I think I found the answer to the second question: https://kubernetes.io/docs/concepts/cluster-administration/node-shutdown/
> Note that by default, both configuration options described below, shutdownGracePeriod and shutdownGracePeriodCriticalPods, are set to zero, thus not activating the graceful node shutdown functionality.
So, we need to see if we are able to enable this functionality, and that should ensure that our `system-node-critical` services are terminated after the other services.
I am not clear what happens if the gracefulGracePeriod is reached but there are still running pods (or if the configured shutdown grace period for the individual pods is greater than the shutdownGracePeriod). Does kubelet force kill the pods, or does it proceed to critical pod termination?
thanks,
pol