Kubernetes container debugging
There’s a raft of container guidance (mostly ignored for convenience) that applies equally to Kubernetes. I need to do a better job in not running containers as root, but I do a decent job (particularly with Golang) in running (dumb-init and) one process per container.