1KUBERNETES(1)(kubernetes) KUBERNETES(1)(kubernetes)
2Eric Paris Jan 2015
6
9 kubectl debug - Create debugging sessions for troubleshooting workloads
10 and nodes
11
15 kubectl debug [OPTIONS]
16
20 Debug cluster resources using interactive debugging containers.
21 'debug' provides automation for common debugging tasks for cluster ob‐
24 jects identified by resource and name. Pods will be used by default if
25 no resource is specified.
26 The action taken by 'debug' varies depending on what resource is speci‐
29 fied. Supported actions include:
30 • Workload: Create a copy of an existing pod with certain at‐
33 tributes changed, for example changing the image tag to a new
34 version.
35 • Workload: Add an ephemeral container to an already running
37 pod, for example to add debugging utilities without restarting
38 the pod.
39 • Node: Create a new pod that runs in the node's host namespaces
41 and can access the node's filesystem.
42
47 --arguments-only=false If specified, everything after -- will be
48 passed to the new container as Args instead of Command.
49 --attach=false If true, wait for the container to start running,
52 and then attach as if 'kubectl attach ...' were called. Default false,
53 unless '-i/--stdin' is set, in which case the default is true.
54 -c, --container="" Container name to use for debug container.
57 --copy-to="" Create a copy of the target Pod with this name.
60 --env=[] Environment variables to set in the container.
63 --image="" Container image to use for debug container.
66 --image-pull-policy="" The image pull policy for the container. If
69 left empty, this value will not be specified by the client and de‐
70 faulted by the server.
71 -q, --quiet=false If true, suppress informational messages.
74 --replace=false When used with '--copy-to', delete the original
77 Pod.
78 --same-node=false When used with '--copy-to', schedule the copy of
81 target Pod on the same node.
82 --set-image=[] When used with '--copy-to', a list of name=image
85 pairs for changing container images, similar to how 'kubectl set image'
86 works.
87 --share-processes=true When used with '--copy-to', enable process
90 namespace sharing in the copy.
91 -i, --stdin=false Keep stdin open on the container(s) in the pod,
94 even if nothing is attached.
95 --target="" When using an ephemeral container, target processes in
98 this container name.
99 -t, --tty=false Allocate a TTY for the debugging container.
102
106 --as="" Username to impersonate for the operation. User could be a
107 regular user or a service account in a namespace.
108 --as-group=[] Group to impersonate for the operation, this flag
111 can be repeated to specify multiple groups.
112 --as-uid="" UID to impersonate for the operation.
115 --azure-container-registry-config="" Path to the file containing
118 Azure container registry configuration information.
119 --cache-dir="/builddir/.kube/cache" Default cache directory
122 --certificate-authority="" Path to a cert file for the certificate
125 authority
126 --client-certificate="" Path to a client certificate file for TLS
129 --client-key="" Path to a client key file for TLS
132 --cluster="" The name of the kubeconfig cluster to use
135 --context="" The name of the kubeconfig context to use
138 --insecure-skip-tls-verify=false If true, the server's certificate
141 will not be checked for validity. This will make your HTTPS connections
142 insecure
143 --kubeconfig="" Path to the kubeconfig file to use for CLI re‐
146 quests.
147 --match-server-version=false Require server version to match
150 client version
151 -n, --namespace="" If present, the namespace scope for this CLI
154 request
155 --password="" Password for basic authentication to the API server
158 --profile="none" Name of profile to capture. One of
161 (none|cpu|heap|goroutine|threadcreate|block|mutex)
162 --profile-output="profile.pprof" Name of the file to write the
165 profile to
166 --request-timeout="0" The length of time to wait before giving up
169 on a single server request. Non-zero values should contain a corre‐
170 sponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't time‐
171 out requests.
172 -s, --server="" The address and port of the Kubernetes API server
175 --tls-server-name="" Server name to use for server certificate
178 validation. If it is not provided, the hostname used to contact the
179 server is used
180 --token="" Bearer token for authentication to the API server
183 --user="" The name of the kubeconfig user to use
186 --username="" Username for basic authentication to the API server
189 --version=false Print version information and quit
192 --warnings-as-errors=false Treat warnings received from the server
195 as errors and exit with a non-zero exit code
196
200 # Create an interactive debugging session in pod mypod and immediately attach to it.
201 # (requires the EphemeralContainers feature to be enabled in the cluster)
202 kubectl debug mypod -it --image=busybox
203 # Create a debug container named debugger using a custom automated debugging image.
205 # (requires the EphemeralContainers feature to be enabled in the cluster)
206 kubectl debug --image=myproj/debug-tools -c debugger mypod
207 # Create a copy of mypod adding a debug container and attach to it
209 kubectl debug mypod -it --image=busybox --copy-to=my-debugger
210 # Create a copy of mypod changing the command of mycontainer
212 kubectl debug mypod -it --copy-to=my-debugger --container=mycontainer -- sh
213 # Create a copy of mypod changing all container images to busybox
215 kubectl debug mypod --copy-to=my-debugger --set-image=*=busybox
216 # Create a copy of mypod adding a debug container and changing container images
218 kubectl debug mypod -it --copy-to=my-debugger --image=debian --set-image=app=app:debug,sidecar=sidecar:debug
219 # Create an interactive debugging session on a node and immediately attach to it.
221 # The container will run in the host namespaces and the host's filesystem will be mounted at /host
222 kubectl debug node/mynode -it --image=busybox
223
228 kubectl(1),
229
233 January 2015, Originally compiled by Eric Paris (eparis at redhat dot
234 com) based on the kubernetes source material, but hopefully they have
235 been automatically generated since!
236Manuals User KUBERNETES(1)(kubernetes)