Hardening Kubernetes: How to Block `kubectl debug node` from Breaking Your Cluster Matrix

You've done everything right. You're hardening your Kubernetes cluster, meticulously setting runAsNonRoot: true, and applying readOnlyRootFilesystem: true across all your workloads. Your pods are locked down tight.

And then, you run this one command:

kubectl debug node/my-node-name -it --image=ubuntu

Enter fullscreen mode

Exit fullscreen mode