Kubetier
  1. Create a PriorityClass with a very high value and preemptionPolicy PreemptLowerPriority.

  2. Create a pod referencing that PriorityClass, with requests large enough that it only fits by evicting a running pod.

  3. The scheduler preempts a lower-priority victim to make room.

  4. This crosses namespaces, because priority is compared node-wide and the scheduler has no notion of which namespace owns the capacity.

  5. The gain is scheduled capacity taken from another team, not credentials or API permissions.

Rights needed:

K8s docs ↗