Klustered 20

Russell and Marek return to break two clusters. Russell hides a recompiled kubectl, a rogue process killing deployments, a CoreDNS ConfigMap edit, and a kubelet that swaps images. Marek drops the kubelet port with UFW and removes the scheduler manifest.