Ephemeral debug container

Attach a debug container (netshoot) to a running pod — shares PID/net namespaces

kubectl debug -it <pod> --image=nicolaka/netshoot -n <ns>
tool
k8s-debug27 commands
tags
debugnetworkpods

More k8s-debug commands

  • Node resource usage
    kubectl top nodes

    CPU and memory per node (requires metrics-server)

  • Pod resource usage sorted
    kubectl top pods -A --sort-by=memory

    Memory-sorted pod usage across all namespaces — find the hungry ones

  • Check what's in a ConfigMap
    kubectl get cm <name> -n <ns> -o jsonpath='{.data}'

    Print just the data field; pipe to python -m json.tool for formatting

  • Decode a Secret
    kubectl get secret <name> -n <ns> -o jsonpath='{.data}' | python3 -c "import sys,json,base64; [print(k,'=',base64.b64decode(v).decode()) for k,v in json.load(sys.stdin).items()]"

    Dump and base64-decode all fields in a k8s Secret

  • List all resources in namespace
    kubectl api-resources --verbs=list --namespaced -o name | xargs -I{} kubectl get {} -n <ns> --ignore-not-found

    Enumerate every resource type in a namespace — useful for auditing

all 27 k8s-debug commands