Just-in-time kubectl access | Changelog

A pending access request in the Ryvn dashboard showing the requester, environment, pinned permission set, duration, and reason, the access it would grant, and Approve and Deny buttons

Engineers can now get time-boxed, approved kubectl access to environments Ryvn manages with Ryvn Connect, so nobody needs a standing kubeconfig for the cluster. Each grant is limited to a permission set of Kubernetes RBAC rules and namespaces, and approvers, whether your team or your customer in a BYOC deployment, see the exact access before they approve it. Approved access expires on its own, and every request stays on record for audit.