I am deploying dagster with Helm on GKE. I’m trying to debug some stuck asset backfill jobs, and I’d like to use tracing tools (strace, py-spy, etc). To do that, I plan to exec into the running pods and run tracing tools, but I’ll need CAP_SYS_PTRACE on the kernel. Is there a way to set the Linux capabilities of the pods when using the K8sRunLauncher and helm?

Hi Spencer - you can do this in the helm chart with runK8sConfig:

k8sRunLauncher:
  runK8sConfig:
    containerConfig:
      securityContext:
        capabilities:
          add:
            - SYS_PTRACE

Aha, several layers of indirection I was missing there. Thanks!

yeah, it's a lot

thats life in yaml-land