Kubernetes Best Practices

What this best practices guide is

A practical guide to Kubernetes best practices for people who deploy and run applications on a cluster. It covers writing manifests that stay manageable, setting resource requests and limits, health probes and graceful shutdown, staying available through node drains, Pod Security and secrets, and RBAC and network policies.

It has 6 chapters and 27 practices, each with why it matters, what to do and what to avoid. For developers and platform engineers.

Chapter by chapter

1. Workloads and manifests (5 practices)

How to describe an application so the cluster can manage it: controllers instead of bare Pods, consistent labels, exact image references and manifests kept in version control.

2. Resource requests, limits and scaling (5 practices)

How to tell the scheduler what each container needs, which limits help and which hurt, and how requests feed autoscaling.

3. Health probes and graceful shutdown (5 practices)

How the kubelet decides a container is started, alive and ready, and how to stop a Pod without dropping requests.

4. Availability through rollouts and disruptions (4 practices)

How to keep enough replicas serving while nodes are drained, upgraded or lost, and while new versions roll out.

5. Pod security and secrets (4 practices)

How to make a compromised container less useful to an attacker: Pod Security Standards, a tight security context, fewer service account tokens and careful handling of Secrets.

6. RBAC and network policies (4 practices)

Who can change what in the cluster, and which Pods can talk to which. Least privilege applies to people, service accounts and packets alike.

How it works on Sefism

The guide reads like a short course: a syllabus, then one chapter per page in a focused reader, with a quiz at the end of each chapter for members. The opening chapters are open to everyone. Adding it to your account uses credits, opens every chapter and keeps your progress.

Every claim is checked against the sources listed on the page (8 cited).