Kubernetes manifest best practices

A pre-merge checklist for Deployments and Services: health, resources, security, config and release safety.

STEP 1 OF 12

Pinned image tag or digest, never :latest

securityContext + resources

YAML

1containers:

2 - name: api

3 image: registry.example.com/api:1.4.2

4 resources:

5 requests: { cpu: 100m, memory: 256Mi }

6 limits: { memory: 512Mi }

7 securityContext:

8 runAsNonRoot: true

9 readOnlyRootFilesystem: true

10 allowPrivilegeEscalation: false

11 capabilities: { drop: [ALL] }