container escape Karpenter spot instances termination handler PersistentVolume persistentVolumeReclaimPolicy HPA Pod fieldPath Volume Environment redirect K3s upgrade privileged NetworkPolicy bash ps longhorn cluster autoscaler Secret ExternalSecret IRSA ServiceAccount ASCP QoD externalDNS Ingress k3s raspberry pi etcd example API server kubectl drain evict uncordon kubeconfig config view logs admission controller hook postStart preStop krew deprecations StorageClass gp3 get-all taints securityGroup probe readinessProbe livenessProbe tolerations patch explain MutatingWebhook affinity podAntiAffinity Deployment Job startupProbe RollingUpdate Recreate PDB emptyDir socat netstat ss autoscale Kubeconfig ConfigMap initContainers DNS tree DaemonSet stern tail LimitRange resource limits restartPolicy system-upgrade-controller rolling update history undo Volumes EBS awsElasticBlockStore change-cause set image imperative port-forward hostAliases imagePullPolicy metrics-server Service volumeMounts overlay agent nodes declarative ELB ALB HTTPS alpine package nodeSelector scheduler context kubie api-versions events multiple containers selector SecretKeyRef ReplicaSet NodePort Pod restart rollout deployment nginx-contoller ValidatingWebhookConfiguration error recovery httpHeaders security uid securityContext exec interactive LoadBalancer IAM scale replicas minikube nodeName troubleshooting externalName namespace Cronjob multinode template yaml unused-volumes diff