What is Kubernetes Pod Ephemeral Container Debugging?

Question

Accepted Answer

**Ephemeral Containers** — inject debug containers into running Pods.

```bash
# Add debug container
kubectl debug -it my-pod --image=busybox:1.36 --target=app

# Debug with specific profile
kubectl debug -it my-pod \
  --image=nicolaka/netshoot \
  --target=app \
  -- /bin/bash

# Debug node
kubectl debug node/node-1 -it --image=busybox:1.36

# Add ephemeral container via patch
kubectl patch pod my-pod -p '{"spec":{"ephemeralContainers":[{
  "name":"debugger",
  "image":"busybox:1.36",
  "stdin":true,
  "tty":true
}]}}'

# Attach to ephemeral container
kubectl attach -it my-pod -c debugger

# Copy files from ephemeral container
kubectl cp my-pod:/app/logs/error.log ./error.log -c debugger

# View ephemeral container logs
kubectl logs my-pod -c debugger
```

```yaml
# Pod with ephemeral container
apiVersion: v1
kind: Pod
metadata:
  name: my-pod
spec:
  containers:
  - name: app
    image: myapp:latest
  ephemeralContainers:
  - name: debugger
    image: busybox:1.36
    stdin: true
    tty: true
    targetNamespace: ""
```

**Debug Tools:**
- busybox: basic utilities.
- nicolaka/netshoot: network debugging.
- alpine: minimal Linux.

**Use cases:**
- Debug production issues.
- Inspect running processes.
- Network debugging.
- File inspection.

DevOps: What is Kubernetes Pod Ephemeral Container Debugging?