kubernetes-specialist

To create Kubernetes manifests with resource limits and health probes, define declarative YAML for Deployments, StatefulSets, or DaemonSets specifying resource requests, limits, liveness probes, and readiness probes to ensure stable workload scheduling and automated health monitoring.

Configuring least-privilege RBAC and NetworkPolicies in Kubernetes involves applying declarative YAML rules that restrict Role and ClusterRole permissions to exact required actions, while using NetworkPolicies to isolate ingress and egress traffic between specific namespaces and pods.

Yes, you can use GitOps to manage multi-cluster Kubernetes deployments with Helm by defining Helm charts in a Git repository and leveraging CD pipelines through ArgoCD or Flux to automate environment promotion and synchronize cluster states declaratively.

Yes, this approach supports configuring storage with PV, PVC, and CSI drivers by applying declarative manifests that provision PersistentVolumes, bind PersistentVolumeClaims, and define StorageClasses to dynamically manage persistent storage across isolated namespaces.

To harden Kubernetes pod security using Pod Security Standards, apply declarative namespace labels enforcing restricted, baseline, or privileged policies, ensuring workloads run with read-only root filesystems and without unnecessary privilege escalations.