Debug profiles in Kubernetes 1.27

Probably one of the smallest improvements made in the latest Kubernetes/kubectl version 1.27. It introduces the option of defining the profile in the debug option of kubectl. Nothing really fancy so some time ago I was writing about the option of the alternative access to the Kubernetes node. Now it can be simplified by using the kubectl debug with the netadmin profile:

$ kubectl debug node/<node> -it --image ubuntu --profile=netadmin -- bash

which lets you get privileged access to the node. Unfortunately, the profiles aren’t organized well, because ie. the netadmin profile doesn’t mount the host files to the container. More about it.

comments powered by Disqus

powered by Hugo and Noteworthy theme