Upgrading a Locked-Down Linux Fleet with Nothing but kubectl

Say you're running a fleet of machines on an immutable operating system — root filesystem read-only,...