We're moving production workloads to shell-less, distroless images such as Chainguard, so the images contain no shell or troubleshooting tools. Ephemeral containers through kubectl debug work technically, but…
We're moving production workloads to shell-less, distroless images such as Chainguard, so the images contain no shell or troubleshooting tools. Ephemeral containers launched with kubectl debug are the…
I'm considering moving our services to distroless images. The smaller attack surface and reduced scanner noise are appealing, but these images usually lack a shell, package manager, and…