https://hannody.github.io/tags/rbac/Recent content in Rbac on Mohanad Abu-NaylaHugoen-USSat, 23 May 2026 00:00:00 +0000https://hannody.github.io/posts/k8s/kubernetes-stern-error-watcher/Sat, 23 May 2026 00:00:00 +0000https://hannody.github.io/posts/k8s/kubernetes-stern-error-watcher/<p>During a large-scale stress test, the last thing you want is to be hunting errors across 150 pods manually.</p> <p>So I built an on-demand error log watcher for a complex Kubernetes namespace under real-world constraints, without touching anything outside the namespace, and without installing a single binary on the server.</p> <p><strong>What we are building:</strong> a Kubernetes Deployment, scaled to zero by default, that runs <a href="https://github.com/stern/stern">Stern</a> as a container inside the cluster. It watches all pods in a target namespace, filters output to errors only, and can be started or stopped with a single <code>kubectl scale</code> command. The entire setup RBAC, ServiceAccount, and Deployment lives within the targeted namespace it monitors and leaves no trace when removed.</p>