How are you auditing and recording kubectl debug sessions in production?
We're moving production workloads to shell-less, distroless images such as Chainguard, so the images contain no shell or troubleshooting tools. Ephemeral containers through kubectl debug work technically, but…