[dixie_land]

this is not true, `kubectl debug` attaches to the namespace of a container of your choosing (`--target` argument). You don't have to enable process namespace sharing at the pod level

[kunley]

Last time I've checked, kubectl debug would not attach if namespace sharing wasn't enabled in the first place. Has it changed? What k8s version are you using?

PS. Even without checking again, it would be surprising if it changed. Even the official documentation is mentioning that this is needed