<p>I have a container with some SYS_ADMIN capabilities, and I'm having trouble killing the pod, and am wondering what is the best way to deal with these reluctant containers?</p>

<pre><code>- image: headless-chrome
  securityContext:
   capabilities:
     add:
     - SYS_ADMIN
</code></pre>

<p>Sometimes a pod will zombify, even without privileged status. In order to kill a zombified pod, first try the following:
<code>
     kubectl delete pod &lt;&lt;PODNAME&gt;&gt; --grace-period=0 --force
</code>
...where <code>&lt;&lt;PODNAME&gt;&gt;</code> is the name of the offending pod. I have to do that from time to time, even with v1.7.X.</p>

<p>If that doesn't work, then try to first <code>kubectl drain</code> the node, find the Docker container (<code>docker ps</code>), delete it (<code>docker rm</code>), restart the Docker service and the Kubelet service, then <code>kubectl uncordon</code> the node. I've only had to do that once, and not since v1.6.X.</p>
