Kubernetes Pod Design

Kubernetes Pod Design

Designing Kubernetes pod configurations — from resource requests/limits through liveness/readiness probes, init containers, and pod security contexts.

When to Use

• Configuring Kubernetes pods for production
• Setting resource requests and limits
• Implementing health check probes
• Pod security and service mesh sidecars

Pod Design Patterns

apiVersion: v1
kind: Pod
metadata:
  name: production-pod
spec:
  securityContext:
    runAsNonRoot: true
    seccompProfile: { type: RuntimeDefault }
  initContainers:
  - name: init-db
    image: busybox
    command: ['sh', '-c', 'until nc -z db-service 5432; do sleep 1; done']
  containers:
  - name: app
    image: app:1.0
    resources:
      requests: { cpu: 250m, memory: 256Mi }
      limits:   { cpu: 500m, memory: 512Mi }
    livenessProbe:
      httpGet: { path: /healthz, port: 8080 }
      initialDelaySeconds: 30
    readinessProbe:
      httpGet: { path: /ready, port: 8080 }
      initialDelaySeconds: 5

Verification Checklist

• Resource requests and limits set for all containers
• Liveness and readiness probes configured
• Security context (non-root, read-only rootfs)
• Init containers for setup tasks
• Pod anti-affinity for HA
• Termination grace period configured