kubectl debug node/ puts the node's root filesystem at /host, but the pod isn't privileged, so chroot /host fails unless you add --profile=sysadmin. It also works one node at a time and leaves the pod behind until you delete it. When you need journalctl -u kubelet from every GPU node, what do you run, and who gets to run it?