Show HN: Kube-insight – retained Kubernetes evidence for incident investigations
Kube-insight is an open-source tool that captures and retains Kubernetes cluster state, configuration, and logs for incident investigations. It stores evidence snapshots over time, enabling post-hoc analysis of what changed in a cluster before or during an incident. The project aims to improve forensic capabilities for Kubernetes environments.
Background
- **Kubernetes (K8s)** is the industry-standard open-source system for deploying, scaling, and managing containerized applications (e.g., microservices) across clusters of servers.
- When a production incident occurs (e.g., a service goes down), engineers need to investigate what happened. Standard Kubernetes clusters automatically clean up or recycle short-lived resources (pods, logs, events), making post-mortem forensics difficult.
- **Kube-insight** is a new open-source tool by startup Nowake.ai that continuously captures and retains cluster state — snapshots of resource configurations, logs, and events — so that incident responders have a preserved record of the cluster's exact state leading up to and during an incident.
- This addresses a well-known operational gap: most Kubernetes-native observability tools focus on metrics and alerting in real time, not on preserving forensic-quality evidence for later analysis.