mirror of https://github.com/ghndrx/k8s-manifests.git synced 2026-02-10 06:45:09 +00:00

Go to file

Greg Hendrickson ef86c1a6c7 feat(deployments): add PSS-restricted base template with Kustomize

- Namespace with Pod Security Standards restricted enforcement
- Deployment with full security context (non-root, read-only fs, no caps)
- Resource limits, health probes, topology spread
- Service and comprehensive README
- Kustomize structure for overlay-based customization

2026-01-31 18:01:18 +00:00

deployments/base

feat(deployments): add PSS-restricted base template with Kustomize

2026-01-31 18:01:18 +00:00

README.md

feat: initial k8s manifests library structure

2026-01-31 06:53:14 +00:00

README.md

Kubernetes Manifests Library

Production-ready Kubernetes manifests with security best practices, resource limits, and comprehensive examples.

Structure

├── deployments/       # Deployment patterns (rolling, blue-green, canary)
├── services/          # Service types and configurations
├── ingress/           # Ingress controllers and rules
├── configmaps/        # Configuration management
├── secrets/           # Secret management patterns
├── networkpolicies/   # Network isolation
├── rbac/              # Role-based access control
└── monitoring/        # Prometheus, alerts, ServiceMonitors

Features

✅ Security contexts and pod security standards
✅ Resource requests/limits
✅ Liveness/readiness probes
✅ Network policies for isolation
✅ RBAC least-privilege patterns
✅ Kustomize overlays for environments

Quick Start

kubectl apply -k deployments/base

License

MIT