# Kubernetes Manifests

> K8s manifest rules for Fawkes — labels, limits, security context. Load when editing platform/ or charts/. Use when this capability is needed.

- Skill: `tomevault-io/kubernetes-manifests` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add tomevault-io/kubernetes-manifests`
- Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/kubernetes-manifests/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: DevOps & Infra
- Author: tomevault-io (https://skillmd.com/u/tomevault-io)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/tomevault-io/kubernetes-manifests

---


# K8s Manifests — Fawkes

Every deployment needs:

- Labels: `app`, `version`, `component`, `managed-by: fawkes`
- Resource limits (requests + limits)
- Security context: `runAsNonRoot: true`, `readOnlyRootFilesystem: true`
- Liveness + readiness probes
- No `latest` image tags

```yaml
# Standard container block
securityContext:
  runAsNonRoot: true
  runAsUser: 1000
  readOnlyRootFilesystem: true
  allowPrivilegeEscalation: false
resources:
  requests: { cpu: 100m, memory: 128Mi }
  limits: { cpu: 500m, memory: 512Mi }
```

Namespaces: `argocd`, `fawkes-platform`, `fawkes-observability`, `fawkes-cicd`, `fawkes-security`, `fawkes-apps`

Validate:

```bash
python -c "import yaml; yaml.safe_load(open('FILE'))"
grep -L "managed-by: fawkes" platform/apps/*/deployment.yaml
grep -L "limits:" platform/apps/*/deployment.yaml
```

---
> Source: [paruff/fawkes](https://github.com/paruff/fawkes) — distributed by [TomeVault](https://tomevault.io).
<!-- tomevault:4.0:skill_md:2026-06-15 -->