Troubleshooting in Kubernetes Pods - Even with Distroless Containers

The recommendations for high container security stipulate, among other things, that the attack vectors within the container should be minimized. Building on this, several efforts have emerged: so-called distroless images or minimalistic images. These types of images pose new challenges for developers. How can I find errors in the Docker container or in my application if the container no longer contains any suitable tool? This is where the so-called ephemeral containers come to the rescue. The session starts with a short introduction to container security (distroless, minimalistic images, best practices) and ephemeral containers. Several example scenarios show the possibilities for debugging a Quarkus container in Kubernetes, despite the minimalistic image: starting with the use of an ephemeral container and remote debugging to remote development mode. The aim of the session should be to present a toolbox that can be used to analyze different error scenarios, despite container security.

DevOpsCon:
Troubleshooting in Kubernetes Pods - Even with Distroless Containers