Confirm access and a usable VM
The request handler checks console capability and resource access, refreshes VM state and resolves the registered namespace environment. Missing access or namespace configuration needs attention before the session can be useful.
Follow the applicable review path
Environment policy determines whether the console workflow issues access directly or creates an approval request. Ordinary VM read access or an old power-operation approval is not a substitute for this check.
Treat the session as live infrastructure
The backend opens a serial or VNC stream and uses a short-lived bootstrap credential. Availability depends on the VM and provider. Guest login and guest-side serial configuration remain operating-system responsibilities. Access events do not promise screen or keystroke recording.
Walk through the task
Select the intended VM
Check ownership, environment and live state. If a power action is needed first, finish that separate workflow before requesting a console.
Request access with the right account
Use console capability and access to the resource. Follow any pending review instead of repeatedly creating new sessions.
Read authorization and policy checksOpen the available console path
Use the issued VNC or serial entrypoint. In a connected installation, verify a responsive guest console and use its normal guest login.
Inspect console request and session contractsReview the access event
Use an authorized audit view for the request and connection context. Do not treat access auditing as a complete record of activity inside the guest.
Inspect console audit events
Requirements and limits
- The frontend demo does not create live VNC or serial connections.
- A real session requires reachable console APIs, a suitable VM and correct application and infrastructure permissions.
- Access events do not provide a promise of session recording or guest command auditing.
Documentation and implementation
- Current console handler
Authorization, policy, bootstrap credentials and audit events.
- Console API contract
VM console request, status, VNC and serial operations.
- Approval requirement model
Shared environment-aware decision boundary.
- Resource and environment access
Console capability complements resource membership.
Common questions
Can I test a real console in the demo?
No. Validate VNC and serial with your own connected test VM.
Does approval guarantee console availability?
No. The VM, guest configuration and provider still need to support a usable console stream.