> So, being dogmatic about "the host should not have any tools installed" is good and all Less dogma, more the lived experience that letting people log into ho

> So, being dogmatic about "the host should not have any tools installed" is good and all Less dogma, more the lived experience that letting people log into hosts ends badly. Though I grant there's a cost/benefit both ways and perhaps there could be edge cases. > but how do you debug this scenario without tools on the host? Cordon the node, evict any one pod to free up just enough room, and then schedule your debug pod with a toleration so it ignores the error condition? I confess I've never had to do this but it seems workable.