getting error trying to run strace with kubectl debug mode

 

kubectl debug is quite limited and won't let you add for example, SYS_PTRACE (to run strace on your app). To resolve it, try adding shareProcessNamespace and add SYS_PTRACE in your deployment or pod. 

For example, 

apiVersion: v1

kind: Pod

metadata:

  name: nginx

spec:

  shareProcessNamespace: true

  containers:

  - name: nginx

    image: nginx

  - name: shell

    image: ubuntu

    command: ["sleep", "3600"]

    securityContext:

      capabilities:

        add:

        - SYS_PTRACE

    stdin: true

    tty: true

As you can see, we have a shell container and just runs ubuntu image. You can install strace -p PROCESS-ID since these containers are already sharing processes. 

Also noticed the SYS_PTRACE entry. This will resolve issues with strace permissions.