Great job. Another way to avoid this is enable Network policy on cluster or namespace to disallow outgoing connection to instance metadata endpoint.