What kubectl debug doesn't tell you: The silent evidence gap

2026-05-22

Kubernetes lacks retention of debug session data, such as exit codes or duration, after a pod's state changes, impacting incident response and compliance. This API design limitation, affecting Kubernetes 1.25+ and ephemeral containers, can be addressed by real-time capture tools and external logging, with a potential solution from SIG Node or SIG Instrumentation.