Files
k8s-manifests/deployments/base/kustomization.yaml
Greg Hendrickson ef86c1a6c7 feat(deployments): add PSS-restricted base template with Kustomize
- Namespace with Pod Security Standards restricted enforcement
- Deployment with full security context (non-root, read-only fs, no caps)
- Resource limits, health probes, topology spread
- Service and comprehensive README
- Kustomize structure for overlay-based customization
2026-01-31 18:01:18 +00:00

16 lines
291 B
YAML

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- namespace.yaml
- deployment.yaml
- service.yaml
labels:
- pairs:
app.kubernetes.io/managed-by: kustomize
includeSelectors: false
# Default namespace for all resources
namespace: app-production