Upgrade Kube-Hetzner Cluster

Safely upgrade an existing kube-hetzner-managed cluster with Terraform/OpenTofu and Kubernetes runtime proof.

Use When

• A user asks to upgrade a live kube-hetzner cluster.
• A module version bump must be applied to an existing cluster.
• k3s or RKE2 should move to a newer channel or explicit version.
• Provider/module state must be reconciled without recreating live nodes.
• The user asks whether the cluster is HA before or during an upgrade.
• The user wants to replace nodes because of suspected compromise, malware, bad host state, server type deprecation, or architecture/capacity migration.

Hard Rules