https://dagster.io/ logo
#ask-community
Title
# ask-community
s

Spencer Nelson

02/22/2023, 10:21 PM
I am deploying dagster with Helm on GKE. I’m trying to debug some stuck asset backfill jobs, and I’d like to use tracing tools (strace, py-spy, etc). To do that, I plan to exec into the running pods and run tracing tools, but I’ll need CAP_SYS_PTRACE on the kernel. Is there a way to set the Linux capabilities of the pods when using the K8sRunLauncher and helm?
d

daniel

02/22/2023, 10:27 PM
Hi Spencer - you can do this in the helm chart with runK8sConfig:
Copy code
k8sRunLauncher:
  runK8sConfig:
    containerConfig:
      securityContext:
        capabilities:
          add:
            - SYS_PTRACE
s

Spencer Nelson

02/22/2023, 10:32 PM
Aha, several layers of indirection I was missing there. Thanks!
d

daniel

02/22/2023, 10:32 PM
yeah, it's a lot
s

Spencer Nelson

02/22/2023, 10:33 PM
thats life in yaml-land
8 Views