dotnet-monitor icon indicating copy to clipboard operation
dotnet-monitor copied to clipboard

Add support for kubectl debug scenarios

Open wiktork opened this issue 1 year ago • 1 comments

It is currently possible to cross file namespace boundaries in Aks using kubectl debug. I.e.

kubectl debug $pod --image mcr.microsoft.com/dotnet/monitor:7 --env Logging__Console__FormatterName=simple --target $app --share-processes --image-pull-policy Always -it -- /app/dotnet-monitor collect --no-auth --urls http://localhost:52323 --metrics false

It is necessary to prefix /proc/<pid>/<user>/tmp to the IpcRoot location as well as the default dump storage path. For dotnet-monitor 8, the image will not work against root apps since it still uses its default non-root security context.

wiktork avatar Jul 23 '23 05:07 wiktork

We can also potentially support dotnet-monitor running as a DaemonSet with a host mounted /proc

wiktork avatar Nov 21 '23 18:11 wiktork