2329 Kubernetes 9cfcbaab

Kubernetes Patterns

Best practices and anti-patterns for Kubernetes deployments, resource configuration, and cluster management.

Purpose

• Ensure reliable, scalable Kubernetes deployments
• Prevent resource exhaustion and scheduling failures
• Establish security and observability patterns

Core Patterns

Pattern 1: Resource Requests and Limits

When to use: Every production container deployment.

Implementation:

apiVersion: apps/v1
kind: Deployment
metadata:
  name: api-service
spec:
  template:
    spec:
      containers:
        - name: api
          image: api:v1.2.3
          resources:
            requests:
              memory: "256Mi"
              cpu: "250m"
            limits:
              memory: "512Mi"
              cpu: "500m"

Benefits:

• Predictable scheduling
• Protection against resource exhaustion
• Fair resource sharing across pods

Pattern 2: Health Probes

When to use: All production deployments.

Implementation:

containers:
  - name: api
    livenessProbe:
      httpGet:
        path: /health
        port: 8080
      initialDelaySeconds: 30
      periodSeconds: 10
      failureThreshold: 3
    readinessProbe:
      httpGet:
        path: /ready
        port: 8080
      initialDelaySeconds: 5
      periodSeconds: 5
      successThreshold: 1

Benefits:

• Auto-restart unhealthy pods
• Traffic only to ready pods
• Graceful startup handling

Pattern 3: Pod Disruption Budgets

When to use: Production services requiring high availability.

Implementation:

apiVersion: policy/v1
kind: PodDisruptionBudget
metadata:
  name: api-pdb
spec:
  minAvailable: 2  # or maxUnavailable: 1
  selector:
    matchLabels:
      app: api

Benefits:

• Controlled disruption during upgrades
• Maintains minimum availability
• Safe cluster maintenance

Anti-Patterns

Anti-Pattern 1: No Resource Limits

Bad Example:

containers:
  - name: api
    image: api:latest
    # No resource constraints!

Good Example:

containers:
  - name: api
    image: api:v1.2.3
    resources:
      requests:
        memory: "256Mi"
        cpu: "250m"
      limits:
        memory: "512Mi"
        cpu: "500m"

Anti-Pattern 2: Using :latest Tag

Bad Example:

containers:
  - name: api
    image: api:latest
    imagePullPolicy: Always

Good Example:

containers:
  - name: api
    image: api:v1.2.3
    # Or for maximum reproducibility:
    # image: api@sha256:abc123...

Anti-Pattern 3: Missing Health Probes

Bad Example:

containers:
  - name: api
    image: api:v1.2.3
    ports:
      - containerPort: 8080
    # No health probes!

Good Example:

containers:
  - name: api
    image: api:v1.2.3
    ports:
      - containerPort: 8080
    livenessProbe:
      httpGet:
        path: /health
        port: 8080
      initialDelaySeconds: 30
      periodSeconds: 10
    readinessProbe:
      httpGet:
        path: /ready
        port: 8080
      initialDelaySeconds: 5
      periodSeconds: 5

Anti-Pattern 4: Running as Root

Bad Example:

containers:
  - name: api
    image: api:v1.2.3
    # Runs as root by default!

Good Example:

containers:
  - name: api
    image: api:v1.2.3
    securityContext:
      runAsNonRoot: true
      runAsUser: 1000
      readOnlyRootFilesystem: true
      capabilities:
        drop:
          - ALL

Anti-Pattern 5: Hardcoded ConfigMaps/Secrets

Bad Example:

containers:
  - name: api
    env:
      - name: DATABASE_URL
        value: "postgres://user:password@db:5432/app"
      - name: API_KEY
        value: "sk-secret-key-here"

Good Example:

containers:
  - name: api
    envFrom:
      - configMapRef:
          name: api-config
      - secretRef:
          name: api-secrets

Anti-Pattern 6: Single Replica in Production

Bad Example:

spec:
  replicas: 1  # Single point of failure!

Good Example:

spec:
  replicas: 3
  template:
    spec:
      affinity:
        podAntiAffinity:
          preferredDuringSchedulingIgnoredDuringExecution:
            - weight: 100
              podAffinityTerm:
                topologyKey: kubernetes.io/hostname
                labelSelector:
                  matchLabels:
                    app: api

Validation Checklist

Pre-Implementation

• Review cluster resource capacity
• Check existing deployments for patterns
• Understand application resource needs

Implementation

• Resource requests and limits set
• Specific image tags (no :latest)
• Liveness and readiness probes configured
• Security context with non-root user
• ConfigMaps/Secrets for configuration
• Multiple replicas with anti-affinity
• PodDisruptionBudget defined

Post-Implementation

• Pods schedule successfully
• Health checks pass consistently
• Rolling updates work without downtime
• kubectl get events shows no warnings

Quick Reference