K8S Manifests

Skill: Kubernetes Manifests & Helm

When to load

When writing K8s YAML, designing Helm charts, setting resource limits, configuring probes, or reviewing pod security.

Production Deployment Template

spec:
  replicas: {{ .Values.replicaCount }}  # Min 2 for Tier 1
  template:
    spec:
      securityContext:
        runAsNonRoot: true
        runAsUser: 1000
      terminationGracePeriodSeconds: 60
      containers:
        - name: api
          image: "{{ .Values.image.repository }}@{{ .Values.image.digest }}"
          resources:
            requests: { cpu: 100m, memory: 128Mi }
            limits:   { cpu: 500m, memory: 512Mi }
          readinessProbe:
            httpGet: { path: /health/ready, port: http }
            initialDelaySeconds: 10
            periodSeconds: 5
          livenessProbe:
            httpGet: { path: /health/live, port: http }
            initialDelaySeconds: 30
            periodSeconds: 15
      topologySpreadConstraints:
        - maxSkew: 1
          topologyKey: topology.kubernetes.io/zone
          whenUnsatisfiable: DoNotSchedule

HPA

spec:
  minReplicas: 2
  maxReplicas: 20
  metrics:
    - type: Resource
      resource: { name: cpu, target: { type: Utilization, averageUtilization: 70 } }

PodDisruptionBudget (Required for Tier 1)

spec:
  minAvailable: 1
  selector:
    matchLabels: {{ include "app.selectorLabels" . | nindent 6 }}