Document how to isolate a node for post-mortem debugging, preventing disruption or termination

[aaronborden-rivianvw]

Description

For security compliance and general debugging, occasionally we cordon a node and then might need to connect to the node to perform some post-mortem analysis. It's important that the node not be deleted due to consolidation or node expiration.

What is the best way to accomplish this?

• karpenter.sh/do-not-disrupt=true annotation on the node?
• adding a custom finalizer to prevent termination?

[engedaam]

The team documents all the ways to block voluntary disruption. We do call out that karpenter.sh/do-not-disrupt=true will block a single node from voluntary disruption, however keep in mind involuntary disruption can not be prevented. Please feel free to open a PR on where we might lack documentation