| Raw K8s YAML | Simple deployments, one-off resources | | Kustomize | Environment variations, overlays without templating | | Helm | Complex apps, third-party charts, heavy templating | | Terraform | Cloud resources, infrastructure lifecycle | | GitHub Actions | CI/CD, automated testing, releases | | Makefile | Build automation, self-documenting targets |
Kustomize when: Simple env differences, readable manifests, patching YAML Helm when: Complex templating, third-party charts, release management
Every workload: non-root user, read-only filesystem, no privilege escalation, dropped capabilities, network policies.
Modelli di infrastruttura per azioni Kubernetes, Terraform, Helm, Kustomize e GitHub. Da utilizzare quando si prendono decisioni sull'architettura di K8, si sceglie tra Helm e Kustomize, si strutturano moduli Terraform, si scrivono flussi di lavoro CI/CD o si applicano best practice di sicurezza. Fonte: julianobarbosa/claude-code-skills.