I recommend you if you are using nginx ingress you can configure it with:

enable-vts-status: "true"

This will give you a bunch of prometheus metrics for each pod that has on ingress. The metric names start with nginx_upstream_

In case it is the cronjob creating the spikes, install node-exporter daemonset and check the metrics container_fs_