Hands-on lab scripts for "When Kubernetes Restarts Your Pod — And When It Doesn't" — ConfigMap sync, Secret rotation, image updates, Istio xDS, in-place resize (K8s 1.35 GA), and Stakater Reloader

Production-grade secret management on EKS — HashiCorp Vault (HA Raft + AWS KMS Auto-Unseal + IRSA), External Secrets Operator, and Stakater Reloader wired end-to-end. Zero static credentials, automatic secret rotation, zero-downtime rolling restarts.