mirrord lets developers run local processes in the context of their Kubernetes environment. It’s meant to provide the benefits of running your service on a cloud environment (e.g. staging) without actually going through the hassle of deploying it there, and without disrupting the environment by deploying untested code. It comes as a Visual Studio Code extension, an IntelliJ plugin and a CLI tool. You can read more about it here.
mirrord uses your machine's default kubeconfig for access to the Kubernetes API.
Get the extension here.
- Click "Enable mirrord" on the status bar
- Start debugging your project
- Choose pod to impersonate
- The debugged process will be plugged into the selected pod by mirrord
Get the plugin here.
- Click the mirrord icon in the Navigation Toolbar
- Start debugging your project
- Choose a namespace and pod to impersonate
- The debugged process will be plugged into the selected pod by mirrord
You can use either
brew install metalbear-co/mirrord/mirrord
or
curl -fsSL https://raw.githubusercontent.com/metalbear-co/mirrord/main/scripts/install.sh | bash
- Windows isn't currently supported (you can use WSL)
mirrord exec <process command> --target <target-path>
e.g.
mirrord exec node app.js --target pod/my-pod
When you select a pod to impersonate, mirrord launches a pod on the same node as the pod you selected. The new pod is then used to connect your local process and the impersonated pod: it mirrors incoming traffic from the pod to your process, routes outgoing traffic from your process through the pod, and does the same for file reads, file writes, and environment variables. You can read more about it here.
Container run inside the pod launched by mirrord requires additional Linux capabilities:
CAP_NET_ADMIN
andCAP_NET_RAW
- for modifying routing tablesCAP_SYS_PTRACE
- for reading target pod environmentCAP_SYS_ADMIN
- for joining target pod network namespace
However, you can disable any subset of those in the configuration. This will possibly limit mirrord functionalities or even make it unusable in some setups.
MIRRORD_AGENT_DISABLED_CAPABILITIES=CAP_NET_RAW,CAP_SYS_PTRACE mirrord exec node app.js --target pod/my-pod
Our FAQ is available here. If you have a question that's not on there, feel free to ask in our Discussions or on Discord.
Contributions are very welcome. Start by checking out our open issues, and by going through our contributing guide. We're available on Discord for any questions.
Join our Discord Server for questions, support and fun.
We take our community seriously and we are dedicated to providing a safe and welcoming environment for everyone. Please take a few minutes to review our Code of Conduct.