I upgraded the OS packages on all nodes
1. Cordoned and Drained a node
2. apt update && apt upgrade
3. reboot
4. repeat on next node
the last one was rke-node04-prd
now this is the node with the least load
I would still like to balance the workloads to it
edit: all other nodes have a higher cpu usage now because elasticsearch is reindexing