Overview

KubeVirt Console Access with RBAC and Audit Trails

Shepherd exposes browser-based VM console entrypoints as part of a governed KubeVirt management workflow, instead of treating console access as an untracked side channel.

Console access is operationally sensitive

VM console access can be necessary for troubleshooting, bootstrap, and recovery. It can also expose powerful access to guest systems. Shepherd treats console entrypoints as part of the managed VM surface so access can be scoped and reviewed.

VNC and serial entrypoints

Shepherd supports browser-facing console paths for managed virtual machines and aligns those entrypoints with platform rules.

  • VNC console access for interactive VM sessions.
  • Serial console entrypoints for lower-level operational access.
  • RBAC-aware visibility so users see only allowed VM resources.

Audit-ready access patterns

When console use is part of the same governed product surface as other VM actions, platform teams have a clearer path to answer who accessed which VM and why.

Questions teams ask

Does Shepherd support KubeVirt VNC access?

Yes. Shepherd includes VNC console entrypoints for managed KubeVirt virtual machines, exposed through the governed web UI.

Can console access be governed?

Yes. Shepherd treats console entrypoints as part of the VM operations surface, with RBAC-aware visibility and audit context.