Use kubectl auth can-i to test the exact Kubernetes RBAC question
Kubectl auth can-i asks authorization for a verb, resource, namespace, and optional impersonated identity; it does not prove admission or application behavior.
Use kubectl debug without replacing the failing pod too early
Kubectl debug can add an ephemeral container, create a modified pod copy, or create a node debugging pod; each mode has a different evidence and privilege boundary.
Debug kubectl port-forward from API tunnel to pod listener
Kubectl port-forward asks the API path to carry a local TCP connection to a pod or selected resource; the target process must still listen on the forwarded pod port.
Cordon and drain a Kubernetes node without violating availability
Cordon blocks new scheduling while drain evicts eligible pods through the eviction API; controllers and disruption budgets determine replacement behavior.
Create a Kubernetes image pull secret without exposing registry credentials
An imagePullSecret stores registry authentication for the kubelet to fetch images; namespace, ServiceAccount attachment, and secret type determine whether it is used.
Design a PodDisruptionBudget around real serving capacity
A PodDisruptionBudget limits voluntary disruptions for selected healthy pods; it does not create replicas or protect against involuntary node failure.
Use Kubernetes priority and preemption without starving ordinary workloads
PriorityClass affects scheduling order and may allow a pending high-priority pod to preempt lower-priority pods when no feasible node has capacity.
Use kubectl rollout undo with image, config, and schema awareness
Rollout undo changes a workload controller to a previous recorded revision; it does not reverse database, external configuration, or irreversible side effects.
Resolve Kubernetes server-side apply conflicts by field owner
Server-side apply tracks which manager owns each field; a conflict means another manager currently owns a different value for the field being applied.
Spread Kubernetes pods across failure domains without making them unschedulable
Topology spread constraints compare matching pod counts across eligible domains and can reject scheduling or permit skew depending on whenUnsatisfiable.
Kubernetes ConfigMap changed but the pod did not: why
The search intent behind this problem is understanding environment, volume, and application reload behavior.
Kubernetes CrashLoopBackOff: debug the exit before changing the manifest
When finding why a container repeatedly starts and exits, speed comes from ordering the investigation—not from typing more commands.
Kubernetes DNS debugging without restarting CoreDNS first
The search intent behind this problem is isolating pod DNS, service discovery, upstream resolution, and policy.
Kubernetes HPA not scaling: metrics, requests, and stabilization
The search intent behind this problem is diagnosing an autoscaler that ignores visible load.
ImagePullBackOff: fix registry, tag, and credential failures safely
The search intent behind this problem is diagnosing why a Kubernetes node cannot retrieve an image.
Kubernetes Ingress 502 errors: trace ingress to pod
The search intent behind this problem is finding where an ingress-to-service-to-pod request fails.
Kubernetes Job keeps failing: retries, exit codes, and idempotency
The search intent behind this problem is debugging batch work without duplicating side effects.
kubectl logs --previous: the command that explains vanished crashes
The search intent behind this problem is retrieving evidence from the last terminated container.
Kubernetes NetworkPolicy debugging: prove which flow is denied
The search intent behind this problem is isolating ingress, egress, namespace selectors, and DNS.
Kubernetes Node NotReady: kubelet, runtime, network, or pressure?
The search intent behind this problem is determining why the control plane stopped trusting a worker.
Kubernetes OOMKilled: limit breach or node memory pressure?
The search intent behind this problem is distinguishing a container memory-limit kill from host-wide pressure.
Why Kubernetes evicts pods and what to inspect first
The search intent behind this problem is tracing eviction to memory, disk, PID, or ephemeral-storage pressure.
Kubernetes Pod stuck Pending: scheduler, quota, affinity, or storage?
The search intent behind this problem is separating scheduler rejection from image and startup failures.
Kubernetes Pod stuck Terminating: finalizers and graceful shutdown
The search intent behind this problem is finding why deletion cannot complete.