Prepare this node for maintenance?

Situation

Node-5 needs a kernel patch, and SRE wants to stop new workload placement before draining pods.

Environment

Six-node production cluster. Node-5 is a worker node in the general application pool, and replacement capacity is available before the drain step.

Select suspicious lines in the terminal to flag them before submitting your verdict.

pending review

kubectl cordon node-5 && kubectl taint nodes node-5 maintenance=true:NoSchedule && kubectl get pods --all-namespaces --field-selector spec.nodeName=node-5 && kubectl get nodes -l node-role.kubernetes.io/worker