Kubernetes Pod Spec: Better Defaults & Security

Make your pods better! I go through an example Kubernetes Pod Specification, or "pod spec", and show off all my recommendations that I try to use in every workload.

😍 Support this channel on Patreon! It's the #1 way to support this channel and live show, my podcast, and open source   / bretfisher  

💬 Join the discussion with 10k other DevOps people on our Discord chat server https://devops.fan

👕👚☕️ The Loot Box store has launched! Get some DevOps, Sysadmin, and DevLife SWAG! https://store.bretfisher.com

Topics
======
👉 EXAMPLE Repo: https://github.com/BretFisher/podspec 👈
QoS for Pods: https://kubernetes.io/docs/tasks/conf...
Security Context Docs: https://kubernetes.io/docs/tasks/conf...
More Security Context Settings: https://snyk.io/blog/10-kubernetes-se...

Bret Fisher
=========
👨‍🏫 Best coupons for my Docker and Kubernetes courses at https://www.bretfisher.com/courses
🎧 Listen to my podcast of this channel's past live shows at https://www.bretfisher.com/podcast

Music: Meander by Jobii
https://www.epidemicsound.com/track/4...

Chapters
========
00:00 Intro
00:32 Good Defaults for K8s Pod Specs
01:17 GitHub Repo Example
01:40 pod.yaml
02:35 Container Ports
04:15 Container Probes
08:45 Container Resources
11:14 Security Context, Part 1
12:20 Container Shutdown
14:52 Security Context, Part 2
16:18 Container Run As
19:19 Assignments

#pod #devsecops #kubernetes