When PID 1 in a container isn't your workload, Kubernetes only sees what the wrapper reports. Where that goes wrong and how to make process death visible.

Plan for losing Rancher: create an emergency service account and kubeconfig so you can still reach the Kubernetes API when Rancher is down.