By: Ammar Nanjiani <ammar.nanjiani@gmail.com>
fix(k3s): fail closed on Marinara writer-lease drain Give Marinara 120 seconds to terminate. The preStop hook signals PID 1, waits for .writer-lease to disappear, and stays until PID 1 exits. Add a one-replica PodDisruptionBudget so unattended drains cannot evict the only writer. Run the shared PDB-aware drain before Comin requests reboot. Use a 180-second drain timeout and propagate failure. Refuse an existing operator cordon. Uncordon after a failed preflight only when this script created the cordon. Allow systemd 240 seconds for the drain and cleanup. Do not delete application writer leases automatically.