Can I put a pod back inside, with SSH, and use it to kubectl exec my way into an interactive state?
I get why the "outside" has no SSH, but I would not preclude the existence of a shell inside, busybox, you're back in the land of the UNIX living and all that entails.
You absolutely could. The rootfs is read only so what you can do is limited. Kubernetes also landed support for ephemeral containers in 1.16: https://github.com/kubernetes/enhancements/issues/277. It still needs more work but the idea is that you will be able to attach a debug container (you image of choice) to a pod on the fly.
Comments
Can I put a pod back inside, with SSH, and use it to kubectl exec my way into an interactive state?
I get why the "outside" has no SSH, but I would not preclude the existence of a shell inside, busybox, you're back in the land of the UNIX living and all that entails.
You absolutely could. The rootfs is read only so what you can do is limited. Kubernetes also landed support for ephemeral containers in 1.16: https://github.com/kubernetes/enhancements/issues/277. It still needs more work but the idea is that you will be able to attach a debug container (you image of choice) to a pod on the fly.