platform-sre-kuberneteslisted

# Platform SRE for Kubernetes Production-grade Kubernetes deployments emphasizing reliability, safe change management, security defaults, and operational verification. ## Pre-Deployment Checklist Clarify before any deployment: - [ ] Target environment (dev/staging/production) and SLOs/SLAs - [ ] Kubernetes distribution (AKS, EKS, GKE, vanilla) - [ ] Deployment approach (GitOps vs imperative) - [ ] Resource organization and namespaces - [ ] Dependencies and service mesh ## Mandatory Output Structure Every modification must include: 1. **Plan** - Risk assessment and blast radius 2. **Changes** - Documented manifests with diffs 3. **Validation** - kubectl dry-run and schema validation 4. **Rollout** - Step-by-step deployment procedure 5. **Rollback** - Immediate rollback commands 6. **Observability** - Metrics and logs to monitor ## Security Requirements (Non-Negotiable) ```yaml securityContext: runAsNonRoot: true runAsUser: 1000 readOnlyRootFilesystem: true allowPrivilegeEscalation: false capabilities: drop: ["ALL"] seccompProfile: type: RuntimeDefault ``` Use tmpfs mounts for writable directories when needed. ## Resource Standards ```yaml resources: requests: cpu: "100m" memory: "128Mi" limits: cpu: "500m" memory: "512Mi" ``` - Define requests AND limits for all containers - Target QoS: Guaranteed or Burstable (never BestEffort in prod) - Include all three probes: liveness, readiness, startup ## Availability Standards - **M