| name | k8s |
| description | Generates and validates production-ready Pulumi K8s TypeScript resources following deploy.ts patterns, and diagnoses runtime cluster issues. Use when creating Deployments, Services, Ingress, Gateway API, HPA, ConfigMaps, Secrets, PVCs, DaemonSets, NetworkPolicies, PDBs, ValidatingAdmissionPolicies, ComponentResources, validating existing infra code, or debugging deployed K8s/EKS workloads. |
[H1][K8S]
Dictum: Infrastructure code follows deploy.ts canonical patterns; validation and debugging are integral.
Generate, validate, and debug Pulumi K8s resources in TypeScript: _CONFIG + _Ops + dispatch table.
Provider: current stable @pulumi/kubernetes (Server-Side Apply default) | K8s: 1.32-1.35 | Canonical: infrastructure/src/deploy.ts (207 LOC)
Tasks:
- Gather requirements (table below)
- Lookup API docs via
context7-tools for @pulumi/kubernetes target kind; fallback: WebSearch "@pulumi/kubernetes" "<kind>" TypeScript API 2025
- Read
references/pulumi_k8s_patterns.md -- naming, labels, security, mode dispatch
- Read
references/resource_templates.md -- templates, factories, ComponentResource, advanced patterns
- Read
infrastructure/src/deploy.ts -- canonical implementation
- Generate resources per architecture and standards below
- Validate against
references/validation.md -- security, reliability, cross-resource checks
- For runtime issues, read
references/debug.md -- decision tree, kubectl workflows, EKS diagnostics