Kubernetes manifest generator

Fill in the form, copy the YAML, deploy. You always get a Deployment, and you can add a Service, Ingress, ConfigMap and Namespace. It all happens in your browser, so nothing you type goes anywhere.

Nothing you enter here is sent or saved. Privacy policy

Workload

Name

Namespace

Also create the namespace

Image

The default image runs as non-root, so it plays nicely with the security settings below.

Replicas

Container port

Environment variables

Resources

CPU request

Memory request

CPU limit

Memory limit

Leave a box empty to skip it. CPU is in cores or millicores (0.5, 500m) and memory takes a suffix (256Mi, 1Gi).

Health checks

Readiness probe Liveness probe

Both probes do an HTTP GET on the container port.

Security

Restricted pod security defaults: run as non-root, no privilege escalation, drop all capabilities, default seccomp profile Read-only root filesystem. Plenty of images need writable temp folders, so test it before you rely on it.

Run as user ID (optional)

Needed for the non-root setting when the image doesn't name a numeric user itself.

Service

Include

Type

Service port

Ingress

Include

Host

Path

Ingress class (optional)

TLS secret (optional)

cert-manager ClusterIssuer (optional)

Set an issuer and you get the cert-manager annotation and TLS. The secret name defaults to your workload name plus -tls.

ConfigMap

Include

Load every key into the container as an environment variable