Kubernetes Workload Patterns
Created by CodeCraft LLCDesign and review Kubernetes workloads
Product and technology names are trademarks of their respective owners, used only to identify what this skill covers. CodeCraft LLC is not affiliated with or endorsed by them.
by Jace (@jamick)v1.1.0 · updated 2026-10-18Report copyright infringement
Description
Design and review Kubernetes workloads - choosing Deployment, StatefulSet, DaemonSet, Job or CronJob, correct Deployment manifests (immutable selectors, pinned images, zero-downtime rolling updates, graceful shutdown), resource requests and limits (CPU throttling vs OOMKilled, QoS classes, sizing from observed usage), startup, readiness and liveness probes and their endpoints, HorizontalPodAutoscaler with stabilization windows, PodDisruptionBudgets, topology spread across nodes and zones, ConfigMaps and Secrets as env vars or volumes, and least-privilege pods (security contexts, Pod Security Admission, NetworkPolicies). Use whenever the user writes or reviews Kubernetes YAML, Helm charts or Kustomize overlays, sees OOMKilled, CrashLoopBackOff, pods restarting or stuck Pending, has downtime during deploys or node drains, sets up autoscaling, asks about probes, requests and limits, or hardens pods (runAsNonRoot, read-only filesystem, NetworkPolicy).
Included with all-access
$15.00 value as a single download
AiSkillz is in preview: browse the catalogue now - skill downloads and subscriptions open soon.
All skills are included with the all-access subscription
Changelog
v1.1.0Oct 18, 2026Latest
Added
references/pod-security.md: pod and container security contexts (non-root, read-only root filesystem, dropped capabilities, seccomp), turning off the service-account token, Pod Security Admission, default-deny NetworkPolicies with the DNS exception, and what breaks when you tighten them.- A least-privilege core rule, two pitfalls and three review checklist items.
v1.0.0Oct 16, 2026
Added
- First release.