kill-host-pods.py: filter pods by node

[petrutlucian94]

Starting with k8s 1.32, AuthorizeNodeWithSelectors is enabled by default: https://kubernetes.io/docs/reference/access-authn-authz/node/

If the rbac microk8s addon is enabled, the kube-apiserver will run with "--authorization-mode=RBAC,Node". This means that kublets (system:node:$node) will no longer be allowed to access pods that reside on other nodes.

For this reason, the "kill-host-pods.py" script is now getting access denied errors:

  Error from server (Forbidden): pods is forbidden:
  User "system:node:myhostname" cannot list resource "pods" in API group ""
  at the cluster scope: can only list/watch pods with spec.nodeName field selector

As suggested by the error message, we'll solve it by filtering pods by the node name.

Fixes: #4802

Summary

Changes

Testing

Possible Regressions

Checklist

• Read the contributions page.
• Submitted the CLA form, if you are a first time contributor.
• The introduced changes are covered by unit and/or integration tests.

Notes

[berkayoz]

LGTM overall, I'll run some manual tests and merge if all is well

[petrutlucian94]

LGTM overall, I'll run some manual tests and merge if all is well

Thanks! fwiw, I used the following to trigger a pod cleanup:

sudo touch /var/snap/microk8s/current/var/lock/snapdata-mounts-need-reload

[berkayoz]

LGTM