There's no amount of money you could pay me to do this with Kubernetes. Like, you could offer me double my salary, and I'd laugh.
The only answer that makes any sense here is Ansible.
Arguments:
Way simpler
Can fall back to using plain SSH if things goes really wrong
No vendor lock in
One less bit of technology in the mix to go wrong
Very boring, which means very reliable