Kubectl debug - allow to specify image pull secret

[mb-stx]

This is a Feature Request

What would you like to be added
Add new option to kubectl debug command to be able to specify image pull secret. Currently (v 1.31) there is only the option to specify image and image pull policy, but image pull secret is missing.

Why is this needed
When running in air-gapped environments images are pulled from internal repositories often by using credentials. In this case kubectl debug command is not usable, because image is not publicly available and it fails with ImagePull error. In general this will allow to debug pods in more restricted environments.

Comments

Thanks!

[k8s-ci-robot]

This issue is currently awaiting triage.

SIG Docs takes a lead on issue triage for this website, but any Kubernetes member can accept issues by applying the triage/accepted label.

The triage/accepted label can be added by org members by writing /triage accepted in a comment.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[dipesh-rawat]

/transfer kubernetes

(Doesn't look like a docs issue)

[mb-stx]

/sig cli

[SayakMukhopadhyay]

/area kubectl

[sgaist]

@chengjoey to the best of my knowledge, it does not belong to the API. Image pull secrets are at the pod level not the container so in this case it's rather a cli issue.

[chengjoey]

@chengjoey to the best of my knowledge, it does not belong to the API. Image pull secrets are at the pod level not the container so in this case it's rather a cli issue.

oh Yes, I mixed up the fields. I will delete my comment to avoid any impact. Thank you for your reply.

[ardaguclu]

/transfer kubectl

[ardaguclu]

I dropped my comments about this issue in kubernetes/kubernetes#128061 (comment). I'll mark triage/accepted with a note that this requires an agreement on the KEP before any PR.

/triage accepted
/priority backlog