Finalizers: When and Why

Finalizers prevent resource deletion until cleanup runs.

When

Resource has external dependencies (cloud resources, dns records).

Cleanup before delete.

How

Add finalizer; controller removes after cleanup.

Block delete until finalizer removed.

Avoid

Stuck finalizers. If controller is broken, resource cannot be deleted.

Force-remove finalizer with --grace-period=0.