Kubernetes Ephemeral Container Debugging

Kubectl-debug is a diagnostic utility for Kubernetes that enables deep inspection of running containerized applications. It functions by dynamically injecting ephemeral sidecar containers into existing pods, allowing users to troubleshoot processes and filesystems without modifying original production images. The tool manages the lifecycle of these diagnostic agents, ensuring they are created on demand and cleaned up automatically after an investigation session concludes. The project distinguishes itself by enabling shared namespace access, which allows diagnostic tools to join the process an

Distroless provides a set of OCI-compliant minimal base images and hardening tools designed to create secure, language-specific execution environments. These images are stripped of non-essential system binaries, shells, and package managers to reduce the container attack surface. The project utilizes upstream-tracked automated patching to monitor operating system releases and generate updated images when security vulnerabilities are addressed. It ensures supply chain integrity through image provenance verification using ephemeral-key digital signatures. The system supports the generation of