Copy of the legacy ~/.pi/agent/docs tree rebuilt as the command-center knowledge base: concept files promoted to path identity, index listings stripped of frontmatter, all wikilinks/relative links resolved, every checkable claim verified against the live fleet (Dankserver = Ryzen 7 7700X + RTX 3090; Strix Halo is Dankclaw), unverifiable claims tagged. kb-lint exits 0.
2.0 KiB
2.0 KiB
type, title, description, tags, timestamp, verified
| type | title | description | tags | timestamp | verified | |||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| reference | Kubernetes | Current best practices for Kubernetes - Helm charts, k3s, k0s, and Talos Linux. |
|
2026-08-11 | 2026-08-28 |
Kubernetes
This page covers current (2025/2026) best practices for Kubernetes.
Helm
Use Helm to manage charts. Follow the canonical chart layout:
my-chart/
├── Chart.yaml
├── values.yaml
├── values.schema.json
├── charts/
├── templates/
│ ├── deployment.yaml
│ ├── service.yaml
│ └── _helpers.tpl
├── .helmignore
└── NOTES.txt
Use _helpers.tpl for consistent labels, such as app.kubernetes.io/*. Separate values.yaml per environment. Pin chart versions in CI. Run helm lint before packaging.
Set securityContext to non-root and read-only root filesystem. Set resource requests and limits.
Distribution Choices
| Tool | Best For | Notes |
|---|---|---|
| k3s | Fast bootstrap | Single binary, embedded addons, quick setup. |
| k0s | Vanilla Kubernetes | No host dependencies, k0sctl lifecycle tool. |
| Talos Linux | Secure immutable clusters | Small footprint, API-driven config. |
k3s
Install with:
curl -sfL https://get.k3s.io | sh -
k3s is a single binary under 100 MB. It is ready in about 30 seconds. Use SQLite for single-node or embedded etcd for high availability.
Talos Linux
Talos is an immutable Kubernetes OS. It has no SSH, no shell, and no package manager. Configure it with declarative YAML through the talosctl gRPC API. Use automatic A/B upgrades with rollback.
Related Tools
- Cilium or Calico for networking.
- ArgoCD or Flux for GitOps deployment.
- k0sctl for cluster lifecycle.