kubeshark

Why we included this project

Kubeshark is the tool you reach for when logs and metrics stop explaining a production outage and you need to see the actual bytes moving between services. It captures cluster-wide traffic at the kernel level with eBPF and records the Kubernetes context of every request, so you can filter a failure down to the exact pod, namespace, and workload instead of stitching clues together from scattered log lines. A genuinely useful trick is transparent TLS and mTLS decryption: encrypted API traffic shows up as readable plain text with no key management or sidecars, which makes it practical for incident response and root cause analysis. You can also export scoped PCAPs for Wireshark or long-term retention. SREs and platform engineers who have stared at a mystery outage will appreciate that the same traffic is queryable from a real-time dashboard or, over MCP, by an AI assistant asked to trace a request end to end.