Production-ready Kubernetes deployment
Deployment, Service, HPA, PDB and NetworkPolicy with a hardened security context.
IntermediateCOMMUNITY ANALYSISKubernetesKustomize
Generate Kubernetes manifests for a stateless HTTP service named {name} on port {port}.
Include Deployment, Service, HorizontalPodAutoscaler, PodDisruptionBudget and a default-deny NetworkPolicy.
Require: resource requests and limits, readiness and liveness probes, runAsNonRoot, readOnlyRootFilesystem, seccompProfile RuntimeDefault, automountServiceAccountToken false.
Output a Kustomize base and overlays for dev and prod, then a short table explaining each securityContext field.Use Case
Shipping a new stateless service to a cluster that enforces restricted Pod Security Admission.
Expected Result
A Kustomize base plus dev/prod overlays that pass `kubeconform -strict`.
Related recipe