Edit, Debug, & Secure the K8s Manifest Lifecycle: Why is it Important and How Can You Get it Right?
summary
Shows concrete steps and tools to stop wasting hours debugging manifests: use kubectl or IDE snippets to create YAML, preview templated output from Helm and Kustomize, run three layers of checks—syntax, JSON‑schema, and reference validation—and then enforce OPA policy validation for image tags/privileges. Demo creates a deployment, fixes a missing image tag, deploys to Minikube, sees the pod and status added, and deletes it. Advice: prefer latest stable API, validate generated manifests before apply, and use GitOps only with team buy‑in.
AI-written summary · about
chapters (17)
- 0:00Intro
- 1:07What are Kubernetes manifests?
- 1:58Basic Manifest Structure
- 3:00Manifest versions and schemas
- 4:53Manifest relationships
- 6:29Manifest Status
- 9:39Creating/editing manifests
- 10:33Next up: Validating manifests
- 14:33Finally-deploying manifests to your cluster
- 20:35Manifest Templating
- 23:41Custom Templating: Helm
- 24:45Helm file structure
- 25:18Using Helm and Kustomize together
- 26:37Templates in the Manifest lifecycle
- 27:52The Kubernetes Manifest lifecycle - revisited
- 32:00Tooling for the Kubernetes Manifest lifecycle
- 34:57Getting it right - Best Practices
related talks
29mDeploy With Confidence: Pre-Deployment Tasks and Manifests Management
30mLet's Kustomize Our K8S Deployments with Style!
57mStable, Safer, Faster: AKA How to Avoid K8s Misconfig with Automation
21mAre you ready to delete some YAML?
26mEverything You Should Be Doing, But Aren’t: DevSecOps for K8s Workflows
07mKustomize: Manage K8S manifests natively
55mHow to develop apps on K8s and not die trying
26mFive Hundred Twenty-five Thousand Six Hundred K8s CLI’s