dotnet-monitor
dotnet-monitor copied to clipboard
Add support for kubectl debug scenarios
It is currently possible to cross file namespace boundaries in Aks using kubectl debug. I.e.
kubectl debug $pod --image mcr.microsoft.com/dotnet/monitor:7 --env Logging__Console__FormatterName=simple --target $app --share-processes --image-pull-policy Always -it -- /app/dotnet-monitor collect --no-auth --urls http://localhost:52323 --metrics false
It is necessary to prefix /proc/<pid>/<user>/tmp
to the IpcRoot location as well as the default dump storage path. For dotnet-monitor 8, the image will not work against root apps since it still uses its default non-root security context.
We can also potentially support dotnet-monitor running as a DaemonSet with a host mounted /proc