Kubernetes Deployment Manifest & Resource Limits Audit
Audit Kubernetes manifests for CPU/memory requests, readiness/liveness probes, HPA, and Pod Disruption Budgets.
Audit Kubernetes deployment manifests for CPU/Memory requests and limits, readiness/liveness/startup probes, PodDisruptionBudgets, and multi-AZ anti-affinity.
Execution Workflow Procedure
Ordered steps the coding agent executes when performing this skill.
Size CPU & Memory Requests and Limits
Size resource requests to prevent node over-commit and configure limits to avoid CPU throttling and OOMKilled evictions.
Configure Startup, Liveness, and Readiness Probes
Implement startup probes for slow-starting apps to prevent premature liveness restart loops.
Enforce High Availability & Security Context
Configure PodDisruptionBudgets (PDB), podAntiAffinity across availability zones, and readOnlyRootFilesystem security contexts.
Agent Safety Guardrails & Anti-Hallucination Rules
- DO NOT omit resource requests from production Kubernetes containers.
- DO NOT point liveness probes at endpoints that depend on external databases.
Expected Output Format
Production Deployment, Service, HPA, and PDB YAML manifests.
Domain Verification Checks
Example Agent Invocations
Install / Configure This Skill
# Place in .cursorrules or create .cursor/rules/kubernetes-manifest-resource-audit.mdc # Trigger: Whenever you perform kubernetes deployment manifest & resource limits audit --- name: kubernetes-manifest-resource-audit description: Audit and harden Kubernetes deployment manifests for resource limits, health probes, HPA, and PodDisruptionBudgets. version: 1.0.0 compatibility: [Cursor, Claude Code, Cline, Roo Code, Antigravity] --- # Kubernetes Deployment Manifest & Resource Limits Audit ## Objective Ensure production Kubernetes workloads are resilient against node failures, memory pressure, and cluster drain events. ## Workflow 1. **Resource Sizing**: Set accurate CPU/memory requests and limits to prevent OOM evictions. 2. **Health Probes**: Configure startup, liveness, and readiness probes with independent failure thresholds. 3. **High Availability**: Enforce PodDisruptionBudgets and multi-AZ pod anti-affinity.
Need a quick one-time prompt for chat?
Try the Kubernetes Deployment, HPA & Resource Limits Review — a lightweight version designed for 1-click copying directly into Claude, ChatGPT, or Cursor chat.
SprintKit Workflow Integrations
Complementary tools and checklists to pair with this agent workflow.
Related Agent Skills
Explore related procedural workflows in this discipline.
Multi-Stage Dockerfile Hardening & Layer Caching
Optimize Dockerfiles for minimal image size, non-root security, layer caching, and CVE vulnerability reduction.
GitHub Actions CI/CD Pipeline & Caching Optimization
Speed up slow GitHub Actions workflows with dependency caching, matrix parallelization, and security secrets.
Infrastructure-as-Code (Terraform) Security & Drift Review
Audit Terraform HCL code for IAM over-permissioning, unencrypted storage, public security groups, and drift risks.