3 ms·
There is probably no nsenter equivalent for "kubectl exec thepod -- /bin/sh" if you can't ssh into the node.
by xuhu 5y ago
There is probably no nsenter equivalent for "kubectl exec thepod -- /bin/sh" if you can't ssh into the node.
- gizdan 5y agoMinimal containers shouldn't need that though. Your logs should tell you enough about the application it's running. K8s (get/describe) should tell you about the lifecycle of the pod. Lastly something like "dive" should tell you all you need about the image's file layout.
- gouggoug 5y ago> Minimal containers shouldn't need that though. In theory. In practice this is only rarely the case.
- mook 5y agoFor non-production clusters, you may be able to play with ephemeral containers† if turning on the feature gate seems reasonable. † https://kubernetes.io/docs/tasks/debug-application-cluster/debug-running-pod/#ephemeral-container https://kubernetes.io/docs/tasks/debug-application-cluster/d...