- Pod Affinity and Anti-Affinity
- Taints and Tolerations
- Pod Disruption Budgets(PDB)
- Init containers for setup
- Pod Topology Spread Constraints
- Custom Scheduler
- HPA Based on Custom Metrics
- Volume Snapshotting for Stateful Applications
- Network Policies
- PSA(Pod Security Admission)
- Network Policies for Egress Control
- Seccomp Profiles for Syscall Filtering
- Read-Only Root Filesystems
- Kubernetes Secrets for Sensitive Data
- Resource Quotas and Limit Ranges
- Node Affinity
- Auto-scaling Nodes with Cluster Autoscaler
- Resource Quota
- Proactive Node Maintenance with Node Problem Detector
- PriorityClass for Workload Precedence
- CronJobs
- Ingress for External Access
- Service Mesh with Istio
- ExternalDNS for Dynamic DNS Management
- Vertical Pod Autoscaling
클라우드쟁이