kubernetes-specialist

Production-ready Kubernetes manifests require defining resource requests and limits, security contexts, and observability hooks. You can generate complete YAML manifests for Deployments, StatefulSets, and Jobs with proper resource quotas, topology spread constraints, and structured comments explaining each configuration setting.

GitOps workflows using ArgoCD or Flux rely on declarative configuration stored in Git to manage Kubernetes deployments. You can configure drift detection, progressive delivery, and release lifecycle management to synchronize cluster states automatically with your Git repository.

Helm charts should follow best practices by defining proper value schemas, managing dependencies, and utilizing lifecycle hooks. You can generate Helm charts with structured values, hook definitions, and dependency management to standardize deployment configurations across environments.

RBAC policies and Pod Security Standards control cluster access and pod privileges in Kubernetes. You can configure RoleBindings, ClusterRoles, and Secrets management using external-secrets or Sealed Secrets to enforce security best practices and restrict container permissions.

Troubleshooting failing Kubernetes pods involves checking pod affinity, anti-affinity, and topology spread constraints. You can optimize scheduling by configuring HPA or VPA autoscaling, applying resource quotas, and analyzing Prometheus metrics or distributed traces to identify performance bottlenecks.

Kubernetes networking configurations support Services, Ingress controllers, and NetworkPolicies to control traffic flow. You can implement Service Mesh using Istio or Linkerd, configure DNS resolution, and apply NetworkPolicies to restrict pod-to-pod communication across deployments.