mirror of
https://github.com/magnus919/agent-skills.git
synced 2026-09-15 13:36:35 +03:00
1.1 KiB
1.1 KiB
Advanced debugging
Ephemeral containers
Use kubectl debug when a running Pod needs inspection without restarting the application. Select an appropriate debug profile, target a container only when necessary, and treat the resulting shell/output as potentially sensitive.
kubectl debug pod/NAME -n NAMESPACE -it --image=busybox:1.36 --target=CONTAINER
kubectl debug pod/NAME -n NAMESPACE --copy-to=NAME-debug --share-processes --image=busybox:1.36
Do not add privileged capabilities, host namespaces, or host mounts as a reflex. Explain why the chosen profile requires them.
Must-gather pattern
Collect context/version, readiness, nodes, system workloads, CRDs, events, resource conditions, selected logs, policy objects, and provider/distribution markers. Bound every collection, omit Secrets and raw kubeconfig, and write a manifest of commands and timestamps.