tag: #debugging

Distroless images ship no shell, so kubectl exec fails the moment you need it. kubectl debug injects an ephemeral container with its own tools into the running pod, shares the target's namespaces, and lets you read the app's filesystem through /proc — no restart, no debug build. Here it is end to end on a distroless nginx.

Production debugging is not a data-gathering problem but a reading problem, because most systems have already written down what is broken if you know where to look.