Kubernetes: Enhance alpine pod configurations with improved resource management, security contexts, and startup messages

Signed-off-by: NotHarshhaa <[email protected]>

Author: NotHarshhaa

Diff for: alpine/alpine-pod-2-containers.yaml

@@ -1,26 +1,46 @@
 apiVersion: v1
 kind: Pod
 metadata:
-  #creationTimestamp: null
-  labels:
-    run: alpine-2-containers
   name: alpine-2-containers
+  labels:
+    app: alpine-2-containers
 spec:
   containers:
-  - args:
-    - /bin/sh
-    - -c
-    - echo hello;sleep 10000
-    image: alpine
-    name: alpine1
-    #resources: {}
-  - args:
-    - /bin/sh
-    - -c
-    - echo hello;sleep 10000
-    image: alpine
-    name: alpine2
-    #resources: {}
+    - name: alpine1
+      image: alpine:latest
+      command: ["/bin/sh", "-c"]
+      args:
+        - |
+          echo "[alpine1] Starting up...";
+          sleep 10000;
+      resources:
+        requests:
+          cpu: "100m"
+          memory: "64Mi"
+        limits:
+          cpu: "250m"
+          memory: "128Mi"
+      securityContext:
+        runAsNonRoot: true
+        allowPrivilegeEscalation: false
+
+    - name: alpine2
+      image: alpine:latest
+      command: ["/bin/sh", "-c"]
+      args:
+        - |
+          echo "[alpine2] Starting up...";
+          sleep 10000;
+      resources:
+        requests:
+          cpu: "100m"
+          memory: "64Mi"
+        limits:
+          cpu: "250m"
+          memory: "128Mi"
+      securityContext:
+        runAsNonRoot: true
+        allowPrivilegeEscalation: false
+
   dnsPolicy: ClusterFirst
   restartPolicy: Never
-#status: {}

Diff for: alpine/alpine-pod-service-account.yaml

@@ -1,20 +1,28 @@
 apiVersion: v1
 kind: Pod
 metadata:
-  #creationTimestamp: null
-  labels:
-    run: alpine-sa
   name: alpine-sa
+  labels:
+    app: alpine-sa
 spec:
   serviceAccountName: mysa
   containers:
-  - args:
-    - /bin/sh
-    - -c
-    - echo hello;sleep 3600
-    image: alpine
-    name: alpine-2-containers
-   # resources: {}
+    - name: alpine
+      image: alpine:latest
+      command: ["/bin/sh", "-c"]
+      args:
+        - |
+          echo "[INFO] Starting container with ServiceAccount: mysa";
+          sleep 3600;
+      resources:
+        limits:
+          memory: "64Mi"
+          cpu: "250m"
+        requests:
+          memory: "32Mi"
+          cpu: "100m"
+      securityContext:
+        runAsNonRoot: true
+        allowPrivilegeEscalation: false
   dnsPolicy: ClusterFirst
   restartPolicy: Never
-#status: {}

Diff for: alpine/alpine-pod-share-volumes.yaml

@@ -1,32 +1,41 @@
 apiVersion: v1
 kind: Pod
 metadata:
-  labels:
-    run: alpine-2-containers
   name: alpine-2-containers-share-volume
+  labels:
+    app: alpine-volume-demo
 spec:
   containers:
-  - args:
-    - /bin/sh
-    - -c
-    - echo hello;sleep 10000
-    image: alpine
-    name: alpine1
-    volumeMounts:
-      - name: share
-        mountPath: "/tmp/share1"
-  - args:
-    - /bin/sh
-    - -c
-    - echo hello;sleep 10000
-    image: alpine
-    name: alpine2
-    volumeMounts:
-      - name: share
-        mountPath: "/tmp/share2"
-  dnsPolicy: ClusterFirst
-  restartPolicy: Never
+    - name: writer
+      image: alpine
+      command: ["/bin/sh", "-c"]
+      args:
+        - |
+          echo "[Writer] Writing to shared volume...";
+          echo "Shared data from writer" > /shared/message.txt;
+          echo "[Writer] Sleeping...";
+          sleep 10000;
+      volumeMounts:
+        - name: shared-volume
+          mountPath: /shared
+
+    - name: reader
+      image: alpine
+      command: ["/bin/sh", "-c"]
+      args:
+        - |
+          echo "[Reader] Waiting for message...";
+          sleep 5;
+          cat /shared/message.txt || echo "No message found!";
+          echo "[Reader] Sleeping...";
+          sleep 10000;
+      volumeMounts:
+        - name: shared-volume
+          mountPath: /shared
+
   volumes:
-    - name: share
+    - name: shared-volume
       emptyDir: {}
-#status: {}
+
+  dnsPolicy: ClusterFirst
+  restartPolicy: Never

Diff for: alpine/alpine-pod.yaml

@@ -1,19 +1,27 @@
 apiVersion: v1
 kind: Pod
 metadata:
-  #creationTimestamp: null
-  labels:
-    run: alpine-2-containers
   name: alpine-2-containers
+  labels:
+    app: alpine-2-containers
 spec:
   containers:
-  - args:
-    - /bin/sh
-    - -c
-    - echo hello;sleep 3600
-    image: alpine
-    name: alpine-2-containers
-    #resources: {}
+    - name: alpine
+      image: alpine:latest
+      command: ["/bin/sh", "-c"]
+      args:
+        - |
+          echo "[alpine] Hello from container";
+          sleep 3600;
+      resources:
+        requests:
+          memory: "32Mi"
+          cpu: "100m"
+        limits:
+          memory: "64Mi"
+          cpu: "250m"
+      securityContext:
+        runAsNonRoot: true
+        allowPrivilegeEscalation: false
   dnsPolicy: ClusterFirst
   restartPolicy: Never
-#status: {}