Kubernetes Production Checklist

K8s Production Checklist

• Set resource requests and limits on all containers
• Configure liveness and readiness probes
• Use rolling update strategy with maxUnavailable and maxSurge
• Store sensitive data in Secrets, not ConfigMaps
• Set up HPA for auto-scaling under load
• Use Namespaces to isolate environments
• Apply NetworkPolicies to restrict pod-to-pod traffic
• Enable RBAC and use least-privilege service accounts
• Run pods as non-root with securityContext
• Set up Prometheus and Grafana for metrics
• Configure PodDisruptionBudgets for high availability

securityContext:
  runAsNonRoot: true
  runAsUser: 1000
  readOnlyRootFilesystem: true