Start here. This is the direct spoken answer to practice first.
Why this question matters
I would first identify whether the image failed to start, the process exited, a probe triggered restarts, or the platform killed it. Those are different failure classes and leave different evidence.
I inspect deployment events and instance status for image-pull, scheduling, exit code, termination reason, and restart count. If the process ran, I read current and previous-instance logs because a restart may replace the visible stream. I compare image digest, command, configuration, secrets, ports, and architecture with the last healthy revision. OOMKilled points toward the memory limit and workload, while probe failures require checking both endpoint behavior and probe timing.