElement(t.p,null,"After setting up Privileged Access for Kubernetes via the Operator, you will have a new Resource in the Admin Console with the type Kubernetes Cluster. When viewing the Resource in the Admin Console, you will additionally see details specific to the Gateway."),"\n",s.createElement(t.span,{dangerouslySetInnerHTML:{__html:'<span\n class="gatsby-resp-image-wrapper"\n style="position: relative; display: block; margin-left: auto; margin-right: auto; max-width: 840px; margin-top:1rem;margin-bottom:1rem"\n >
1\n <span\n class="gatsby-resp-image-background-image"\n style="padding-bottom: 100.95238095238095%; position: relative; bottom: 0; left: 0; background-image: url(\'data:image/png;base64,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\'); background-size: cover; display: block;"\n ></span>\n <picture>\n <source\n srcset="/docs-assets/5f397c1/docs/static/def1158a9955d4f4aae8f182c943e5d0/c7028/k8s_resource.webp 210w,\n/docs-assets/5f397c1/docs/static/def1158a9955d4f4aae8f182c943e5d0/ce09e/k8s_resource.webp 420w,\n/docs-assets/5f397c1/docs/static/def1158a9955d4f4aae8f182c943e5d0/ed60d/k8s_resource.webp 840w,\n/docs-assets/5f397c1/docs/static/def1158a9955d4f4aae8f182c943e5d0/2baf0/k8s_resource.webp 1180w"\n sizes="(max-width: 840px) 100vw, 840px"\n type="image/webp"\n />\n <source\n srcset="/docs-assets/5f397c1/docs/static/def1158a9955d4f4aae8f182c943e5d0/65ed1/k8s_resource.png 210w,\n/docs-assets/5f397c1/docs/static/def1158a9955d4f4aae8f182c943e5d0/d10fb/k8s_resource.png 420w,\n/docs-assets/5f397c1/docs/static/def1158a9955d4f4aae8f182c943e5d0/1e088/k8s_resource.png 840w,\n/docs-assets/5f397c1/docs/static/def1158a9955d4f4aae8f182c943e5d0/c83ae/k8s_resource.png 1180w"\n sizes="(max-width: 840px) 100vw, 840px"\n type="image/png"\n />\n <img\n class="gatsby-resp-image-image"\n src="/docs-assets/5f397c1/docs/static/def1158a9955d4f4aae8f182c943e5d0/1e088/k8s_resource.png"\n alt=""\n title=""\n loading="lazy"\n decoding="async"\n style="width:100%;height:100%;margin:0;vertical-align:middle;position:absolute;top:0;left:0;"\n />\n </picture>\n </span>'}}),"\n",s.createElement(t.h1,{id:"how-to-set-it-up",style:{position:"relative"}},s.createElement(t.a,{href:"#how-to-set-it-up","aria-label":"how to set it up permalink",className:"remark-autolink-anchor before"},s.createElement(t.span,{dangerouslySetInnerHTML:{__html:'<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M13.3771 7.86873C14.1377 7.10819 15.3708 7.10819 16.1313 7.86873C16.8918 8.62927 16.8918 9.86235 16.1313 10.6229L14.2952 12.459C14.0417 12.7125 14.0417 13.1235 14.2952 13.3771C14.5487 13.6306 14.9597 13.6306 15.2132 13.3771L17.0493 11.5409C18.3169 10.2734 18.3169 8.21824 17.0493 6.95068C15.7818 5.68311 13.7266 5.68311 12.4591 6.95068L10.623 8.78678C10.3695 9.0403 10.3695 9.45132 10.623 9.70484C10.8765 9.95835 11.2875 9.95835 11.541 9.70484L13.3771 7.86873Z" fill="#A1A1AA"/><path fill-rule="evenodd" clip-rule="evenodd" d="M10.1639 13.8361C9.9104 13.5826 9.9104 13.1716 10.1639 12.9181L12.9181 10.1639C13.1716 9.9104 13.5826 9.9104 13.8361 10.1639C14.0896 10.4174 14.0896 10.8285 13.8361 11.082L11.082 13.8361C10.8285 14.0896 10.4174 14.0896 10.1639 13.8361Z" fill="#A1A1AA"/><path fill-rule="evenodd" clip-rule="evenodd" d="M7.86873 13.3771C7.10819 14.1377 7.10819 15.3707 7.86873 16.1313C8.62927 16.8918 9.86235 16.8918 10.6229 16.1313L12.459 14.2952C12.7125 14.0417 13.1235 14.0417 13.3771 14.2952C13.6306 14.5487 13.6306 14.9597 13.3771 15.2132L11.5409 17.0493C10.2734 18.3169 8.21824 18.3169 6.95068 17.0493C5.68311 15.7818 5.68311 13.7266 6.95068 12.4591L8.78678 10.623C9.0403 10.3694 9.45132 10.3694 9.70484 10.623C9.95835 10.8765 9.95835 11.2875 9.70484 11.541L7.86873 13.3771Z" fill="#A1A1AA"/></svg>'}})),"How to set it up"),"\n",s.createElement(t.p,null,"We recommend setting up Privileged Access via the Kubernetes Operator, as itâs both the easiest way to set it up and to keep it updated."),"\n",s.createElement(t.p,null,"See ",s.createElement(t.a,{href:"https://github.com/Twingate/kubernetes-operator"},"here for a link to our Kubernetes Operator")," and additionally here for information on the ",s.createElement(t.a,{href:"https://github.com/Twingate/kubernetes-access-gateway"},"Gateway"),"."),"\n",s.createElement(n,{title:"Connector version",severity:"warn"},s.createElement(t.p,null,"Note that all Connectors associated with Kubernetes Resources will need to be on at least Connector version 1.82.0.")),"\n",s.createElement(t.h1,{id:"user-configuration",style:{position:"relative"}}
1,s.createElement(t.a,{href:"#user-configuration","aria-label":"user configuration permalink",className:"remark-autolink-anchor before"},s.createElement(t.span,{dangerouslySetInnerHTML:{__html:'<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M13.3771 7.86873C14.1377 7.10819 15.3708 7.10819 16.1313 7.86873C16.8918 8.62927 16.8918 9.86235 16.1313 10.6229L14.2952 12.459C14.0417 12.7125 14.0417 13.1235 14.2952 13.3771C14.5487 13.6306 14.9597 13.6306 15.2132 13.3771L17.0493 11.5409C18.3169 10.2734 18.3169 8.21824 17.0493 6.95068C15.7818 5.68311 13.7266 5.68311 12.4591 6.95068L10.623 8.78678C10.3695 9.0403 10.3695 9.45132 10.623 9.70484C10.8765 9.95835 11.2875 9.95835 11.541 9.70484L13.3771 7.86873Z" fill="#A1A1AA"/><path fill-rule="evenodd" clip-rule="evenodd" d="M10.1639 13.8361C9.9104 13.5826 9.9104 13.1716 10.1639 12.9181L12.9181 10.1639C13.1716 9.9104 13.5826 9.9104 13.8361 10.1639C14.0896 10.4174 14.0896 10.8285 13.8361 11.082L11.082 13.8361C10.8285 14.0896 10.4174 14.0896 10.1639 13.8361Z" fill="#A1A1AA"/><path fill-rule="evenodd" clip-rule="evenodd" d="M7.86873 13.3771C7.10819 14.1377 7.10819 15.3707 7.86873 16.1313C8.62927 16.8918 9.86235 16.8918 10.6229 16.1313L12.459 14.2952C12.7125 14.0417 13.1235 14.0417 13.3771 14.2952C13.6306 14.5487 13.6306 14.9597 13.3771 15.2132L11.5409 17.0493C10.2734 18.3169 8.21824 18.3169 6.95068 17.0493C5.68311 15.7818 5.68311 13.7266 6.95068 12.4591L8.78678 10.623C9.0403 10.3694 9.45132 10.3694 9.70484 10.623C9.95835 10.8765 9.95835 11.2875 9.70484 11.541L7.86873 13.3771Z" fill="#A1A1AA"/></svg>'}})),"User configuration"),"\n",s.createElement(t.p,null,"After a user is given access to a Kubernetes Cluster Resource, they will need to sync the Kubernetes configuration file on their machine. This will set up ",s.createElement(t.a,{href:"https://kubernetes.io/docs/concepts/configuration/organize-cluster-access-kubeconfig/"},"the ",s.createElement(t.code,null,"kubeconfig")," file")," on the machine, enabling access. Users can choose to sync a specific Resource, sync all Resources, or set up an auto-sync to keep the configuration updated."),"\n",s.createElement(n,{title:".kube folder",severity:"warn"},s.createElement(t.p,null,"The Twingate Client requires an existing ",s.createElement(t.code,null,".kube")," folder. If it doesnât exist, run ",s.createElement(t.code,null,"kubectl")," on the machine or create an empty folder before syncing.")),"\n",s.createElement(t.span,{dangerouslySetInnerHTML:{__html:'<span\n class="gatsby-resp-image-wrapper"\n style="position: relative; display: block; margin-left: auto; margin-right: auto; max-width: 840px; margin-top:1rem;margin-bottom:1rem"\n >
1\n <span\n class="gatsby-resp-image-background-image"\n style="padding-bottom: 66.19047619047619%; position: relative; bottom: 0; left: 0; background-image: url(\'data:image/png;base64,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\'); background-size: cover; display: block;"\n ></span>\n <picture>\n <source\n srcset="/docs-assets/5f397c1/docs/static/267a1e32459dc11f2872204d57765307/c7028/k8s_client.webp 210w,\n/docs-assets/5f397c1/docs/static/267a1e32459dc11f2872204d57765307/ce09e/k8s_client.webp 420w,\n/docs-assets/5f397c1/docs/static/267a1e32459dc11f2872204d57765307/ed60d/k8s_client.webp 840w,\n/docs-assets/5f397c1/docs/static/267a1e32459dc11f2872204d57765307/9012d/k8s_client.webp 992w"\n sizes="(max-width: 840px) 100vw, 840px"\n type="image/webp"\n />\n <source\n srcset="/docs-assets/5f397c1/docs/static/267a1e32459dc11f2872204d57765307/65ed1/k8s_client.png 210w,\n/docs-assets/5f397c1/docs/static/267a1e32459dc11f2872204d57765307/d10fb/k8s_client.png 420w,\n/docs-assets/5f397c1/docs/static/267a1e32459dc11f2872204d57765307/1e088/k8s_client.png 840w,\n/docs-assets/5f397c1/docs/static/267a1e32459dc11f2872204d57765307/91f10/k8s_client.png 992w"\n sizes="(max-width: 840px) 100vw, 840px"\n type="image/png"\n />\n <img\n class="gatsby-resp-image-image"\n src="/docs-assets/5f397c1/docs/static/267a1e32459dc11f2872204d57765307/1e088/k8s_client.png"\n alt=""\n title=""\n loading="lazy"\n decoding="async"\n style="width:100%;height:100%;margin:0;vertical-align:middle;position:absolute;top:0;left:0;"\n />\n </picture>\n </span>'}}),"\n",s.createElement(t.p,null,"For detailed instructions on syncing kubeconfig, including headless and CI/CD usage, see ",s.createElement(t.a,{href:"/docs-assets/5f397c1/docs/kubernetes-kubeconfig-sync"},"Kubernetes Kubeconfig Sync"),"."),"\n",s.createElement(n,{title:"Client version",severity:"warn"},s.createElement(t.p,null,"Note that all users accessing Privileged Access for Kubernetes will need to be on at least Client versions 2025.175. Privileged Access is only available on macOS, Windows, and Linux platforms.")),"\n",s.createElement(t.h1,{id:"session-recording",style:{position:"relative"}},s.createElement(t.a,{href:"#session-recording","aria-label":"session recording permalink",className:"remark-autolink-anchor before"},s.createElement(t.span,{dangerouslySetInnerHTML:{__html:'<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M13.3771 7.86873C14.1377 7.10819 15.3708 7.10819 16.1313 7.86873C16.8918 8.62927 16.8918 9.86235 16.1313 10.6229L14.2952 12.459C14.0417 12.7125 14.0417 13.1235 14.2952 13.3771C14.5487 13.6306 14.9597 13.6306 15.2132 13.3771L17.0493 11.5409C18.3169 10.2734 18.3169 8.21824 17.0493 6.95068C15.7818 5.68311 13.7266 5.68311 12.4591 6.95068L10.623 8.78678C10.3695 9.0403 10.3695 9.45132 10.623 9.70484C10.8765 9.95835 11.2875 9.95835 11.541 9.70484L13.3771 7.86873Z" fill="#A1A1AA"/><path fill-rule="evenodd" clip-rule="evenodd" d="M10.1639 13.8361C9.9104 13.5826 9.9104 13.1716 10.1639 12.9181L12.9181 10.1639C13.1716 9.9104 13.5826 9.9104 13.8361 10.1639C14.0896 10.4174 14.0896 10.8285 13.8361 11.082L11.082 13.8361C10.8285 14.0896 10.4174 14.0896 10.
11639 13.8361Z" fill="#A1A1AA"/><path fill-rule="evenodd" clip-rule="evenodd" d="M7.86873 13.3771C7.10819 14.1377 7.10819 15.3707 7.86873 16.1313C8.62927 16.8918 9.86235 16.8918 10.6229 16.1313L12.459 14.2952C12.7125 14.0417 13.1235 14.0417 13.3771 14.2952C13.6306 14.5487 13.6306 14.9597 13.3771 15.2132L11.5409 17.0493C10.2734 18.3169 8.21824 18.3169 6.95068 17.0493C5.68311 15.7818 5.68311 13.7266 6.95068 12.4591L8.78678 10.623C9.0403 10.3694 9.45132 10.3694 9.70484 10.623C9.95835 10.8765 9.95835 11.2875 9.70484 11.541L7.86873 13.3771Z" fill="#A1A1AA"/></svg>'}})),"Session Recording"),"\n",s.createElement(t.p,null,"Logs are automatically exported to ",s.createElement(t.code,null,"stdout")," and can be streamed elsewhere. To note, the logs are not uploaded to Twingate and accessible solely on your infrastructure."),"\n",s.createElement(t.p,null,"The logs are in asciicast v2 format and can be replayed via a standalone Twingate asciicast web player (",s.createElement(t.a,{href:"https://www.twingate.com/sessionplayer"},"https://www.twingate.com/sessionplayer"),"). You can either copy and paste the log or upload a file to replay the session."),"\n",s.createElement(t.span,{dangerouslySetInnerHTML:{__html:'<span\n class="gatsby-resp-image-wrapper"\n style="position: relative; display: block; margin-left: auto; margin-right: auto; max-width: 840px; margin-top:1rem;margin-bottom:1rem"\n >
1\n <span\n class="gatsby-resp-image-background-image"\n style="padding-bottom: 45.238095238095234%; position: relative; bottom: 0; left: 0; background-image: url(\'data:image/png;base64,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\'); background-size: cover; display: block;"\n ></span>\n <picture>\n <source\n srcset="/docs-assets/5f397c1/docs/static/3bd5644bf65bf0d738413958c93b5bfa/c7028/k8s_session_player.webp 210w,\n/docs-assets/5f397c1/docs/static/3bd5644bf65bf0d738413958c93b5bfa/ce09e/k8s_session_player.webp 420w,\n/docs-assets/5f397c1/docs/static/3bd5644bf65bf0d738413958c93b5bfa/ed60d/k8s_session_player.webp 840w,\n/docs-assets/5f397c1/docs/static/3bd5644bf65bf0d738413958c93b5bfa/4ef06/k8s_session_player.webp 1260w,\n/docs-assets/5f397c1/docs/static/3bd5644bf65bf0d738413958c93b5bfa/21b4e/k8s_session_player.webp 1680w,\n/docs-assets/5f397c1/docs/static/3bd5644bf65bf0d738413958c93b5bfa/6dbfe/k8s_session_player.webp 2590w"\n sizes="(max-width: 840px) 100vw, 840px"\n type="image/webp"\n />\n <source\n srcset="/docs-assets/5f397c1/docs/static/3bd5644bf65bf0d738413958c93b5bfa/65ed1/k8s_session_player.png 210w,\n/docs-assets/5f397c1/docs/static/3bd5644bf65bf0d738413958c93b5bfa/d10fb/k8s_session_player.png 420w,\n/docs-assets/5f397c1/docs/static/3bd5644bf65bf0d738413958c93b5bfa/1e088/k8s_session_player.png 840w,\n/docs-assets/5f397c1/docs/static/3bd5644bf65bf0d738413958c93b5bfa/78612/k8s_session_player.png 1260w,\n/docs-assets/5f397c1/docs/static/3bd5644bf65bf0d738413958c93b5bfa/21cdd/k8s_session_player.png 1680w,\n/docs-assets/5f397c1/docs/static/3bd5644bf65bf0d738413958c93b5bfa/11fc9/k8s_session_player.png 2590w"\n sizes="(max-width: 840px) 100vw, 840px"\n type="image/png"\n />\n <img\n class="gatsby-resp-image-image"\n src="/docs-assets/5f397c1/docs/static/3bd5644bf65bf0d738413958c93b5bfa/1e088/k8s_session_player.png"\n alt=""\n title=""\n loading="lazy"\n decoding="async"\n style="width:100%;height:100%;margin:0;vertical-align:middle;position:absolute;top:0;left:0;"\n />\n </picture>\n </span>'}}))}var o=function(e){void 0===e&&(e={});const{wrapper:t}=Object.assign({},(0,a.RP)(),e.components);return t?s.createElement(t,e,s.createElement(i,e)):i(e)};var r=n(35309),l=n(71623),c=n(84343),d=n(48291),p=n(17816),u=n(75131),f=n(22792),g=n(43611),m=n(63377),h=n(42452),b=n(1805),w=n(2976),A=n(64190),v=n(83900),C=n(43285),y=n(22009),k=n(28789),x=n(61540),E=n(21145),L=n(16204),T=n(35935),I=n(74848);function S(e){var t,n,s,a,i,o;const{data:r,location:c,pageContext:p}=e,{mdx:f,docsSocialImage:g}=r,m=null==f||null===(t=f.frontmatter)||void 0===t?void 0:t.title,h=(null==f||null===(n=f.frontmatter)||void 0===n?void 0:n.description)||(null==f||null===(s=f.frontmatter)||void 0===s?void 0:s.subtitle),b=null==f||null===(a=f.frontmatter)||void 0===a?void 0:a.keywords,{docsMetadata:w}=(0,L.M)(),A=h||(null==w?void 0:w.description),v=(0,T.f)((0,u.Z)(f),null!==(i=p.navigationTree)&&void 0!==i?i:[],m),y=v.length>1;return(0,I.jsxs)(C.k,{title:m,description:A,keywords:b,pathname:c.pathname,image:null==g||null===(o=g.childImageSharp)||void 0===o?void 0:o.original,children:[(0,I.jsx)(l.d,{mdx:f,pathname:c.pathname,description:A,hasBreadcrumb:y}),(0,I.jsx)(d.g,{path:v,pathname:c.pathname})]})}function B(e){var t,n,s;const{children:a,data:i,pageContext:o,location:l}=e,{mdx:d}=i,{navigationTree:C}=o,L=(0,y._)(),S=null==d?void 0:d.frontmatter,B="two-column"===(null==S||null===(t=S.docs)||void 0===t?void 0:t.layout),M=`https://www.twingate.com${l.pathname}`;let _=null!==(n=null==S||null===(s=S.docs)||void 0===s?void 0:s.aiPrompt)&&void 0!==n?n:`Take a look at this page: ${M} and walk me through it`;_.includes("{{url}}")&&(_=_.replace("{{url}}",M));const j=[{id:"open-chatgpt",icon:(0,I.jsx)(k.IconChatGPT,{}),label:"Open in ChatGPT",description:"Ask questions about this page",href:`https://chatgpt.com/?hints=search&q=${encodeURIComponent(_)}`},{id:"open-claude",icon:(0,I.jsx)(x.IconClaude,{}),label:"Open in Claude",description:"Ask questions about this page",href:`https://claude.ai/new?q=${encodeURIComponent(_)}`}],N=(0,u.Z)(d),U=null==S?void 0:S.title,R=(0,T.f)(N,C,U),{isVideoOverlayOpen:Z}=L;return(0,I.jsx)(y.jx,{value:L,children:(0,I.jsxs)(m.P,{children:[(0,I.jsx)(E.R,{currentPath:R,navItems:C,pathname:l.pathname,visibility:["visible","visible","hidden"],height:["auto","auto",0]}),(0,I.jsx)(b.a,{as:"section",paddingTopSpacing:[3,4,6],paddingBottomSpacing:[4,0],boxSizing:"content-box",children:(0,I.jsx)(w.m,{maxWidth:"xl",disableGutters:!0,children:(0,I.jsxs)(A.x,{gridGap:["0","0","2rem","4rem","6rem","9rem"],gridTemplateColumns:["repeat(12, 1fr)","repeat(12, 1fr)","248px minmax(0, 1fr) 240px","248px minmax(0, 1fr) 240px","248px minmax(0, 1fr) 240px"],children:[(0,I.jsx)(b.a,{display:["none","none","block"],gridColumn:"1 / span 1",height:"calc(100vh - 5rem - 3rem)",overflow:"auto",position:"sticky",top:"7rem",children:(0,I.jsx)(f.S,{overflow:"hidden",pathname:l.pathname,items:C,paddingRightSpacing:[0,0],paddingBottomSpacing:2})}),(0,I.jsxs)(b.a,{gridColumn:["1 / span 12","1 / span 12","2 / span 2",B?"2 / span 2":"2 / span 1"],style:{maxWidth:"840px"},children:[(0,I.jsxs)(b.a,{display:"flex",flexDirection:["column-reverse","row","row","column"],justifyContent:["flex-start","space-between","space-between","flex-start"],marginBottomSpacing:[2,3,2,0],children:[(0,I.jsx)(b.a,{children:(0,I.jsx)(r.n,{mdx:d,path:R})}),!B&&(0,I.jsx)(b.a,{display:["block","block","block","none"],marginTopSpacing:[1,2,5],children:(0,I.jsx)(h.W,{items:j,triggerLabel:"Open with AI"})})]}),Z&&(0,I.jsx)(b.a,{position:"absolute",width:"100%",height:"100%",left:"0",right:"0",top:"0",children:(0,I.jsx)(g.O,{})}),a&&(0,I.jsx)(b.a,{marginTopSpacing:4,marginBottomSpacing:7,children:(0,I.jsx)(v.b,{children:a})}),(0,I.jsx)(c.n,{mdx:d})]}),!B&&(0,I.jsx)(b.a,{display:["none","none","none","block"],gridColumn:"3 / span 1",children:(0,I.jsxs)(b.a,{position:"sticky",top:"7rem",children:[(0,I.jsx)(b.a,{marginBottomSpacing:3,marginTopSpacing:1,children:(0,I.jsx)(h.W,{items:j,triggerLabel:"Open with AI"})}),(0,I.jsx)(p.M,{mdx:d,locationHash:l.hash})]})})]})})})]})})}function M(e){return s.createElement(B,e,s.createElement(o,e))}}}]); 2//# sourceMappingURL=912-3a5c3c4bfbb32d076619.js.map
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.