Kubernetes and Helm Rules

When to use this

Place in Kubernetes/Helm infrastructure repositories to enforce resource quotas, liveness/readiness probes, and static security lints.

The template

# AGENTS.md

## Project Context

Kubernetes cluster manifests and Helm 3 chart templates for cloud deployment.

## Commands

- `helm lint charts/*` validate Helm chart syntax
- `kube-linter lint .` run security linting on YAML manifests
- `kubectl diff -f manifests/` dry-run manifest differences

Run `helm lint` and `kube-linter lint .` before committing changes.

## Conventions

- Specify `resources.limits` and `resources.requests` for CPU and Memory on all containers.
- Configure `livenessProbe` and `readinessProbe` for HTTP endpoints.
- Store environment secrets in Kubernetes Secret manifests (SOPS/SealedSecrets encrypted).

## Restrictions

- Do not use `latest` image tags in Deployment specs.
- Do not run containers as root (`securityContext.runAsNonRoot: true`).

How to use

Save to repository root as AGENTS.md.