Foundational, Behavioral, and Structural Patterns
Infrastructure | Technical Operations Excellence
| Pattern | Purpose |
|---|---|
| Health Probe | Liveness, readiness, startup checks |
| Predictable Demands | Resource requests/limits |
| Automated Placement | Node selectors, affinity rules |
| Declarative Deployment | Desired state via manifests |
| Pattern | Use Case |
|---|---|
| Batch Job | Run-to-completion workloads |
| Periodic Job | CronJobs for scheduled tasks |
| Daemon Service | Per-node agents (logging, monitoring) |
| Singleton Service | Leader election, exactly one instance |
| Stateful Service | Ordered, sticky identity (StatefulSet) |
| Pattern | Description |
|---|---|
| Init Container | Setup tasks before main container |
| Sidecar | Extend without modifying main app |
| Ambassador | Proxy for external communication |
| Adapter | Normalize heterogeneous output |
| Pattern | Use For |
|---|---|
| EnvVar Config | Simple key-value settings |
| ConfigMap | Non-sensitive config files |
| Secret | Sensitive data (encrypted) |
| Immutable Config | Version-pinned configurations |
Operators encode operational knowledge as software, automating day-2 operations.
| Pattern | K8s Implementation |
|---|---|
| Self-Healing | Restart policy, pod disruption budget |
| Scaling | HPA, VPA, cluster autoscaler |
| Rolling Updates | Deployment strategy |
| Blue-Green | Service selector switch |
| Canary | Weighted traffic split |
| Pattern | Implementation |
|---|---|
| Least Privilege | RBAC, SecurityContext |
| Network Isolation | NetworkPolicy |
| Secret Management | External Secrets Operator |
| Pod Security | PSS/PSA, read-only root |
Declarative Operations
Define desired state; let Kubernetes reconcile.