Lightning Talk - Ephemeral Containers on Kubernetes in 10 MInutes.pdf

Kubernetes Ephemeral Containers - When you need them and how to use them to troubleshoot hardened containers

2. About Me
Natan Yellin (LinkedIn, twitter)
CEO of Robusta.dev
For multi-cluster Kubernetes & Prometheus 
Open Source projects
4

3. Ephemeral Containers
5

5. Troubleshoot pods
7

6. 8

7. 9

8. Containers missing the cmds we need
ping
netstat
gdb
jattach
strace/ltrace
py-spy
10

9. What are Ephemeral Containers
Special containers that can be attached at
runtime to already-running pods
Created from the cli (kubectl debug) instead of
yaml
You can have hardened containers and
troubleshoot them too
11

10. Demo
12

11. How it works
A linux containers is just one or more
processes on a node
... that have some isolated resources (cgroups,
linux namespaces, etc)
Creating a debug container starts a new
process on the node and sets a few settings
so the process has access to the same
resources
13

12. If you have another 10 minutes
Blog from Ivan Velichko (iximiuz) with all the
gotchas and how to work around them
Read the KEP
14

13. Questions
15